Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/jFA2rtAVBw_N1wvAZdDewkHHEJk.roa
File:                     jFA2rtAVBw_N1wvAZdDewkHHEJk.roa (raw, json)
Hash identifier:          z1/fUeHvpi6n58b3xkn2+HMcpX9G3zKAfMExkbdSdio=
Subject key identifier:   8C:50:36:AE:D0:15:07:0F:CD:D7:0B:C0:65:D0:DE:C2:41:C7:10:99
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       01959B61746CCB91BC3B4D3C92CAB0AA6707
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/jFA2rtAVBw_N1wvAZdDewkHHEJk.roa
Signing time:             Sat 15 Mar 2025 19:56:50 +0000
ROA not before:           Sat 15 Mar 2025 19:56:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212271
IP address blocks:        2a05:4140::/29 maxlen: 48
                          2a05:4140:3::/48 maxlen: 48
                          2a05:4140:4::/48 maxlen: 48
                          2a05:4140:8::/48 maxlen: 48
                          2a05:4140:9::/48 maxlen: 48
                          2a05:4140:10::/48 maxlen: 48
                          2a05:4140:15::/48 maxlen: 48
                          2a05:4140:28::/48 maxlen: 48
                          2a05:4140:29::/48 maxlen: 48
                          2a05:4140:30::/48 maxlen: 48
                          2a05:4140:31::/48 maxlen: 48
                          2a05:4140:32::/48 maxlen: 48
                          2a05:4140:33::/48 maxlen: 48
                          2a05:4140:34::/48 maxlen: 48
                          2a05:4140:35::/48 maxlen: 64
                          2a05:4140:36::/48 maxlen: 48
                          2a05:4140:37::/48 maxlen: 48
                          2a05:4140:48::/48 maxlen: 48
                          2a05:4140:50::/48 maxlen: 48
                          2a05:4140:100::/40 maxlen: 48
                          2a05:4140:187::/48 maxlen: 48
                          2a05:4140:190::/48 maxlen: 48
                          2a05:4140:300::/40 maxlen: 40
                          2a05:4140:400::/40 maxlen: 48
                          2a05:4145::/32 maxlen: 32
                          2a05:4147::/32 maxlen: 32
                          2a11:e100::/29 maxlen: 48
                          2a11:e103::/32 maxlen: 32
                          2a11:e107::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:9b:61:74:6c:cb:91:bc:3b:4d:3c:92:ca:b0:aa:67:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Mar 15 19:56:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8c5036aed015070fcdd70bc065d0dec241c71099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b7:0d:cc:8d:a2:5a:b4:0e:13:3a:24:bb:38:
                    bb:76:42:32:b4:4b:61:39:8d:92:3c:61:89:a6:5b:
                    3d:81:5f:6e:a0:ac:28:a7:76:a0:1b:4a:1f:b1:a9:
                    f4:d8:2c:90:3c:21:98:d4:83:c7:15:23:74:fe:10:
                    e8:b3:a1:42:ec:49:4d:67:58:63:9b:57:14:f1:1a:
                    98:e4:60:6f:2d:53:73:e1:ab:ee:64:cf:b6:b8:18:
                    c7:be:68:5e:a1:e9:9a:26:ef:f3:ee:44:02:87:32:
                    11:6a:b3:5c:11:a2:f8:c9:92:ef:d0:58:2d:ea:f2:
                    a1:89:58:07:5c:9c:17:3e:fc:f0:fc:df:c7:6f:07:
                    f6:d8:cb:22:02:99:78:c6:f4:64:4f:f3:ae:19:ea:
                    d6:b7:07:f1:a1:da:95:24:ce:4d:7a:df:0c:2c:1d:
                    30:48:78:a3:84:3c:68:02:c9:ee:4c:78:e3:f3:b4:
                    f3:bc:38:d5:4b:4b:27:83:56:5b:c3:44:b0:53:1c:
                    b0:dd:2a:2c:7a:ec:57:d7:44:73:66:6c:00:4a:6e:
                    6f:9a:43:59:fe:85:ad:67:89:b1:0b:e3:b9:4b:ba:
                    52:9c:41:8c:87:e3:ed:42:45:aa:e6:5c:ca:1b:f7:
                    4a:c1:db:1d:00:f2:76:37:3b:28:91:a7:e5:17:93:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:50:36:AE:D0:15:07:0F:CD:D7:0B:C0:65:D0:DE:C2:41:C7:10:99
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/jFA2rtAVBw_N1wvAZdDewkHHEJk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140::/29
                  2a11:e100::/29

    Signature Algorithm: sha256WithRSAEncryption
         70:34:e5:0d:b8:f8:fa:89:1e:90:ae:20:b5:ea:02:3d:58:08:
         13:d9:12:58:4e:c0:bb:03:14:ad:b3:47:81:2c:45:a8:e4:36:
         d0:59:29:ad:08:29:33:f7:cb:0d:3e:df:d3:87:d9:4a:a7:91:
         89:df:39:80:2d:d4:c7:14:c2:7e:5d:fa:f1:dd:8d:1e:3c:9c:
         55:60:a8:db:bb:0d:be:19:0a:b8:34:fa:4a:32:a2:dc:6c:ad:
         9f:a0:0f:92:0f:31:e6:ba:26:f3:e7:76:56:11:f7:11:c2:c1:
         9f:74:e7:b9:d7:00:7b:7a:af:b4:a5:f3:d0:4e:93:56:af:77:
         b0:e3:cf:b2:e5:e3:5d:de:1e:0e:9c:8e:3a:e3:69:3c:4a:ce:
         ed:e2:5e:87:25:aa:72:69:91:7b:91:d7:cb:9d:75:dc:e5:d0:
         ab:a2:01:dc:b9:9c:91:ae:d4:5e:56:b9:21:5b:0f:6c:db:0f:
         10:e9:c9:14:3e:6e:c6:6e:81:44:ca:0e:70:a9:b7:56:14:99:
         bb:53:92:ad:df:ed:a0:46:7a:ea:00:7a:c0:74:3b:90:90:e7:
         53:cc:49:c7:be:8b:d9:e5:75:4f:7c:85:c0:7b:3e:38:d5:64:
         aa:79:76:17:ba:06:82:e6:99:99:b7:63:b5:0a:3a:ee:9b:f8:
         93:c6:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----