Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/jSoECDBgi6VXYwcb2Ry0gxkfevA.roa
File:                     jSoECDBgi6VXYwcb2Ry0gxkfevA.roa (raw, json)
Hash identifier:          IB9PwzbzFSot/avb9nPz1wMhdqqmWhuiYKAtdM5DSM0=
Subject key identifier:   8D:2A:04:08:30:60:8B:A5:57:63:07:1B:D9:1C:B4:83:19:1F:7A:F0
Certificate issuer:       /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial:       019425214FE158A561C33FB8EFC71A98B341
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/jSoECDBgi6VXYwcb2Ry0gxkfevA.roa
Signing time:             Thu 02 Jan 2025 03:48:47 +0000
ROA not before:           Thu 02 Jan 2025 03:48:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     50399
IP address blocks:        2a10:dac0:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:4f:e1:58:a5:61:c3:3f:b8:ef:c7:1a:98:b3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
        Validity
            Not Before: Jan  2 03:48:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8d2a040830608ba55763071bd91cb483191f7af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:27:4d:2c:2e:a1:7b:ee:cd:fe:0d:b6:7a:a2:
                    32:25:4e:33:5e:66:5d:80:fd:92:a5:7a:da:f9:59:
                    84:bc:7d:6c:cd:94:50:93:35:86:52:82:37:1d:30:
                    6d:c0:eb:70:24:e1:5a:36:af:1c:24:f0:1d:8a:12:
                    9b:27:d9:d3:c8:27:a8:8a:0f:f8:6d:25:aa:a0:92:
                    bb:8c:43:e7:65:07:46:a2:b4:e9:16:c4:33:81:bd:
                    1f:ff:47:6a:8a:36:b2:10:64:4c:af:14:a7:18:9e:
                    55:0a:67:69:53:5e:c1:03:0e:ee:62:3e:c8:6c:11:
                    54:93:59:20:3a:c7:55:be:e0:0c:cd:25:cf:06:e7:
                    a2:14:37:d9:e5:8a:da:00:40:68:e1:ba:9d:ca:e1:
                    49:89:24:9a:9f:5f:cd:4f:34:e3:11:88:59:d5:b4:
                    53:21:a3:65:f0:a4:d0:06:95:4e:d1:c5:47:d1:48:
                    8b:b0:dd:0e:52:f5:8c:78:29:9c:86:31:3b:b6:fc:
                    2c:d9:a8:d1:42:20:4e:07:3e:ae:82:25:87:23:b5:
                    8a:9a:62:82:06:ca:d5:dd:e8:09:98:33:58:36:9d:
                    d3:a8:9e:4f:34:b1:3d:a3:1d:2c:fa:1c:c9:c6:62:
                    e9:0a:99:02:fd:95:19:81:c1:fb:00:24:a0:6d:a5:
                    d7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2A:04:08:30:60:8B:A5:57:63:07:1B:D9:1C:B4:83:19:1F:7A:F0
            X509v3 Authority Key Identifier:
                keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/jSoECDBgi6VXYwcb2Ry0gxkfevA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:dac0:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:66:c5:fc:7a:e4:a8:9c:7a:48:8f:e1:ac:1e:09:9c:b4:ba:
         c7:b9:34:79:17:6c:db:c6:29:88:41:20:f1:00:3b:00:3d:c3:
         91:1c:9e:e2:c3:65:05:dc:af:d3:9f:73:83:d6:e7:c9:85:86:
         8e:a3:e6:c7:df:cb:55:b1:64:da:fa:33:2f:86:25:c3:27:7c:
         12:0a:26:69:1b:cb:bf:74:af:05:ff:bd:d8:87:8d:e8:1f:35:
         2c:a4:11:44:f9:af:25:56:d8:1b:ad:00:63:6e:a6:0b:96:29:
         91:a2:f8:f7:d2:67:03:60:67:50:83:3e:3f:39:ef:da:ab:74:
         1a:4b:84:b0:6c:d8:37:73:b1:de:98:25:09:66:bf:79:b0:80:
         ab:f0:db:6a:cb:1b:43:44:be:cb:a2:1f:32:cf:ab:e8:b7:be:
         fb:6d:97:14:b5:dd:4d:47:f4:6e:96:f6:c3:36:21:f4:e0:ce:
         55:0e:56:0f:38:b8:6a:c6:be:44:7c:1e:12:8d:22:d3:fc:6c:
         18:31:00:52:87:9d:b6:5c:ae:5c:35:12:30:a9:db:23:c2:84:
         3b:ff:f8:c8:3d:48:46:04:27:23:71:e9:a2:8b:8e:24:d2:be:
         2a:da:62:d4:cd:dc:ea:92:88:28:3c:a9:98:ec:02:d5:0d:1d:
         da:63:92:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----