Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/jUcUyasdB1F_jJ1Iu4Jesu2bOp8.roa
File:                     jUcUyasdB1F_jJ1Iu4Jesu2bOp8.roa (raw, json)
Hash identifier:          BbNkNKRJ/r5Ixy3RnUBfFtFAmvmPYuPFYMJIKOu9VwI=
Subject key identifier:   8D:47:14:C9:AB:1D:07:51:7F:8C:9D:48:BB:82:5E:B2:ED:9B:3A:9F
Certificate issuer:       /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial:       019423D6BE01086282EF60A27C5E53B89AD8
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/jUcUyasdB1F_jJ1Iu4Jesu2bOp8.roa
Signing time:             Wed 01 Jan 2025 21:47:43 +0000
ROA not before:           Wed 01 Jan 2025 21:47:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197942
IP address blocks:        2001:67c:a30::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:be:01:08:62:82:ef:60:a2:7c:5e:53:b8:9a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
        Validity
            Not Before: Jan  1 21:47:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8d4714c9ab1d07517f8c9d48bb825eb2ed9b3a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b7:ef:2f:58:d0:9c:e6:4f:f7:6a:c5:af:f8:
                    35:e8:25:81:4b:25:78:e7:60:72:61:17:c6:c7:6c:
                    db:3c:87:eb:24:20:a4:66:ca:d9:ef:9c:cf:a7:c0:
                    85:85:21:40:6a:2b:fb:f8:ff:15:8f:43:a9:10:55:
                    ea:a5:dc:95:3b:bc:2f:92:56:90:e1:60:2f:e4:6f:
                    27:4c:9d:3b:56:1b:68:27:b9:07:f8:46:72:d1:b4:
                    d6:13:09:a0:ad:e7:38:f8:ef:13:f2:2e:97:90:03:
                    89:8a:91:bd:bf:cf:d3:ea:8e:21:de:f1:14:9e:f9:
                    7a:a7:d5:d1:4c:4f:a2:7d:b6:4f:33:87:57:82:db:
                    eb:f6:58:7c:62:62:52:79:6e:e9:ca:26:16:77:57:
                    b0:10:dc:2a:d7:3f:79:cb:74:ac:32:13:7d:0c:e6:
                    01:ec:0f:8c:a8:a5:80:2b:8a:04:1d:3f:ab:ce:e5:
                    3e:c2:46:7a:d1:1c:42:4b:e9:bf:0c:3b:ef:41:1f:
                    96:26:68:35:29:90:03:d6:a1:65:26:5d:af:b3:6f:
                    67:bc:b5:fb:7b:02:69:5f:af:80:18:55:7d:7f:06:
                    75:b7:b8:2e:95:dc:a5:fa:11:38:bf:04:19:dc:7d:
                    33:19:85:f6:52:a1:f6:6f:a1:bc:40:41:b0:10:4d:
                    fd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:47:14:C9:AB:1D:07:51:7F:8C:9D:48:BB:82:5E:B2:ED:9B:3A:9F
            X509v3 Authority Key Identifier:
                keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/jUcUyasdB1F_jJ1Iu4Jesu2bOp8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a30::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:61:17:79:30:d8:8d:5a:c8:0c:2b:66:bc:59:84:1f:d4:f6:
         18:21:52:d0:71:e0:24:4a:4e:25:0c:8b:ef:e7:e2:b3:08:f4:
         75:ac:6c:f8:40:3d:df:5d:df:b1:98:44:5a:03:94:26:b9:31:
         09:9f:0f:e5:c3:60:4b:53:84:6e:e5:54:ac:d0:1f:8f:40:13:
         ec:10:ea:95:d6:2a:32:6a:a4:85:45:e7:77:b7:3f:52:a1:86:
         06:a0:d9:80:69:14:e7:89:4a:ce:33:0e:66:47:11:27:9c:21:
         93:b1:f3:f6:ce:79:fb:37:79:20:86:91:5c:35:89:70:8a:c6:
         cc:a3:c0:aa:4d:58:92:95:14:41:47:e9:41:47:18:84:c5:c4:
         a7:f8:ac:35:05:43:98:94:88:31:71:03:b4:37:48:5b:7e:8f:
         a7:19:cf:7b:d5:1c:3d:9f:fd:3c:6e:3d:80:f7:bf:e3:85:4e:
         c3:b9:40:8c:55:d8:78:8d:9b:57:4a:ea:ce:85:58:17:6b:72:
         e6:8a:7a:12:96:be:41:df:48:69:b6:9c:48:97:ef:4f:22:9e:
         a9:9c:3c:bd:43:76:b5:72:7c:c8:b2:b7:96:08:e0:4c:83:22:
         36:2a:5b:2b:53:f5:ed:e5:d8:69:e9:f9:a3:ea:8d:23:c1:18:
         6c:e1:43:f9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQj1r4BCGKC72CifF5TuJrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYmQyNzEwYzJmY2Y1NTFiMzFmZDdjY2M2MGRmMWY2YmI0
YTkyYzQwHhcNMjUwMTAxMjE0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDQ3MTRjOWFiMWQwNzUxN2Y4YzlkNDhiYjgyNWViMmVkOWIzYTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LfvL1jQnOZP92rFr/g16CWBSyV4
52ByYRfGx2zbPIfrJCCkZsrZ75zPp8CFhSFAaiv7+P8Vj0OpEFXqpdyVO7wvklaQ
4WAv5G8nTJ07VhtoJ7kH+EZy0bTWEwmgrec4+O8T8i6XkAOJipG9v8/T6o4h3vEU
nvl6p9XRTE+ifbZPM4dXgtvr9lh8YmJSeW7pyiYWd1ewENwq1z95y3SsMhN9DOYB
7A+MqKWAK4oEHT+rzuU+wkZ60RxCS+m/DDvvQR+WJmg1KZAD1qFlJl2vs29nvLX7
ewJpX6+AGFV9fwZ1t7guldyl+hE4vwQZ3H0zGYX2UqH2b6G8QEGwEE39zQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI1HFMmrHQdRf4ydSLuCXrLtmzqfMB8GA1UdIwQY
MBaAFGq9JxDC/PVRsx/XzMYN8fa7SpLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQt
NzRlMzMxZGJkMDdmLzEvalVjVXlhc2RCMUZfakoxSXU0SmVzdTJiT3A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQtNzRlMzMxZGJkMDdm
LzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAow
MA0GCSqGSIb3DQEBCwUAA4IBAQCsYRd5MNiNWsgMK2a8WYQf1PYYIVLQceAkSk4l
DIvv5+KzCPR1rGz4QD3fXd+xmERaA5QmuTEJnw/lw2BLU4Ru5VSs0B+PQBPsEOqV
1ioyaqSFRed3tz9SoYYGoNmAaRTniUrOMw5mRxEnnCGTsfP2znn7N3kghpFcNYlw
isbMo8CqTViSlRRBR+lBRxiExcSn+Kw1BUOYlIgxcQO0N0hbfo+nGc971Rw9n/08
bj2A97/jhU7DuUCMVdh4jZtXSurOhVgXa3LminoSlr5B30hptpxIl+9PIp6pnDy9
Q3a1cnzIsreWCOBMgyI2KlsrU/Xt5dhp6fmj6o0jwRhs4UP5
-----END CERTIFICATE-----