Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/takXMVWWq86gQFEdW1EUOBKN5bA.roa
File:                     takXMVWWq86gQFEdW1EUOBKN5bA.roa (raw, json)
Hash identifier:          aj1iYELR5J1LrrkI2DJAheQdQ03iRDb31bSm3xq1fzk=
Subject key identifier:   B5:A9:17:31:55:96:AB:CE:A0:40:51:1D:5B:51:14:38:12:8D:E5:B0
Certificate issuer:       /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Certificate serial:       019425FDD81CC7A9E6DA7A41C497169D5294
Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/takXMVWWq86gQFEdW1EUOBKN5bA.roa
Signing time:             Thu 02 Jan 2025 07:49:40 +0000
ROA not before:           Thu 02 Jan 2025 07:49:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197931
IP address blocks:        45.128.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:d8:1c:c7:a9:e6:da:7a:41:c4:97:16:9d:52:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
        Validity
            Not Before: Jan  2 07:49:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b5a917315596abcea040511d5b511438128de5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:e5:1b:5b:ed:e0:b2:d4:7c:51:06:22:8e:
                    1f:99:73:27:fd:ae:03:bd:80:d4:04:20:77:f4:f4:
                    37:27:d1:3d:69:96:ba:9e:67:45:2e:b6:59:d6:95:
                    fe:d1:fd:d4:e1:0b:e8:d7:e6:58:60:6e:06:14:c2:
                    01:90:76:93:9a:fb:2e:e6:4f:cf:00:5f:07:d8:a9:
                    60:7d:d5:7f:90:3c:33:75:72:17:85:2c:a6:78:8f:
                    01:0c:cf:57:d8:6d:9b:52:07:1e:84:b3:83:8e:c2:
                    a9:ab:bc:ca:48:c1:2f:e3:d4:68:9a:35:89:7b:52:
                    4b:13:c6:e7:e8:fb:1b:75:d6:ff:c4:d9:e7:45:88:
                    7c:f7:6a:98:01:95:82:c3:66:06:da:22:bd:4c:47:
                    74:69:5a:84:78:ae:3b:41:e7:59:e8:70:94:43:59:
                    ea:e7:5f:0e:32:dc:8d:27:dc:73:4c:f7:50:0a:25:
                    93:21:31:04:b9:f4:cb:07:c3:db:9e:de:6d:4a:ba:
                    53:cf:c7:4b:9e:bc:df:64:e5:42:6f:5e:c7:fa:c5:
                    4e:88:30:44:62:d6:16:67:50:8a:ef:f5:1d:66:9b:
                    67:74:c4:97:c5:2a:09:ff:ff:3c:fc:ea:a9:12:62:
                    69:62:51:3d:ca:39:80:5a:1c:f6:15:5f:a1:ff:36:
                    09:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A9:17:31:55:96:AB:CE:A0:40:51:1D:5B:51:14:38:12:8D:E5:B0
            X509v3 Authority Key Identifier:
                keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/takXMVWWq86gQFEdW1EUOBKN5bA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ad:ce:e0:fd:3f:c9:4f:a2:ea:80:07:25:fc:5a:f4:7a:c5:
         95:a5:e6:77:80:ee:eb:87:72:0e:5f:c3:e0:24:7c:4d:ba:ec:
         00:8c:d1:39:5c:eb:a5:59:d5:e0:67:a8:08:0d:5e:ff:e8:68:
         73:cc:ba:69:88:3e:96:43:89:68:eb:8e:66:24:88:a4:df:01:
         96:87:29:ce:8f:05:33:50:55:3f:31:02:52:47:40:a0:fe:1f:
         57:03:fe:a0:14:de:6f:9a:a5:72:73:c0:5f:be:32:02:df:6f:
         b6:56:41:12:bc:67:0d:73:10:88:42:bc:cd:ad:4e:15:37:9c:
         7e:c5:d2:17:6a:8b:98:0c:68:91:14:a5:e4:24:fb:e1:94:33:
         47:be:b9:d0:1d:07:22:be:83:97:2c:3a:ed:21:02:17:9d:ce:
         a3:22:af:42:51:82:1f:e9:81:d2:8a:82:80:41:ce:91:cd:dc:
         df:90:f4:c6:7e:62:c0:b5:25:e8:99:e5:7e:b4:f3:15:8d:ff:
         aa:d1:5d:73:4d:22:dc:1e:78:6c:4a:4c:4e:93:27:5c:93:61:
         41:83:69:3c:e2:69:65:89:a0:2a:eb:5a:8f:0e:f2:ff:c5:63:
         ba:df:cf:88:ac:1a:30:79:5c:2c:42:24:f4:fa:75:d1:e5:9a:
         49:b1:a8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----