Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/Zpt6dc_bEnKBAoC4BLcsy9PBtk0.roa
File:                     Zpt6dc_bEnKBAoC4BLcsy9PBtk0.roa (raw, json)
Hash identifier:          Ocf9aXp3sy3fqpKIB5rBr6KF1H91xq6am5f4iHlQ0BU=
Subject key identifier:   66:9B:7A:75:CF:DB:12:72:81:02:80:B8:04:B7:2C:CB:D3:C1:B6:4D
Certificate issuer:       /CN=60eea357508922b49bdb83de6827202955d7db8d
Certificate serial:       0574FD20
Authority key identifier: 60:EE:A3:57:50:89:22:B4:9B:DB:83:DE:68:27:20:29:55:D7:DB:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YO6jV1CJIrSb24PeaCcgKVXX240.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/Zpt6dc_bEnKBAoC4BLcsy9PBtk0.roa
Signing time:             Tue 29 Mar 2022 09:02:02 +0000
ROA not before:           Tue 29 Mar 2022 09:02:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3320
IP address blocks:        2a0e:eb40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91553056 (0x574fd20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60eea357508922b49bdb83de6827202955d7db8d
        Validity
            Not Before: Mar 29 09:02:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=669b7a75cfdb1272810280b804b72ccbd3c1b64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ae:30:33:57:78:ee:fd:34:69:0a:40:c5:5c:
                    71:75:3c:e0:23:0c:8c:b3:7b:55:f3:9d:d8:63:26:
                    f9:4b:5b:4b:e6:fb:7b:db:39:f2:db:c0:78:88:03:
                    69:c3:da:3f:da:59:3a:a9:d3:bb:4b:f7:1e:3a:1f:
                    ff:69:5a:cb:08:3a:66:15:7d:47:a1:ef:89:03:58:
                    9a:c3:3c:36:d0:56:b5:23:6a:fe:41:ad:ac:c1:82:
                    06:bd:0a:5f:a9:7c:8d:97:27:39:69:cc:fa:b9:c9:
                    42:fb:db:e8:b1:4f:88:99:f9:18:5c:7f:08:bc:7a:
                    06:a4:ad:0a:55:61:05:f2:9b:a9:e7:bc:3f:b3:e8:
                    2e:7d:e6:e4:da:db:02:40:b4:bb:16:53:3f:fb:fd:
                    1d:c2:0d:7a:40:72:d5:68:95:ae:09:e6:2c:42:10:
                    8c:90:23:5d:45:67:7c:19:d5:e9:73:3f:07:82:8a:
                    38:c9:c8:b6:82:c8:4b:f5:f8:e6:6b:ed:fd:00:61:
                    8b:c3:7d:c9:e8:d2:78:59:4e:dc:44:5c:79:dd:6b:
                    f4:11:1e:3f:46:35:7e:42:09:91:30:83:be:f3:c2:
                    b9:da:14:45:cc:9c:71:71:00:1f:56:d5:33:bd:7a:
                    07:ac:73:f3:0d:77:28:23:33:0a:31:58:90:52:be:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9B:7A:75:CF:DB:12:72:81:02:80:B8:04:B7:2C:CB:D3:C1:B6:4D
            X509v3 Authority Key Identifier:
                keyid:60:EE:A3:57:50:89:22:B4:9B:DB:83:DE:68:27:20:29:55:D7:DB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO6jV1CJIrSb24PeaCcgKVXX240.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/Zpt6dc_bEnKBAoC4BLcsy9PBtk0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/YO6jV1CJIrSb24PeaCcgKVXX240.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:eb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:a6:7b:69:9c:77:e2:d2:75:17:7a:11:3a:c5:6d:cb:dd:6f:
         0a:39:d2:b1:2b:61:45:ad:aa:57:3c:cb:38:9a:8e:a6:ff:9b:
         b2:ec:0d:b6:89:2e:09:30:01:6b:55:cd:ee:40:11:3f:29:6a:
         1d:05:b8:c0:f8:1f:95:5a:33:4b:e1:32:86:f3:da:dd:52:a6:
         52:be:a0:f5:2f:21:30:90:2b:e5:19:a2:d6:d1:4e:5f:de:c0:
         10:c8:66:e2:71:b2:f8:64:5a:e6:f5:4e:67:9a:32:4c:c0:a0:
         97:51:88:00:d0:65:be:80:1f:a6:4f:be:fc:91:84:df:3c:5d:
         98:e5:b7:84:75:dd:fb:e0:02:81:65:ed:1d:ea:06:35:37:e2:
         26:df:47:39:2c:be:5c:ee:b8:d6:9a:ee:81:b6:a9:26:87:b3:
         41:dc:9f:8c:b4:95:7d:e3:95:02:a3:38:3f:5a:10:37:dd:8d:
         ef:73:39:fa:bc:13:99:dc:9f:01:1a:3a:4a:e0:b2:47:03:bf:
         60:fc:b3:aa:f4:b8:7c:06:4a:db:28:0f:70:51:53:17:22:9c:
         c7:4d:19:15:fc:eb:2b:21:67:15:9a:d4:08:0f:56:60:21:0a:
         c0:71:a1:a2:dc:2e:d6:47:40:bc:77:f0:3e:86:9f:cb:fc:47:
         ee:46:b6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----