Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030653a3a2f34382d3438203d3e20323134393731.roa
File:                     326131343a3763303a313030653a3a2f34382d3438203d3e20323134393731.roa (raw, json)
Hash identifier:          ZmKHZ7KEQafLXrIoVvHThURpv+m5bnP7aMQpikOEGiA=
Subject key identifier:   B2:DF:5F:0F:27:79:B6:9A:29:4F:B5:3E:8F:3E:31:1C:86:10:9E:19
Certificate issuer:       /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial:       09556242A2E5A74F86B0FA6D10D4F683C9C8AC95
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access:      rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030653a3a2f34382d3438203d3e20323134393731.roa
Signing time:             Tue 04 Feb 2025 14:55:43 +0000
ROA not before:           Tue 04 Feb 2025 14:50:43 +0000
ROA not after:            Tue 03 Feb 2026 14:55:43 +0000
asID:                     214971
IP address blocks:        2a14:7c0:100e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:55:62:42:a2:e5:a7:4f:86:b0:fa:6d:10:d4:f6:83:c9:c8:ac:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
        Validity
            Not Before: Feb  4 14:50:43 2025 GMT
            Not After : Feb  3 14:55:43 2026 GMT
        Subject: CN=B2DF5F0F2779B69A294FB53E8F3E311C86109E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:6d:d6:a7:0e:49:19:e4:15:4a:3b:4e:5a:
                    69:22:0e:7b:b3:0e:79:75:11:e4:87:fd:99:c0:b4:
                    cd:e5:fd:fc:c6:17:5c:0b:a7:e2:45:3f:cc:b6:4f:
                    15:e6:c2:4d:dc:63:fd:f6:16:7b:32:74:3d:f6:01:
                    e0:66:33:ab:97:b9:f6:2b:3a:9e:bb:f1:aa:c7:84:
                    c1:60:66:ca:b8:50:c2:74:0b:f1:0b:ca:c1:b8:0e:
                    c6:23:45:20:67:c6:cb:6e:7c:ad:65:1a:c4:30:1c:
                    b4:96:a6:65:43:95:3a:22:b7:29:9b:0d:8b:ae:4b:
                    9a:93:a5:77:f0:91:78:e6:14:af:fa:51:4d:9e:a3:
                    c2:0a:c1:a2:9c:49:01:80:ee:41:ae:95:46:ea:dd:
                    57:ae:3b:fe:fb:78:c8:f6:96:30:03:64:b0:6d:a8:
                    4a:96:5e:18:64:51:7b:09:f5:7f:2f:2a:69:eb:a6:
                    57:38:9b:1c:25:18:1b:b5:d6:95:4a:ed:ee:f9:58:
                    c5:59:ec:da:79:88:58:68:13:3b:bb:17:a7:9f:2f:
                    77:4c:3f:ba:0a:cf:01:e7:b6:ad:a6:49:5d:76:29:
                    06:f4:0a:b4:cf:9a:ef:f6:20:b7:b3:fc:04:18:05:
                    ef:7d:bb:c7:67:81:13:48:9c:ba:78:25:28:5a:a7:
                    43:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DF:5F:0F:27:79:B6:9A:29:4F:B5:3E:8F:3E:31:1C:86:10:9E:19
            X509v3 Authority Key Identifier:
                keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030653a3a2f34382d3438203d3e20323134393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:100e::/48

    Signature Algorithm: sha256WithRSAEncryption
         d7:c6:d3:d8:d7:f7:b8:f6:21:68:d1:28:45:9e:41:9c:a0:20:
         b2:58:41:b4:dc:e4:aa:bf:15:23:28:fb:26:65:b6:a2:80:75:
         83:7c:44:7a:34:59:af:12:5f:cb:d2:e6:a6:51:14:12:cc:ac:
         9e:90:32:9e:92:8c:7e:d4:4d:3c:ad:1e:7b:eb:64:c3:c5:88:
         01:1c:3f:f9:b2:8e:fb:5f:a0:cd:7c:3c:5c:14:c7:ce:31:42:
         51:ea:14:8b:20:46:4b:37:6e:60:35:df:5b:2b:a2:63:fc:f1:
         aa:97:38:f0:1c:c4:76:6d:10:f7:9d:ce:86:27:d7:08:50:39:
         51:a8:df:8c:b1:62:9b:09:c1:8b:3a:59:49:f5:a8:95:5b:b9:
         e2:6f:63:1b:f6:ca:8c:33:6f:d3:86:9a:5b:01:81:5e:78:ea:
         68:24:2d:5f:13:5e:bb:30:c0:6d:51:05:8b:64:79:f0:05:06:
         bf:cc:de:33:e0:10:c1:96:40:7d:32:15:de:d4:b2:1b:a5:c2:
         c6:0d:a6:34:dc:01:da:07:83:05:84:a0:95:01:a2:c6:7c:73:
         9e:04:da:71:33:75:26:d4:ac:09:25:7d:43:68:63:bc:38:5f:
         44:ac:85:71:f4:4c:4b:ac:8d:57:03:c0:82:00:fa:35:15:2f:
         30:4c:57:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----