Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/XkaKfqFoJaO-K5J7EjOD-dhdRPc.roa
File:                     XkaKfqFoJaO-K5J7EjOD-dhdRPc.roa (raw, json)
Hash identifier:          HO99X4r00WVlX046g40bOu9XiDJVwjKinGN75tp1pVA=
Subject key identifier:   5E:46:8A:7E:A1:68:25:A3:BE:2B:92:7B:12:33:83:F9:D8:5D:44:F7
Certificate issuer:       /CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Certificate serial:       019424459689966D628E8373BCBEB0646C9B
Authority key identifier: E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/XkaKfqFoJaO-K5J7EjOD-dhdRPc.roa
Signing time:             Wed 01 Jan 2025 23:48:47 +0000
ROA not before:           Wed 01 Jan 2025 23:48:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214517
IP address blocks:        2001:678:3b4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:96:89:96:6d:62:8e:83:73:bc:be:b0:64:6c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6bb4b9e8df6d664efcb77b410415c834a617782
        Validity
            Not Before: Jan  1 23:48:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5e468a7ea16825a3be2b927b123383f9d85d44f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:3d:9c:d5:d1:23:77:7c:31:3c:5a:0d:2a:
                    45:d4:99:23:fb:d5:39:ae:2e:e2:d3:16:1e:5f:41:
                    4a:72:de:bc:48:b9:32:f7:35:f3:ee:5b:19:d2:4a:
                    63:1a:43:06:81:71:76:de:bf:38:29:4d:05:fb:42:
                    cd:ef:23:ef:12:7b:9b:42:e6:83:8f:ec:df:2d:d1:
                    ea:d7:20:f0:15:87:e8:26:f6:e9:39:9f:73:57:c5:
                    4d:55:3d:11:dd:15:f6:cc:0d:c7:e6:ef:9a:f6:19:
                    26:95:8a:db:32:fe:4b:38:9a:78:57:e5:12:f9:eb:
                    dd:e2:be:21:c0:02:f5:29:0d:16:a3:6d:5a:1a:23:
                    7b:e7:66:86:9f:cc:13:7d:ac:c1:cd:87:af:be:17:
                    d2:b9:64:24:38:4a:2e:7a:15:4b:c3:09:00:86:ad:
                    8f:f4:96:e9:be:90:2d:c8:83:b7:5e:80:9f:34:d1:
                    8b:a2:b6:51:be:af:2d:2c:61:50:a3:15:53:7d:34:
                    1d:61:11:d9:ee:c5:0f:87:60:10:6d:84:18:fc:d1:
                    6b:bb:74:3a:f3:e6:3c:1d:07:27:c7:2c:37:2b:64:
                    9a:f5:f9:f7:c4:fe:71:d1:00:e3:23:3f:52:30:74:
                    ef:db:0e:58:2f:a8:3a:2b:2c:32:99:31:f4:09:c4:
                    0b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:46:8A:7E:A1:68:25:A3:BE:2B:92:7B:12:33:83:F9:D8:5D:44:F7
            X509v3 Authority Key Identifier:
                keyid:E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/XkaKfqFoJaO-K5J7EjOD-dhdRPc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:3b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:9d:dc:ae:f0:7e:61:8b:a7:84:e2:81:f1:e8:86:13:ac:6d:
         ff:cf:ea:15:d2:17:8e:98:ec:45:6e:bc:ac:a9:c4:20:7f:f0:
         4d:8b:c5:34:51:b7:47:ca:33:05:62:d0:a2:4c:e5:45:fe:49:
         b9:dc:b2:c3:9f:a5:46:5a:e2:e1:06:29:f5:b5:35:f0:68:c0:
         80:a3:d3:6a:01:90:40:18:56:f4:16:1d:fa:d6:bc:45:37:ae:
         54:88:27:23:de:3b:6a:b3:a0:88:32:4d:65:c3:de:69:92:23:
         d5:56:97:63:12:e8:c5:45:6b:16:df:70:89:43:fc:7c:9c:b2:
         5e:94:17:90:9e:6a:15:65:ff:ec:3e:1f:be:19:7b:14:cd:25:
         b4:eb:c4:b2:7c:a8:b3:a7:74:97:2b:77:45:af:8c:aa:79:c9:
         04:4a:4e:1d:b6:86:c5:4f:5c:93:b2:7f:49:a1:28:ef:6d:c5:
         58:8f:bb:6d:77:5d:30:03:d9:4e:1e:39:e0:6a:38:f6:5e:84:
         83:db:c0:94:23:ce:da:0b:cf:fd:b6:ce:99:76:32:88:ea:b5:
         45:49:3e:34:c1:94:a8:a9:13:35:5c:f0:d7:97:da:22:e3:ea:
         ae:cf:2a:9a:14:5e:91:d4:18:c2:51:45:69:a4:64:27:9c:a6:
         3b:fa:6a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----