Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/v8biWOV_nsNX1ilIaxvt6SJe6Ow.roa
File:                     v8biWOV_nsNX1ilIaxvt6SJe6Ow.roa (raw, json)
Hash identifier:          ncGnxGmhlyRE3Vp5tuC1OddbegBnGSDwDfQcrYZJehw=
Subject key identifier:   BF:C6:E2:58:E5:7F:9E:C3:57:D6:29:48:6B:1B:ED:E9:22:5E:E8:EC
Certificate issuer:       /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial:       01942445A85E86F2CBAC6A6F426844533377
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/v8biWOV_nsNX1ilIaxvt6SJe6Ow.roa
Signing time:             Wed 01 Jan 2025 23:48:52 +0000
ROA not before:           Wed 01 Jan 2025 23:48:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201959
IP address blocks:        185.58.64.0/22 maxlen: 22
                          2a04:df40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:a8:5e:86:f2:cb:ac:6a:6f:42:68:44:53:33:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
        Validity
            Not Before: Jan  1 23:48:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bfc6e258e57f9ec357d629486b1bede9225ee8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:92:4e:44:e9:c5:18:f2:31:c1:af:24:ec:f5:
                    69:f9:22:95:56:89:e9:26:d5:f7:09:33:77:cc:d5:
                    64:d5:69:39:f5:8b:05:4a:db:d8:26:44:65:57:4b:
                    41:12:20:8f:0c:4c:5b:a3:66:e4:c9:5f:ec:46:16:
                    47:1c:87:cf:19:44:5a:46:17:f4:d8:fd:28:4e:df:
                    dd:5d:66:f1:a3:2a:83:55:16:e4:b1:d6:8c:0e:26:
                    26:ee:8a:71:fb:93:6b:18:80:c9:8c:a4:e1:f9:6c:
                    fb:1b:b8:3e:23:74:69:98:49:69:24:1c:23:77:be:
                    2b:69:9c:cc:4b:4c:a8:17:48:ba:c4:59:2b:39:43:
                    8a:8e:62:08:49:07:21:8e:66:0a:87:6c:e7:37:68:
                    3d:b3:0a:fc:1f:1d:3a:b2:47:9a:3a:3a:2e:23:cb:
                    00:95:f0:4d:31:0c:7e:8e:87:d3:04:fb:4b:94:2e:
                    83:a4:f6:ca:dd:87:0b:3d:b3:22:02:90:b1:db:d7:
                    81:9b:a0:1c:21:d5:5b:d0:7e:bf:93:ab:91:65:7f:
                    41:89:41:02:a3:51:a4:d3:b2:e6:91:7d:81:81:69:
                    69:7d:be:c2:fd:8a:d0:13:f0:35:94:c2:d3:0e:c5:
                    64:6d:d8:c6:b6:a2:30:20:93:67:8b:86:4f:cd:24:
                    82:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C6:E2:58:E5:7F:9E:C3:57:D6:29:48:6B:1B:ED:E9:22:5E:E8:EC
            X509v3 Authority Key Identifier:
                keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/v8biWOV_nsNX1ilIaxvt6SJe6Ow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.58.64.0/22
                IPv6:
                  2a04:df40::/29

    Signature Algorithm: sha256WithRSAEncryption
         a4:ab:9e:ec:ad:32:77:86:5a:29:23:44:94:e9:f4:f4:a1:82:
         a5:3d:db:5a:b5:17:ab:8f:34:f9:a9:6b:58:b2:0a:9a:65:11:
         99:15:13:49:b3:1a:81:34:3e:cd:18:1a:2d:b7:78:74:77:59:
         b7:fd:ba:c5:dc:36:6d:e1:84:df:bd:70:db:1a:6f:43:49:41:
         7b:f9:c3:5f:52:78:97:ab:be:bc:9c:f9:b4:12:b3:eb:ce:ec:
         a7:41:d6:c8:1b:6a:3b:ca:85:22:94:12:53:85:f0:94:54:de:
         25:bc:b1:39:76:74:87:be:db:7e:dc:7f:6f:88:e0:96:79:3e:
         87:da:2f:e8:f3:e2:83:45:de:19:d7:2d:36:77:6b:4c:92:c0:
         66:cc:88:49:41:6f:4b:d3:ae:24:f3:26:39:f3:fe:9e:f2:a2:
         c3:62:40:a6:d1:42:43:01:32:15:76:61:e5:b3:16:4a:ba:65:
         b8:a5:62:cb:84:6a:dd:e7:47:c6:38:ce:1e:bb:7e:29:c5:e6:
         72:b8:57:2f:af:a0:5b:5c:a2:00:62:44:c6:44:a3:86:06:5d:
         44:82:11:97:61:60:b3:1c:14:50:e3:0d:b0:61:44:7f:2d:91:
         58:1c:31:e9:c9:4f:4c:ca:f3:a2:2a:48:5b:5e:3d:48:ae:83:
         d9:d4:3d:58
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQkRahehvLLrGpvQmhEUzN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODk0NWQxZmM3YjQ3MGU2ODczNjU1Zjc1NTkzMDBlMDk3
YTY1ZTgwHhcNMjUwMTAxMjM0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmM2ZTI1OGU1N2Y5ZWMzNTdkNjI5NDg2YjFiZWRlOTIyNWVlOGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJJOROnFGPIxwa8k7PVp+SKVVonp
JtX3CTN3zNVk1Wk59YsFStvYJkRlV0tBEiCPDExbo2bkyV/sRhZHHIfPGURaRhf0
2P0oTt/dXWbxoyqDVRbksdaMDiYm7opx+5NrGIDJjKTh+Wz7G7g+I3RpmElpJBwj
d74raZzMS0yoF0i6xFkrOUOKjmIISQchjmYKh2znN2g9swr8Hx06skeaOjouI8sA
lfBNMQx+jofTBPtLlC6DpPbK3YcLPbMiApCx29eBm6AcIdVb0H6/k6uRZX9BiUEC
o1Gk07LmkX2BgWlpfb7C/YrQE/A1lMLTDsVkbdjGtqIwIJNni4ZPzSSCwwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFL/G4ljlf57DV9YpSGsb7ekiXujsMB8GA1UdIwQY
MBaAFOCJRdH8e0cOaHNlX3VZMA4JemXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQt
MjhlNzczZGI5MWMyLzEvdjhiaVdPVl9uc05YMWlsSWF4dnQ2U0plNk93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQtMjhlNzczZGI5MWMy
LzEvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTpAMA0E
AgACMAcDBQMqBN9AMA0GCSqGSIb3DQEBCwUAA4IBAQCkq57srTJ3hlopI0SU6fT0
oYKlPdtatRerjzT5qWtYsgqaZRGZFRNJsxqBND7NGBott3h0d1m3/brF3DZt4YTf
vXDbGm9DSUF7+cNfUniXq768nPm0ErPrzuynQdbIG2o7yoUilBJThfCUVN4lvLE5
dnSHvtt+3H9viOCWeT6H2i/o8+KDRd4Z1y02d2tMksBmzIhJQW9L064k8yY58/6e
8qLDYkCm0UJDATIVdmHlsxZKumW4pWLLhGrd50fGOM4eu34pxeZyuFcvr6BbXKIA
YkTGRKOGBl1EghGXYWCzHBRQ4w2wYUR/LZFYHDHpyU9MyvOiKkhbXj1IroPZ1D1Y
-----END CERTIFICATE-----