Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/YAmmJhyB_h-uP0bt7pChaUBYkG4.roa
File:                     YAmmJhyB_h-uP0bt7pChaUBYkG4.roa (raw, json)
Hash identifier:          2QWIeh79LiaCKjIcaN8PoKc9z0fkWg1AUVaFtkD8eVc=
Subject key identifier:   60:09:A6:26:1C:81:FE:1F:AE:3F:46:ED:EE:90:A1:69:40:58:90:6E
Certificate issuer:       /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial:       0194929ADB901684D31EDF3155EAF45C45B2
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/YAmmJhyB_h-uP0bt7pChaUBYkG4.roa
Signing time:             Thu 23 Jan 2025 10:00:09 +0000
ROA not before:           Thu 23 Jan 2025 10:00:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31394
IP address blocks:        83.137.40.0/21 maxlen: 21
                          2a00:11d0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:92:9a:db:90:16:84:d3:1e:df:31:55:ea:f4:5c:45:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
        Validity
            Not Before: Jan 23 10:00:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6009a6261c81fe1fae3f46edee90a1694058906e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cd:0a:ea:1a:31:1c:61:7a:7a:78:8b:56:db:
                    1f:3b:35:ba:5e:9b:5c:c9:c0:c2:1b:14:29:17:50:
                    22:25:99:9c:6e:86:94:bb:2b:8c:e5:4f:24:3a:26:
                    a0:2d:4d:f5:de:21:ba:4d:a7:9a:90:ae:e8:f2:34:
                    76:01:26:4e:17:ac:ac:d0:36:e0:c8:ab:25:fc:27:
                    b4:13:b2:a1:fe:8d:a9:2a:78:8b:15:bb:5e:a6:64:
                    a4:5a:f8:d1:91:ae:9f:65:e9:f8:46:91:26:16:ce:
                    f7:70:32:e5:f6:d8:d3:d5:27:7b:c4:69:64:28:60:
                    d8:1d:02:ff:88:03:32:bf:cf:47:fa:f1:3c:60:4a:
                    13:00:4d:71:24:c7:d8:4a:17:5f:30:1f:90:bb:d1:
                    b3:43:fa:c3:82:5d:fd:19:b8:51:d1:55:a5:16:54:
                    16:c5:e2:91:37:ad:7c:a0:a0:8e:54:87:9a:7c:43:
                    5b:87:90:54:f4:81:6d:9f:e0:6f:84:9b:98:bc:7c:
                    a2:21:5e:a5:58:15:99:09:90:52:a0:33:1a:fb:48:
                    84:25:34:1c:77:6e:36:45:32:9e:e6:52:44:e9:6a:
                    c3:1f:70:67:51:41:7c:c6:38:14:00:79:64:39:c0:
                    f0:d1:ac:7f:28:39:00:7c:48:99:94:c1:4c:27:ea:
                    d0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:09:A6:26:1C:81:FE:1F:AE:3F:46:ED:EE:90:A1:69:40:58:90:6E
            X509v3 Authority Key Identifier:
                keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/YAmmJhyB_h-uP0bt7pChaUBYkG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.137.40.0/21
                IPv6:
                  2a00:11d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d7:10:15:a2:e3:15:8b:3e:a7:18:2d:8a:a2:16:8e:2e:20:d4:
         88:69:46:bb:0a:c7:a8:e1:81:eb:4e:39:ed:b5:8e:5c:10:bc:
         7e:1e:3f:cf:b0:90:3c:e9:1a:4b:1b:00:4d:52:f7:6b:ab:8f:
         51:fc:f7:5e:bf:bd:a5:fe:6d:5c:cf:1a:e6:95:42:95:55:08:
         4a:40:ef:3e:c0:91:8d:2b:24:32:46:2c:2d:3e:e5:65:6b:3c:
         69:b6:91:66:9f:f2:6d:cd:ec:eb:a5:c6:06:fa:5d:a5:e7:5e:
         fc:0c:fb:37:67:98:e6:5e:33:dd:f6:0c:20:3b:41:b8:cf:89:
         4d:a7:ca:c8:bf:c5:2d:d7:b4:06:08:9b:8f:29:1e:83:f4:af:
         a6:f2:61:20:d4:7e:4a:ea:76:a7:15:af:95:3c:92:28:7e:cf:
         c0:b5:5e:7a:4a:21:73:26:db:d5:f7:96:f1:a7:54:fb:0c:65:
         6b:32:45:94:d1:4d:7a:2f:25:ed:78:72:5f:1c:26:3a:20:d9:
         b7:ec:03:6d:39:df:ea:54:cc:d9:3e:b0:a9:07:34:b7:33:96:
         8b:a4:74:6f:8b:f1:c7:db:7f:b5:11:6b:ec:28:e2:24:ef:fb:
         5e:bd:87:46:a4:67:2f:d3:7c:1f:20:27:ad:c3:8c:f7:18:6a:
         f7:4b:21:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----