Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/o99Nup4psTKMh8kJYocwkh14uKQ.roa
File:                     o99Nup4psTKMh8kJYocwkh14uKQ.roa (raw, json)
Hash identifier:          lhz5Qy+hcNJDmky6RtlI26JguzX0YUJj3nMqDKA0YLM=
Subject key identifier:   A3:DF:4D:BA:9E:29:B1:32:8C:87:C9:09:62:87:30:92:1D:78:B8:A4
Certificate issuer:       /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial:       0195F2D5C1452253166EEF3197283E028A36
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/o99Nup4psTKMh8kJYocwkh14uKQ.roa
Signing time:             Tue 01 Apr 2025 19:30:49 +0000
ROA not before:           Tue 01 Apr 2025 19:30:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213423
IP address blocks:        2a04:5b81:21d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:f2:d5:c1:45:22:53:16:6e:ef:31:97:28:3e:02:8a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
        Validity
            Not Before: Apr  1 19:30:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a3df4dba9e29b1328c87c909628730921d78b8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:57:fd:6f:2d:a2:5a:4d:ce:0d:5b:88:9c:4b:
                    75:2a:b4:71:16:10:92:85:0b:d6:a6:50:5a:1e:4d:
                    74:5b:cf:df:17:44:4e:11:40:68:fc:0e:76:c9:8e:
                    7b:af:69:14:52:b1:3e:b1:35:c9:3b:66:f2:7f:7d:
                    25:2c:62:07:24:4b:a2:9a:1d:64:83:40:76:5b:26:
                    0f:ff:2f:9c:8a:6b:c9:88:53:9c:af:8e:49:ca:fe:
                    e2:00:82:b8:e6:4b:47:d8:e0:a4:1d:50:53:7a:03:
                    a9:92:be:d4:f2:67:6e:21:df:df:3d:95:ce:bf:38:
                    01:8d:62:93:3c:2d:a8:e6:c2:ed:06:0c:43:8a:48:
                    41:f3:aa:21:ef:1b:34:52:4c:2d:2a:6a:a8:be:d7:
                    33:ef:f1:e5:28:e5:5d:e0:7f:84:a7:6d:a8:f3:28:
                    d8:a4:8a:92:be:b7:d3:d0:44:41:ba:50:f8:fa:1e:
                    89:77:de:8c:40:d0:f0:83:cc:ed:62:cf:b7:73:11:
                    5d:c0:f2:2d:07:98:1f:50:c6:9c:d9:f9:84:56:25:
                    42:b0:5b:21:11:b9:a0:27:64:e9:1c:bf:00:c1:4b:
                    15:a9:01:e3:4d:9d:67:25:06:b9:04:ea:57:9b:0d:
                    5c:dc:a8:3a:33:3c:d0:a5:4e:59:97:c2:18:b1:19:
                    6b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DF:4D:BA:9E:29:B1:32:8C:87:C9:09:62:87:30:92:1D:78:B8:A4
            X509v3 Authority Key Identifier:
                keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/o99Nup4psTKMh8kJYocwkh14uKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:5b81:21d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:47:66:60:d0:db:32:2d:e3:19:8a:ff:47:40:fc:38:9e:77:
         53:7d:e2:af:89:7b:14:a6:a7:a0:4c:f0:36:96:3d:01:8a:d7:
         7e:7b:13:8b:b6:b0:31:15:3e:32:93:26:6e:69:c3:c5:49:59:
         0a:98:70:83:81:79:10:47:a2:0c:41:6f:e4:57:1b:39:f6:ef:
         11:1d:48:0a:58:0d:16:18:8f:09:55:c9:5b:8f:82:3c:83:97:
         1b:4f:d2:4e:0c:8e:2d:ad:52:8e:4b:91:d8:e5:9f:9b:9e:fa:
         38:89:94:cb:fd:fc:b3:dd:e9:d1:ff:2e:db:b3:b0:31:8e:0b:
         81:d0:91:af:f0:8c:6b:a7:19:d0:f5:06:25:09:e9:08:84:c3:
         4f:52:e6:c8:db:18:fb:ab:f1:3d:b0:39:15:c7:27:e8:ad:15:
         d9:f2:fb:d0:10:ec:af:c0:c5:e7:c2:90:cf:48:af:8f:50:d8:
         84:9f:52:29:60:8d:04:28:cd:f0:55:d5:63:a2:fb:32:4f:66:
         86:75:a4:73:04:be:6b:35:9d:04:cf:7d:b0:6a:b8:90:ea:ad:
         03:d1:c8:98:c7:b6:96:8d:06:48:e1:e7:77:ee:81:4a:99:b8:
         c6:0e:a1:14:ae:d9:b3:0e:53:09:14:db:64:f8:49:ea:66:67:
         06:f2:d1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----