Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3235322e35322e302f32322d3332203d3e203430303231.roa
File:                     352e3235322e35322e302f32322d3332203d3e203430303231.roa (raw, json)
Hash identifier:          m1Iw7/gbMVraSio3/PYp/VfB7wwvpNzJAUa6ketQNAk=
Subject key identifier:   16:9D:5F:50:4B:01:06:C8:B9:E0:68:DA:1D:22:2B:E4:CF:EF:66:24
Certificate issuer:       /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial:       26F6E8E5A5C94B9D370C9DC6B3765475892297C8
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3235322e35322e302f32322d3332203d3e203430303231.roa
Signing time:             Sat 05 Apr 2025 09:45:59 +0000
ROA not before:           Sat 05 Apr 2025 09:40:59 +0000
ROA not after:            Sat 04 Apr 2026 09:45:59 +0000
asID:                     40021
IP address blocks:        5.252.52.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f6:e8:e5:a5:c9:4b:9d:37:0c:9d:c6:b3:76:54:75:89:22:97:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
        Validity
            Not Before: Apr  5 09:40:59 2025 GMT
            Not After : Apr  4 09:45:59 2026 GMT
        Subject: CN=169D5F504B0106C8B9E068DA1D222BE4CFEF6624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:9e:87:8b:0b:c4:a3:21:58:b6:5e:37:b7:
                    75:19:4b:f9:a7:67:a4:54:a2:39:d0:47:c9:cf:1e:
                    33:b0:72:5c:38:cc:91:34:37:61:7a:cc:9b:55:52:
                    46:70:f3:16:84:1e:51:56:ce:f7:b2:1c:08:27:15:
                    2a:d2:03:53:1b:a4:66:e3:4a:b1:f0:06:d5:89:9e:
                    d0:8c:18:4e:23:22:8d:2c:8b:f8:6e:6a:04:53:25:
                    8c:18:45:4d:15:4f:5b:c9:ad:31:8a:94:6c:dc:33:
                    76:57:75:b0:2c:b2:15:4a:68:4e:14:8c:c1:41:91:
                    94:12:74:8a:01:61:1c:33:ba:23:70:66:36:a0:3c:
                    83:a8:46:44:c9:a5:dc:ef:81:91:bd:02:e1:12:3d:
                    41:34:24:91:e7:4b:41:e0:94:d0:24:44:73:bd:b2:
                    cd:96:c2:02:d5:5d:50:51:d1:10:43:d4:0e:f8:55:
                    12:cb:a6:15:d4:a8:4c:71:1a:4e:13:0d:8f:fb:f7:
                    36:76:d0:09:21:8f:f6:75:ff:07:cf:f1:c6:dd:be:
                    73:6f:84:61:68:44:17:39:98:c9:98:e5:00:b1:3b:
                    d7:d7:62:b3:65:2d:25:75:8a:bc:b0:3c:40:a0:a1:
                    65:1d:be:38:16:83:66:76:ca:5d:00:36:28:66:10:
                    dd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9D:5F:50:4B:01:06:C8:B9:E0:68:DA:1D:22:2B:E4:CF:EF:66:24
            X509v3 Authority Key Identifier:
                keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3235322e35322e302f32322d3332203d3e203430303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:9e:fb:73:c8:28:0d:1d:4c:6b:cd:5d:a6:78:9b:9f:7c:99:
         fd:b9:5a:81:85:8f:07:98:30:09:f8:6a:e3:2b:dc:f5:91:57:
         5c:ef:aa:7b:67:66:90:00:ac:dd:dd:26:cf:16:a3:84:c1:48:
         29:d4:83:2e:12:78:aa:a6:89:a5:74:ab:da:00:dd:67:11:ac:
         cf:ba:60:89:86:16:18:9a:46:30:b9:96:24:83:ae:f4:c9:1a:
         59:51:63:40:b2:9f:d5:5f:62:bf:42:26:97:31:db:a6:ba:a4:
         a2:96:f1:2c:63:bd:2b:fc:7b:2f:c7:f4:cc:7d:fd:13:a8:c9:
         43:0d:da:5e:34:5e:9a:cb:0b:ae:97:4a:d5:5d:ad:8f:a0:71:
         8e:58:3a:ac:a0:79:9f:1c:49:26:b1:fb:33:dd:70:74:56:4c:
         56:c8:c0:8c:06:08:a8:fa:ed:ec:5d:d6:71:98:f1:41:1c:b8:
         9c:6d:77:b8:c4:3a:cd:42:8b:20:41:a2:e6:bf:d4:4a:71:3f:
         77:f1:7d:12:e3:1a:07:01:f3:b1:cf:cb:29:e6:16:48:6b:7c:
         61:19:23:dd:5a:f8:dd:df:a2:9b:20:59:3e:6b:b1:5a:e9:e4:
         03:c3:dd:98:a3:b2:d6:aa:c0:d9:62:10:6b:14:a3:11:a8:90:
         88:38:85:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----