Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/9WCM-NfBtEzVC0bLgcXxGw_dKs0.roa
File:                     9WCM-NfBtEzVC0bLgcXxGw_dKs0.roa (raw, json)
Hash identifier:          +AotBLTXOYZ2qqQz68W39gfX7TdnqXgGz673AR3fS9c=
Subject key identifier:   F5:60:8C:F8:D7:C1:B4:4C:D5:0B:46:CB:81:C5:F1:1B:0F:DD:2A:CD
Certificate issuer:       /CN=89008da41922728bc5bedbbd7088701c529b99ed
Certificate serial:       019523FA8739306EAB331525B793E302B315
Authority key identifier: 89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/9WCM-NfBtEzVC0bLgcXxGw_dKs0.roa
Signing time:             Thu 20 Feb 2025 15:29:36 +0000
ROA not before:           Thu 20 Feb 2025 15:29:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213418
IP address blocks:        2a14:b700::/32 maxlen: 32
                          2a14:b701::/32 maxlen: 32
                          2a14:b702::/32 maxlen: 32
                          2a14:b703::/32 maxlen: 32
                          2a14:b704::/32 maxlen: 32
                          2a14:b705::/32 maxlen: 32
                          2a14:b706::/32 maxlen: 32
                          2a14:b707::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:23:fa:87:39:30:6e:ab:33:15:25:b7:93:e3:02:b3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89008da41922728bc5bedbbd7088701c529b99ed
        Validity
            Not Before: Feb 20 15:29:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f5608cf8d7c1b44cd50b46cb81c5f11b0fdd2acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ee:7e:d7:58:13:12:da:74:be:db:b8:db:e9:
                    b0:9b:07:2a:98:e1:4b:27:9f:08:29:c9:a8:de:f5:
                    db:a3:b0:ee:b2:b1:c0:b5:ac:76:87:f8:3a:57:ef:
                    60:eb:49:85:00:88:f6:4b:04:43:6c:ed:45:65:2e:
                    7b:c6:70:88:f3:e2:d0:13:71:ab:71:b6:ce:43:c7:
                    82:5c:4a:51:af:58:4c:6d:53:aa:4a:06:fc:04:91:
                    8e:e2:1c:64:9e:0e:86:22:f1:82:fc:36:98:61:09:
                    63:ce:ab:f1:e7:d5:db:3b:ca:00:d4:d2:9e:e7:d2:
                    cd:4c:f1:9a:f5:ea:8f:b3:c7:cc:bb:e3:97:cb:fa:
                    57:7c:84:03:7e:36:75:f2:9d:76:36:2a:24:2c:bc:
                    41:97:ef:35:58:30:a4:4d:c9:f4:9d:0a:8e:0c:f7:
                    03:f4:86:83:60:6f:0c:66:8b:c8:a3:81:7d:04:18:
                    2d:b0:cb:90:93:8d:6b:9d:1f:9f:b1:fa:b6:89:ca:
                    60:2f:7c:6e:f8:1d:54:09:f6:fe:2a:0c:0c:b8:2e:
                    70:55:1e:b8:a9:f5:0a:c4:c9:c9:cb:a2:5b:93:31:
                    20:de:22:f7:52:f2:ef:73:5d:05:69:63:69:52:3a:
                    84:ca:85:30:f0:10:9f:45:79:49:3e:e4:bb:e5:99:
                    83:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:60:8C:F8:D7:C1:B4:4C:D5:0B:46:CB:81:C5:F1:1B:0F:DD:2A:CD
            X509v3 Authority Key Identifier:
                keyid:89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/9WCM-NfBtEzVC0bLgcXxGw_dKs0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:b700::/29

    Signature Algorithm: sha256WithRSAEncryption
         8f:eb:40:43:ed:a6:54:79:e8:d5:1a:f4:e7:56:b7:90:e7:84:
         37:e7:65:3c:74:58:da:9a:11:9d:bb:d1:04:c9:0c:8c:31:c3:
         98:f8:3f:8e:f9:bc:53:c1:03:4e:28:2f:35:2c:ca:ad:21:8b:
         7c:42:07:de:06:b5:14:a6:09:f0:33:12:16:3b:23:b5:6c:ad:
         8d:e8:ca:b2:d8:c4:ea:08:35:50:49:37:53:32:71:49:dd:a4:
         be:59:43:df:ed:3c:ab:52:8f:05:82:0f:94:8e:a7:f7:92:f5:
         a8:b1:31:23:af:71:07:58:0e:70:f6:a7:aa:c5:d9:4d:fb:93:
         98:fa:1c:47:02:aa:88:f8:76:58:a9:a3:95:cf:5d:45:3c:4f:
         49:35:db:2b:7f:cc:66:2a:ce:ee:29:60:48:92:11:8a:d1:1a:
         e1:ab:09:ff:1c:0d:3e:18:fd:4d:37:98:fb:02:bb:a3:09:97:
         d4:2d:42:c6:4f:be:e8:2d:2c:35:36:b4:4e:aa:00:e1:ff:e5:
         ae:c6:c5:8a:10:c0:b0:43:c9:c4:e5:57:a1:b5:47:3c:4d:76:
         83:04:30:ed:a1:d4:46:14:2f:c8:97:88:2a:74:b6:ea:ed:c0:
         f8:a5:59:4d:2e:e2:97:75:37:e5:d6:ad:aa:f1:c5:e0:81:7f:
         1c:45:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----