Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/vyh_XE53itxxZ2DN3zJiSHad7oQ.roa
File:                     vyh_XE53itxxZ2DN3zJiSHad7oQ.roa (raw, json)
Hash identifier:          BwwJTDqClirjAI8z/+dm20U+LpRGL9usTj1KRJXE4gs=
Subject key identifier:   BF:28:7F:5C:4E:77:8A:DC:71:67:60:CD:DF:32:62:48:76:9D:EE:84
Certificate issuer:       /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial:       019621485AA9259E1ACD0327EB626B7BE209
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/vyh_XE53itxxZ2DN3zJiSHad7oQ.roa
Signing time:             Thu 10 Apr 2025 19:58:31 +0000
ROA not before:           Thu 10 Apr 2025 19:58:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     35913
IP address blocks:        2a09:fb86::/32 maxlen: 32
                          2a11:6e40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:21:48:5a:a9:25:9e:1a:cd:03:27:eb:62:6b:7b:e2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
        Validity
            Not Before: Apr 10 19:58:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bf287f5c4e778adc716760cddf326248769dee84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:13:cd:ca:5e:18:2a:cf:c5:71:c3:2b:78:
                    82:05:99:ef:36:35:5f:c7:b6:b2:8d:f1:d6:53:b5:
                    4b:9a:39:3e:fa:64:49:5c:97:77:1f:96:20:bb:2e:
                    9d:a5:3b:c9:64:e7:12:87:42:c4:96:bf:14:8a:67:
                    95:35:a8:e3:68:71:eb:82:b2:00:a5:b8:db:26:e8:
                    a2:c8:f8:cb:e6:b1:89:f3:23:de:4f:51:47:43:fb:
                    e4:88:29:b7:5e:e9:3a:e0:b6:69:86:fd:65:1a:97:
                    b6:e0:f1:e4:06:32:8e:72:dc:0f:ed:9d:25:79:97:
                    1d:2c:d5:98:48:f7:69:41:3e:95:39:bf:53:76:f7:
                    c2:39:7b:b1:bd:a5:03:fe:b8:e9:15:9b:de:8e:32:
                    d2:69:32:86:22:5a:fd:c7:ff:56:19:e1:3c:75:74:
                    26:8c:f6:ba:33:21:79:1b:1d:a1:82:41:47:bb:04:
                    40:7c:03:0e:68:aa:07:e5:1f:79:61:af:b8:68:51:
                    80:a5:65:bd:b5:00:f1:f6:5a:b7:ea:a7:4d:f6:60:
                    e5:c6:3e:28:2d:ec:87:a3:f7:fb:d0:c2:35:45:a1:
                    8e:1a:c1:77:df:1f:b3:80:4c:3a:1e:b8:15:bd:2b:
                    fc:60:8e:38:9d:61:a9:37:79:06:03:f6:b1:2e:4b:
                    fb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:28:7F:5C:4E:77:8A:DC:71:67:60:CD:DF:32:62:48:76:9D:EE:84
            X509v3 Authority Key Identifier:
                keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/vyh_XE53itxxZ2DN3zJiSHad7oQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:fb86::/32
                  2a11:6e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:c7:ec:b0:1e:62:a3:b3:06:83:57:b4:cd:b7:6c:00:e6:d0:
         32:69:0a:59:31:0b:3d:f6:f0:ed:d4:9e:67:af:d3:28:53:5e:
         2a:35:cd:ce:5b:ff:ab:6a:31:5c:95:ea:b7:88:92:7a:ab:1f:
         1f:27:2c:04:b7:b0:ca:68:4b:c8:22:a4:a6:eb:13:20:35:03:
         a5:f1:54:26:64:ba:02:9e:f9:c4:d8:60:97:e1:fd:67:3a:d0:
         c5:7a:b4:50:58:13:9e:be:e0:28:7a:c6:37:ce:3a:3c:f6:9a:
         42:61:b5:7a:58:27:f6:92:6c:b8:f9:08:23:10:88:99:8e:a6:
         42:46:92:9b:16:2f:fa:16:7b:dc:04:6d:08:56:bc:5f:39:fb:
         8b:cf:dc:c4:83:5f:e1:e0:e5:c7:2b:ea:20:f4:2e:b9:fb:ae:
         4c:db:41:16:c3:14:30:27:2b:6f:b5:5e:03:93:d3:58:69:04:
         22:3e:13:4b:d1:2c:75:22:15:9e:37:47:89:2a:f1:23:39:f1:
         cf:66:ac:bf:7e:7f:1e:2d:53:3f:0d:88:7a:dd:1d:71:c9:14:
         54:6c:c7:22:61:c5:c7:2f:ee:f5:ca:e7:15:2b:32:a9:42:57:
         d2:a9:38:d6:b6:0e:66:c5:e6:07:91:61:14:ed:03:02:b3:de:
         64:3d:34:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----