Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/MumbOUHt0sHDCso0-2Ld1ziw4ko.roa
File:                     MumbOUHt0sHDCso0-2Ld1ziw4ko.roa (raw, json)
Hash identifier:          Wd99B13Tv2rYBvmAX16EYI4hqMJzUtPVIMZe+9Oq6HU=
Subject key identifier:   32:E9:9B:39:41:ED:D2:C1:C3:0A:CA:34:FB:62:DD:D7:38:B0:E2:4A
Certificate issuer:       /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial:       019424B3E0F930DC7F6D84DE5266D62A1273
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/MumbOUHt0sHDCso0-2Ld1ziw4ko.roa
Signing time:             Thu 02 Jan 2025 01:49:15 +0000
ROA not before:           Thu 02 Jan 2025 01:49:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     52042
IP address blocks:        2a0e:48c0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:e0:f9:30:dc:7f:6d:84:de:52:66:d6:2a:12:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
        Validity
            Not Before: Jan  2 01:49:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=32e99b3941edd2c1c30aca34fb62ddd738b0e24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:58:1d:ff:a8:3a:1e:9c:6f:a1:09:54:08:
                    65:d1:be:c4:b0:36:68:4b:de:02:bb:c3:26:99:f5:
                    79:06:5e:da:a5:c1:99:f9:0e:c0:7f:75:53:43:2a:
                    fc:6a:f4:58:f2:a6:25:81:23:8f:d2:06:5a:68:7a:
                    c8:5c:06:db:c5:c3:e6:b4:61:39:a5:a8:33:cd:a1:
                    c1:0c:79:5a:e6:5f:9c:b6:83:a9:b6:55:a4:2b:a8:
                    52:bc:74:a2:58:1a:13:be:5f:81:d7:d9:6d:12:3e:
                    02:65:24:f2:df:0b:8b:32:19:11:79:2f:ce:5e:ae:
                    3b:8b:d6:0d:1b:ea:34:04:f8:e7:de:17:f2:ec:62:
                    19:76:0c:c6:e6:39:02:8b:f7:d0:42:19:5c:72:84:
                    c0:03:3e:4b:ba:69:e6:bb:c1:1c:e5:eb:09:20:ae:
                    98:0c:84:17:fa:97:5c:f6:d7:3b:b6:81:3e:86:d1:
                    f4:7e:71:31:c4:9b:19:39:9b:43:54:24:57:8c:f5:
                    6e:31:44:c0:66:f8:0c:f7:66:23:b8:d2:e0:c3:42:
                    41:42:d8:a3:30:8f:cb:5c:89:24:33:86:e5:ce:2e:
                    79:b7:5b:72:a3:6a:c0:98:34:8f:2e:98:eb:14:11:
                    65:4d:67:30:37:4c:74:49:d0:4b:bc:65:85:45:a1:
                    49:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E9:9B:39:41:ED:D2:C1:C3:0A:CA:34:FB:62:DD:D7:38:B0:E2:4A
            X509v3 Authority Key Identifier:
                keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/MumbOUHt0sHDCso0-2Ld1ziw4ko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:48c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         a7:a5:f5:7a:30:72:2c:0c:7a:70:2d:49:a7:6f:19:a9:da:e3:
         41:94:4a:15:d8:f7:10:60:6e:c8:01:ec:4f:f3:7f:60:2c:30:
         39:19:b1:ed:69:47:ff:d1:54:dc:8b:e2:dd:e1:81:65:b5:33:
         58:29:7c:1f:46:ef:50:93:20:8e:e6:c8:e0:0c:e7:58:93:87:
         ec:d7:e4:e9:14:1b:eb:df:ee:00:b1:be:31:59:23:19:76:93:
         cc:62:b8:16:e6:c6:89:e0:1b:60:ab:7b:0f:ba:8b:4a:77:fe:
         4a:16:b7:e9:9b:84:8d:67:a6:26:af:03:f5:ed:73:c4:61:15:
         63:3c:cb:3b:6b:e0:97:9c:0f:f4:39:4c:8d:6d:fa:c8:6a:ad:
         51:c5:f3:ea:dd:66:88:fc:ab:bc:56:f3:bb:f5:76:0d:29:b0:
         e9:2d:93:48:54:a0:06:6b:b8:f0:d6:39:53:e9:b0:5e:eb:f9:
         a8:0d:e8:5d:bb:a7:5f:53:3c:db:d0:fa:99:26:e6:0b:47:c2:
         22:cf:b0:11:82:d0:dc:45:d9:b5:74:fc:36:64:5e:8d:38:d9:
         a2:d6:05:f2:7c:0a:ed:46:f4:17:42:f1:80:a9:1b:48:21:c2:
         93:fe:3d:7b:89:4e:37:1e:18:9c:5b:fd:10:9f:a8:cb:57:ee:
         9e:61:ba:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----