Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/4xurGvOpirpnRoiZwN2Sc6T0VrA.roa
File:                     4xurGvOpirpnRoiZwN2Sc6T0VrA.roa (raw, json)
Hash identifier:          3kTAg18GBYXeef9JZfVUbnujXZUV5+bE1oj5gE+e75g=
Subject key identifier:   E3:1B:AB:1A:F3:A9:8A:BA:67:46:88:99:C0:DD:92:73:A4:F4:56:B0
Certificate issuer:       /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial:       01942746FDD7B9FE031ADFCADB2840016284
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/4xurGvOpirpnRoiZwN2Sc6T0VrA.roa
Signing time:             Thu 02 Jan 2025 13:49:11 +0000
ROA not before:           Thu 02 Jan 2025 13:49:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215730
IP address blocks:        2a0b:4142::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:46:fd:d7:b9:fe:03:1a:df:ca:db:28:40:01:62:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
        Validity
            Not Before: Jan  2 13:49:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e31bab1af3a98aba67468899c0dd9273a4f456b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:63:60:92:86:c3:9c:69:f5:7b:8a:cb:4d:
                    0e:18:e1:2a:99:95:fc:dd:a8:41:1d:4b:b7:d1:aa:
                    c1:b7:f8:4c:9c:cd:5c:0a:d7:51:0f:94:cc:51:77:
                    ea:c5:60:fa:a0:8b:17:7f:66:5e:a6:8a:91:10:15:
                    6d:d4:63:98:33:de:6d:0e:41:e9:cc:c8:ff:c1:14:
                    14:67:6c:f6:a6:2a:9c:21:ec:e4:23:81:34:ff:8e:
                    66:21:a5:18:9a:93:bf:b1:b2:de:a8:f5:bf:db:0a:
                    00:50:97:d2:89:5d:81:6a:73:01:21:0a:a3:78:96:
                    52:bb:7c:30:72:20:42:7d:51:48:b0:a1:c9:5d:ec:
                    9a:a4:2f:b4:92:0b:5a:6c:3d:15:3c:cf:67:f1:6f:
                    86:20:dc:41:f3:82:19:82:01:7c:f6:e3:8a:15:ca:
                    3a:34:7f:07:49:8f:a6:8c:3e:7f:97:8e:7d:a6:a5:
                    d4:2f:5c:55:b7:55:07:5e:d1:9d:0d:6a:06:1a:43:
                    ed:03:e3:a9:76:b8:2b:86:fb:3a:6e:a3:a5:55:3c:
                    99:88:04:7e:74:db:46:b6:51:84:dc:7b:6f:98:05:
                    99:75:f1:0f:d1:cc:67:71:5b:5b:3e:3e:20:5d:12:
                    03:bd:16:41:47:88:04:83:48:ba:77:c8:8a:49:c8:
                    cf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1B:AB:1A:F3:A9:8A:BA:67:46:88:99:C0:DD:92:73:A4:F4:56:B0
            X509v3 Authority Key Identifier:
                keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/4xurGvOpirpnRoiZwN2Sc6T0VrA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4142::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:77:65:64:82:33:9d:88:59:a3:52:05:dd:b6:50:ed:18:
         0c:ed:d6:10:36:ab:26:40:11:49:d6:0d:49:57:2c:88:18:58:
         85:70:19:bd:62:ed:24:4f:d7:13:83:d2:de:bc:94:1e:44:aa:
         e9:db:0a:0a:41:54:b5:6b:4a:1a:b4:b2:69:4e:0f:f1:e7:e4:
         ac:45:d5:f9:a0:1c:57:c4:d5:85:52:76:fc:86:79:21:20:cc:
         08:3f:e6:d7:ee:2b:77:f0:45:d6:1c:60:13:52:0c:9c:b8:99:
         6e:e4:7c:ce:21:c7:0d:82:78:a2:95:58:01:e9:1d:ae:ec:9a:
         88:ef:49:40:26:b7:56:da:04:73:eb:54:30:25:9d:21:d2:e6:
         a8:be:fb:4f:a5:8b:8f:8c:a1:6d:79:dc:74:f3:56:1a:77:f8:
         41:db:00:e1:6c:29:08:63:ef:d3:0c:ec:3a:26:91:60:5b:e2:
         06:88:fd:ab:98:6e:ab:c2:82:d3:9b:31:07:a9:2f:1a:17:3d:
         e1:1c:09:d2:70:32:93:ba:ac:4a:fa:48:7a:15:f8:8b:bb:02:
         38:6f:0a:a1:4f:4b:6e:5e:cd:88:cd:73:0e:f8:ba:4b:5d:1a:
         da:7b:a8:1d:fe:9c:82:f6:36:4f:92:ca:d4:e7:46:e6:27:2b:
         ec:51:31:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----