Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa
File:                     vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa (raw, json)
Hash identifier:          UmSdOz5rZ6J32yPtrp522X1fQ0TXmlUWN5/Uf0zeDr8=
Subject key identifier:   BC:9D:54:E0:04:8B:80:0E:38:50:D2:FB:67:80:41:5C:DB:02:E9:05
Certificate issuer:       /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial:       019427470ED4D93F463A6E3518BE70F48F40
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa
Signing time:             Thu 02 Jan 2025 13:49:15 +0000
ROA not before:           Thu 02 Jan 2025 13:49:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216271
IP address blocks:        2a14:7480::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:0e:d4:d9:3f:46:3a:6e:35:18:be:70:f4:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
        Validity
            Not Before: Jan  2 13:49:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bc9d54e0048b800e3850d2fb6780415cdb02e905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:5b:d4:97:17:8b:5b:4a:0b:b6:51:6f:7a:
                    17:a8:5d:9c:d6:c3:06:a4:e8:c8:9a:32:69:5b:5d:
                    52:1d:0e:fc:7f:44:7d:ef:92:1e:3f:38:bd:22:81:
                    8e:77:2d:ba:71:3b:6c:4f:da:79:c1:1d:05:ae:f7:
                    c0:ef:81:e4:14:f6:16:5f:fd:85:27:a3:34:25:60:
                    11:01:e4:37:61:f0:c7:d6:6c:da:6b:18:c5:6a:47:
                    4f:44:bb:31:b9:2e:d2:5d:67:bb:a6:c1:b9:56:89:
                    f7:6a:57:ab:38:f3:6e:08:f9:d1:6c:79:21:64:4d:
                    40:6a:6b:12:c6:6d:71:b0:88:66:b1:bd:d2:e6:c8:
                    1a:d8:30:56:81:2d:65:df:a6:65:f2:9e:9a:5c:28:
                    13:40:07:e8:af:11:f1:a0:02:14:a0:1c:4d:49:7f:
                    5e:84:82:77:b4:04:01:b4:95:53:e8:18:55:02:77:
                    4d:e9:65:df:59:82:f4:1c:9e:8e:43:ce:93:db:00:
                    35:6e:08:db:67:b6:fb:5b:3e:dd:ca:ff:67:bd:49:
                    8c:7f:80:6c:56:5c:8b:c2:4d:1e:b5:77:30:70:f8:
                    2a:6e:7c:0d:84:ca:f5:e2:07:c2:f8:5e:03:3c:50:
                    b3:95:01:b7:0e:80:77:46:28:3c:6a:97:31:a0:d4:
                    a0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9D:54:E0:04:8B:80:0E:38:50:D2:FB:67:80:41:5C:DB:02:E9:05
            X509v3 Authority Key Identifier:
                keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7480::/29

    Signature Algorithm: sha256WithRSAEncryption
         75:86:e5:cf:a9:73:6c:98:0c:e6:9a:32:4d:22:85:59:1f:f7:
         5b:55:85:39:92:c0:c3:4c:2e:8c:90:7a:77:e4:17:ba:39:67:
         7c:dc:b7:c0:73:ab:09:16:85:b5:30:98:63:9b:5d:67:07:e9:
         27:c7:7f:35:64:8e:b2:3a:b4:14:c7:aa:a4:7c:fa:e1:e3:97:
         d2:14:d7:4a:7f:90:83:46:0b:f1:ab:ed:c9:b5:cb:3a:cf:15:
         d4:cb:ce:16:ff:dd:66:75:64:3b:b3:69:cc:3b:11:56:47:84:
         e1:b7:02:50:df:53:42:82:7b:7b:01:9d:e1:b7:66:04:b4:57:
         2f:93:64:a1:7b:04:69:48:4a:fc:70:d7:44:c2:d0:ce:f9:ba:
         1d:65:4b:8b:33:02:03:39:b1:9a:7c:d1:a5:c7:34:22:a1:84:
         34:e7:62:3d:d1:23:c4:a3:9a:8b:c9:c2:2f:80:64:35:7d:e4:
         f3:e3:c9:67:54:9e:79:be:28:34:36:7e:8a:6b:3f:8c:8a:90:
         92:b0:7e:4f:9e:76:cb:47:99:6d:80:93:b9:4d:ac:b8:f7:4f:
         57:30:3c:97:42:87:c4:2f:29:15:c1:be:60:93:69:16:50:e8:
         08:af:9e:8e:06:e7:7a:bb:39:a1:90:2c:4d:35:a6:8f:06:fa:
         3e:d7:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----