Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/xfkDaLGtqI9S0koDwH1ibKq86PQ.roa
File:                     xfkDaLGtqI9S0koDwH1ibKq86PQ.roa (raw, json)
Hash identifier:          9SMgRbgNtClui+eod+bviRGqIN366+5FDeHZRxM9wm0=
Subject key identifier:   C5:F9:03:68:B1:AD:A8:8F:52:D2:4A:03:C0:7D:62:6C:AA:BC:E8:F4
Certificate issuer:       /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial:       0194EEF0B76DE49AA85E95BE04D1CEF9AC15
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/xfkDaLGtqI9S0koDwH1ibKq86PQ.roa
Signing time:             Mon 10 Feb 2025 08:19:00 +0000
ROA not before:           Mon 10 Feb 2025 08:19:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215893
IP address blocks:        2a12:5840:2510::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ee:f0:b7:6d:e4:9a:a8:5e:95:be:04:d1:ce:f9:ac:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
        Validity
            Not Before: Feb 10 08:19:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c5f90368b1ada88f52d24a03c07d626caabce8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:65:89:e4:77:5a:b3:25:c7:4a:ba:19:70:
                    8d:37:51:06:a2:fb:69:57:02:e4:43:20:ad:68:68:
                    81:db:94:94:0e:c9:ba:97:e5:4e:ef:ef:69:50:20:
                    67:18:fd:5d:78:66:cb:49:1d:a8:e9:ac:12:2c:8b:
                    e6:51:87:bb:c9:2d:0f:9d:52:32:24:34:7f:39:a8:
                    95:e7:cc:e6:7f:32:6f:55:16:1b:94:a5:32:9a:f6:
                    cb:42:7d:62:85:86:d4:63:bc:b4:09:49:bd:0c:99:
                    cc:37:07:2c:ca:89:c0:b0:35:c1:f5:0f:cb:79:af:
                    26:f7:0a:06:20:49:15:39:d7:eb:3a:be:6b:bd:0b:
                    18:df:b1:6b:9e:76:f6:1d:a1:63:73:b8:af:7e:b3:
                    39:39:ef:8f:3f:d8:dc:7e:57:77:fe:f1:3a:b8:48:
                    19:ce:f8:e1:f9:7f:e1:48:e2:ab:3f:70:c9:d2:06:
                    ae:51:17:91:54:92:9e:8d:86:af:39:fb:74:64:dc:
                    46:27:62:53:7c:51:db:f6:82:99:bd:88:67:e0:5c:
                    f5:76:6c:39:0d:e5:ad:6d:08:1c:eb:77:33:22:25:
                    88:28:c4:cd:b6:e7:d3:e2:12:56:03:4d:4d:5f:10:
                    57:eb:a6:73:a1:27:58:7a:a0:32:5a:61:58:05:b2:
                    3b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F9:03:68:B1:AD:A8:8F:52:D2:4A:03:C0:7D:62:6C:AA:BC:E8:F4
            X509v3 Authority Key Identifier:
                keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/xfkDaLGtqI9S0koDwH1ibKq86PQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:5840:2510::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:3c:2f:66:46:35:ee:9f:eb:43:a7:43:87:3b:7e:f0:63:e8:
         14:34:43:c6:8e:6a:de:80:0c:f1:9a:f4:d7:b5:49:ec:18:e6:
         c8:3b:b7:89:41:27:f7:1a:88:c7:86:e4:20:07:5c:97:9f:af:
         1e:52:d6:1c:77:26:f4:e4:d2:00:0b:2f:05:22:c7:3d:e8:82:
         2b:49:77:9e:95:bc:b8:e2:bc:3d:f5:37:b1:53:f1:7c:0d:50:
         f4:f8:95:68:a3:b8:49:9a:ca:c2:70:b4:ff:c1:f4:c0:89:2d:
         6d:63:21:2e:e4:cd:75:fd:cf:e5:4f:8b:d1:b1:0e:a8:8b:40:
         05:b4:95:25:1d:aa:ad:5f:62:b6:f8:c1:63:26:22:a1:48:ce:
         c9:50:47:1e:63:ed:29:75:f4:da:b0:40:b9:4c:4a:66:de:63:
         89:f8:cc:95:aa:75:37:86:9c:e9:1e:27:3b:f1:69:70:90:c8:
         d1:3c:bb:51:ef:14:39:6c:91:10:8e:39:00:04:38:94:3a:60:
         37:92:ff:4e:d0:85:4e:d0:dd:94:3c:71:e8:12:1f:3c:74:d0:
         f3:af:c3:0d:a8:7e:5e:cf:7c:76:90:1e:20:b9:43:79:ea:95:
         24:d5:58:94:73:a4:49:4a:b6:5a:0a:fb:ce:fa:7d:70:dc:13:
         f4:8d:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----