Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/z5yYOxFSpOQ1zd8dnbyl44cA2Cc.roa
File:                     z5yYOxFSpOQ1zd8dnbyl44cA2Cc.roa (raw, json)
Hash identifier:          rTNzicdR5UxEu+zSwQpGpaPQg7acnJ6eKVlTT5jJQ8s=
Subject key identifier:   CF:9C:98:3B:11:52:A4:E4:35:CD:DF:1D:9D:BC:A5:E3:87:00:D8:27
Certificate issuer:       /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial:       019424B39CE70727ABF7D60CAF029C76093D
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/z5yYOxFSpOQ1zd8dnbyl44cA2Cc.roa
Signing time:             Thu 02 Jan 2025 01:48:58 +0000
ROA not before:           Thu 02 Jan 2025 01:48:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     62359
IP address blocks:        2a01:4a0:5::/48 maxlen: 48
                          2a01:4a0:15::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:9c:e7:07:27:ab:f7:d6:0c:af:02:9c:76:09:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
        Validity
            Not Before: Jan  2 01:48:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cf9c983b1152a4e435cddf1d9dbca5e38700d827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b0:19:24:e8:f3:68:ce:6a:06:fd:8b:39:20:
                    d6:ae:84:93:8d:3b:82:20:24:b3:cf:6d:42:a4:95:
                    ec:b5:8d:7d:a5:e6:af:76:52:b8:36:16:3f:a4:06:
                    17:4d:72:fc:ff:ac:8a:8a:e8:24:ce:5e:9d:50:b5:
                    ec:d5:b3:af:b6:4a:1a:8c:5a:64:96:4d:eb:e3:cf:
                    a4:e6:06:1a:5b:cd:6a:c2:6c:d5:cb:94:84:c2:fe:
                    d0:ab:08:7c:c6:20:ea:bb:9b:47:12:bb:9e:55:2f:
                    1b:50:c6:2b:c7:5d:67:86:d7:4d:5e:a8:d3:d3:28:
                    f0:f2:61:8a:78:91:dc:ad:e7:5b:3f:38:7e:2b:75:
                    e8:0d:75:ab:55:48:27:3d:56:f7:3a:e6:f7:1c:6f:
                    fa:38:71:74:5f:74:92:d2:55:10:75:46:ef:b9:82:
                    04:84:58:f7:06:34:5c:4c:d5:13:f3:72:ce:03:c0:
                    52:19:b1:47:9c:d3:91:93:df:66:ea:ec:5c:8c:4a:
                    94:a4:f8:39:2e:e7:a9:87:a8:fc:af:41:69:14:03:
                    c0:ab:62:05:53:23:0d:df:3b:b7:1e:ab:a8:78:2f:
                    80:a0:b2:86:bc:7f:31:a6:d4:3c:e7:d0:13:80:6e:
                    fa:d4:ba:d6:ac:6b:7a:33:96:4d:ee:5c:6c:b4:56:
                    fb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9C:98:3B:11:52:A4:E4:35:CD:DF:1D:9D:BC:A5:E3:87:00:D8:27
            X509v3 Authority Key Identifier:
                keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/z5yYOxFSpOQ1zd8dnbyl44cA2Cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:4a0:5::/48
                  2a01:4a0:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:72:78:42:d6:0c:99:fa:44:15:09:be:89:88:78:45:9d:c1:
         e5:2a:bd:15:85:18:cf:75:c4:87:c7:c6:32:96:77:92:2c:da:
         5e:15:a5:d0:c0:cd:f5:ec:31:b4:e9:a4:0d:be:58:38:a9:c6:
         bd:e3:cd:64:d7:0d:79:17:23:52:7e:4d:fa:4e:e0:f4:38:d1:
         dd:e0:cb:15:69:84:dc:0c:06:50:32:e6:12:b7:04:89:e9:e1:
         d4:2f:8f:31:1a:90:b3:a1:11:a3:fc:35:d2:17:22:c4:ad:de:
         75:db:01:24:c3:de:26:80:d6:cc:94:bc:f9:0e:3e:74:e1:fb:
         f6:a1:7e:33:0b:67:a6:1a:ae:93:c0:07:72:86:ab:d6:ac:a8:
         73:8b:f9:38:41:cd:24:85:09:b9:61:b3:2f:38:22:f7:a0:aa:
         11:71:c8:63:ac:3e:c0:57:35:4a:e9:b9:74:88:6f:7c:e0:e5:
         17:92:30:2b:c5:d6:97:f0:0a:c4:e7:2a:40:eb:f5:05:5a:53:
         c6:93:6e:d2:2a:36:3e:d5:4c:77:19:7c:aa:c2:2f:40:d9:dc:
         c8:d3:c8:e0:2d:3d:38:1f:32:74:8b:01:b9:1d:6a:9f:e0:af:
         14:7b:ed:5e:00:b5:04:3c:5e:1e:aa:1a:6f:91:a9:ba:c0:f5:
         c0:cb:44:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----