Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/CyAx1lcKD4wc_amccZ1znyVkKIY.roa
File:                     CyAx1lcKD4wc_amccZ1znyVkKIY.roa (raw, json)
Hash identifier:          Xo4DDTOMDsU3unzlvdlmOXck+6K2PDfwqs5xU35c1bQ=
Subject key identifier:   0B:20:31:D6:57:0A:0F:8C:1C:FD:A9:9C:71:9D:73:9F:25:64:28:86
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       01944ABF4FE730B9B5EB9B7CBD3982ED7267
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/CyAx1lcKD4wc_amccZ1znyVkKIY.roa
Signing time:             Thu 09 Jan 2025 11:07:19 +0000
ROA not before:           Thu 09 Jan 2025 11:07:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202827
IP address blocks:        2a10:4646:70::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:4a:bf:4f:e7:30:b9:b5:eb:9b:7c:bd:39:82:ed:72:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Jan  9 11:07:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0b2031d6570a0f8c1cfda99c719d739f25642886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:42:e4:60:93:15:9c:c7:79:9d:8b:06:d0:
                    ae:fa:13:14:d9:c0:c2:a8:73:85:8b:d0:d9:c0:81:
                    09:48:25:56:9c:19:d9:f5:d5:4c:26:00:5d:a4:d6:
                    09:15:1b:fe:1f:9b:ed:f8:98:6a:88:fe:05:22:d8:
                    05:71:36:a4:10:a0:d3:d9:e2:3c:c1:35:ac:d2:a0:
                    5b:84:a0:07:37:b5:ae:77:fd:16:0b:e5:d6:07:3c:
                    ad:bf:63:3a:b1:35:51:33:2d:4d:52:f8:68:cb:91:
                    c8:0a:38:f8:f1:fb:b9:63:a1:08:18:c8:03:06:1e:
                    ef:49:9c:b2:b1:a9:05:a5:56:49:13:57:aa:53:2e:
                    d9:c7:51:15:b1:0b:35:27:00:d4:74:e6:6c:96:6f:
                    1b:08:e3:45:7d:89:ce:5c:ba:bf:3f:c8:05:72:a2:
                    d1:08:64:e9:c8:22:da:9d:b4:76:aa:95:d6:ab:33:
                    ea:b5:f4:7e:05:ea:2a:7a:51:a8:fe:17:18:38:2a:
                    45:fc:40:f8:04:32:7a:8e:74:3a:e3:58:e8:ae:22:
                    32:63:22:86:25:79:84:9c:8f:76:3f:f4:f6:88:50:
                    28:a9:ac:90:f2:4b:ca:da:66:4c:77:33:d4:5b:5b:
                    ce:94:0c:99:d6:84:9f:f6:97:3b:38:a2:0f:64:87:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:20:31:D6:57:0A:0F:8C:1C:FD:A9:9C:71:9D:73:9F:25:64:28:86
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/CyAx1lcKD4wc_amccZ1znyVkKIY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:70::/48

    Signature Algorithm: sha256WithRSAEncryption
         d6:ee:86:59:c6:16:96:59:0b:73:5c:57:09:55:98:45:b7:49:
         a2:6c:ab:9f:35:d3:08:76:f5:93:8a:62:26:7f:d6:3d:03:64:
         4c:a8:fc:40:63:8a:c9:c0:8d:65:20:c1:88:cd:0a:11:f2:ab:
         5b:ad:58:ce:3c:2e:62:09:44:b8:14:18:e2:bc:dd:2e:c1:04:
         1a:2c:55:8e:45:de:12:fa:25:10:ac:67:d4:b4:0e:c1:7b:71:
         f1:dc:fe:33:5d:7d:9e:d1:3b:83:01:77:80:02:d0:b4:94:81:
         2a:e8:a9:f0:27:f4:9c:23:8e:a8:27:24:5f:f3:da:4b:58:9d:
         60:f4:ae:b3:51:da:d9:2d:34:cb:60:c2:79:dd:39:cc:05:42:
         64:78:f4:af:38:cf:8e:ff:53:a1:ea:d2:58:08:0b:30:45:f0:
         3b:8d:46:d4:62:a7:fe:fe:93:71:25:0a:66:03:4b:d1:5d:9e:
         cd:27:db:f4:21:0e:2b:0f:c6:8c:86:5e:77:1a:2a:51:af:55:
         f7:08:49:d9:3d:79:fd:51:24:33:76:87:47:f8:84:99:d0:66:
         b8:80:fc:b7:45:8f:a4:33:51:02:06:a3:b5:42:b4:ac:13:06:
         28:58:57:8c:ce:14:53:d3:ea:0f:06:45:66:c9:4f:ba:53:c8:
         b6:c2:e6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----