Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/sfCO6HC9ppANp35jFNhh6JQ2jy0.roa
File:                     sfCO6HC9ppANp35jFNhh6JQ2jy0.roa (raw, json)
Hash identifier:          ZLdTa/NDVMaW27BUggBR77q2qtUdKzPeqvGRYpirP5U=
Subject key identifier:   B1:F0:8E:E8:70:BD:A6:90:0D:A7:7E:63:14:D8:61:E8:94:36:8F:2D
Certificate issuer:       /CN=fb744006eac3084bf88f128349b0e733bb3d79e3
Certificate serial:       018D8DBD2E4675B74151D3076E927B43F5C3
Authority key identifier: FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/sfCO6HC9ppANp35jFNhh6JQ2jy0.roa
Signing time:             Fri 09 Feb 2024 12:00:02 +0000
ROA not before:           Fri 09 Feb 2024 12:00:02 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35133
IP address blocks:        2.58.57.0/24 maxlen: 24
                          2.58.58.0/24 maxlen: 24
                          2.58.59.0/24 maxlen: 24
                          2.58.59.0/25 maxlen: 25
                          2.58.59.192/26 maxlen: 26
                          2a09:e240::/48 maxlen: 48
                          2a09:e240:1::/48 maxlen: 48
                          2a09:e240:2::/48 maxlen: 48
                          2a09:e240:22::/48 maxlen: 48
                          2a09:e240:1337::/48 maxlen: 48
                          2a09:e244::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:8d:bd:2e:46:75:b7:41:51:d3:07:6e:92:7b:43:f5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb744006eac3084bf88f128349b0e733bb3d79e3
        Validity
            Not Before: Feb  9 12:00:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b1f08ee870bda6900da77e6314d861e894368f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:33:3a:be:57:db:2a:00:ee:4a:10:ee:1e:
                    13:86:a0:c4:3c:b8:ae:73:a3:5e:4f:14:6e:c7:ed:
                    95:bb:d0:c1:4f:af:64:38:20:71:1f:c1:54:f1:63:
                    96:37:d4:2b:78:24:98:a0:83:62:81:2c:06:0c:0d:
                    e8:3b:4b:1b:9e:f8:a2:78:4f:da:42:47:cb:02:8b:
                    85:2e:9b:c9:39:23:c8:09:d8:b9:69:d7:2d:02:c3:
                    ff:bf:60:40:2a:e1:bd:7e:8e:26:aa:32:73:4c:a7:
                    2b:d8:f7:d4:11:ae:02:8d:cd:9b:3d:92:6e:b1:f0:
                    13:91:27:cc:68:19:f5:41:0b:4e:3f:da:3e:e6:58:
                    ef:9c:72:d5:fe:f6:92:87:25:58:16:ac:2a:f0:90:
                    5d:37:33:b2:dc:e1:55:25:39:f4:be:92:3b:93:69:
                    03:63:27:58:b6:79:bb:a1:e6:90:f0:13:5d:e4:d6:
                    44:4b:73:39:51:1a:69:33:44:75:af:1e:df:e6:c8:
                    3c:8d:60:47:75:07:a4:38:88:75:68:11:8d:67:bb:
                    19:e4:86:d7:34:33:eb:0e:fc:1b:e1:c5:c8:f7:58:
                    48:f2:43:d6:7b:d1:67:fa:15:07:de:08:8d:d1:97:
                    cd:da:6a:6e:c8:a4:fd:46:33:56:ad:40:3b:35:da:
                    35:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F0:8E:E8:70:BD:A6:90:0D:A7:7E:63:14:D8:61:E8:94:36:8F:2D
            X509v3 Authority Key Identifier:
                keyid:FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/sfCO6HC9ppANp35jFNhh6JQ2jy0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/1-3RABurDCEv4jxKDSbDnM7s9eeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.57.0-2.58.59.255
                IPv6:
                  2a09:e240::-2a09:e240:2:ffff:ffff:ffff:ffff:ffff
                  2a09:e240:22::/48
                  2a09:e240:1337::/48
                  2a09:e244::/33

    Signature Algorithm: sha256WithRSAEncryption
         c7:cc:21:b5:7f:26:27:d4:62:33:c9:08:1d:f1:d4:2b:ac:01:
         f5:4f:74:e1:da:93:d9:1f:8a:3e:d3:17:05:45:f2:7d:ef:62:
         50:e4:7f:61:b6:8b:b7:5f:57:b4:5d:ed:22:26:72:28:be:10:
         31:01:b1:8a:40:82:57:22:bf:9f:ad:8f:58:00:3a:60:be:7c:
         c3:e0:dc:58:73:0c:50:79:d1:9c:9b:7b:13:c2:30:4c:3e:a4:
         6d:81:dc:a4:91:8b:e1:f8:19:48:f1:4c:f5:33:44:41:a2:92:
         57:6d:90:d1:6d:f2:3a:90:8f:d5:50:c4:d9:ae:dd:c7:04:96:
         59:9a:74:0f:a6:ad:f4:78:45:30:06:01:4e:de:09:f8:ce:ca:
         03:0f:a5:10:3d:7f:f4:9e:6a:5a:00:ff:cd:e8:92:fa:0c:44:
         d7:e2:ec:46:07:17:15:a7:51:14:b4:ed:9b:6f:37:4b:9c:a3:
         dc:69:2e:3a:ab:9a:6d:ec:fe:81:23:48:11:cb:bd:f2:e1:47:
         ea:fa:be:5b:cf:4c:04:94:85:68:4f:0e:ce:67:4b:d5:4e:2b:
         0d:91:8b:7a:ec:d1:71:f5:74:6d:9b:7b:15:7b:45:c4:bc:08:
         d6:7e:ce:b8:99:ed:8a:70:75:6e:e5:af:2e:95:10:80:9f:6f:
         77:09:ee:2c
-----BEGIN CERTIFICATE-----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=