Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/U-fVsAzVUeL_Z-ankKvIgZq9Jyw.roa
File:                     U-fVsAzVUeL_Z-ankKvIgZq9Jyw.roa (raw, json)
Hash identifier:          DlPKFQLqWGQmuEtcI1Wnh+gx1r6Aa6TlPTV36nckOjc=
Subject key identifier:   53:E7:D5:B0:0C:D5:51:E2:FF:67:E6:A7:90:AB:C8:81:9A:BD:27:2C
Certificate issuer:       /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial:       0194236983D3CFB77971CFE4C91BF1320D49
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/U-fVsAzVUeL_Z-ankKvIgZq9Jyw.roa
Signing time:             Wed 01 Jan 2025 19:48:25 +0000
ROA not before:           Wed 01 Jan 2025 19:48:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     51517
IP address blocks:        2a10:e300::/32 maxlen: 32
                          2a10:e300:8411::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:83:d3:cf:b7:79:71:cf:e4:c9:1b:f1:32:0d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
        Validity
            Not Before: Jan  1 19:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=53e7d5b00cd551e2ff67e6a790abc8819abd272c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:e7:2a:29:f6:1b:80:f2:48:f1:8a:40:e3:
                    c3:43:9d:3d:db:28:2c:67:d6:5e:7b:57:6f:2c:4e:
                    41:1a:39:d4:0b:d5:d0:2a:d1:56:d6:72:95:ad:2b:
                    f1:3b:1c:5e:36:78:d3:45:e2:47:52:41:dc:c5:bb:
                    02:39:e3:28:7f:1f:63:63:39:7c:2b:70:24:55:93:
                    b2:65:de:e5:f4:33:fa:3b:98:81:62:fb:e1:b8:bc:
                    16:1c:0a:62:10:2c:43:b3:d6:03:2f:2a:17:f4:b1:
                    6d:7f:1f:8f:75:f5:ea:37:c7:e0:b8:b5:26:50:00:
                    4e:a4:b2:e8:ce:92:7f:e9:2b:dc:d2:27:ab:97:af:
                    3e:15:4e:e4:c0:49:8b:1c:29:14:51:17:55:99:50:
                    76:43:9a:90:3e:c5:a1:c5:c5:13:2d:c0:70:5d:69:
                    76:ff:9b:5f:7e:88:fb:2e:f2:5c:4d:53:01:48:8a:
                    14:19:49:72:42:1d:15:ba:11:65:c9:3c:09:90:5f:
                    d6:85:ff:5c:af:00:c1:1d:65:8b:4c:8c:ec:54:ce:
                    cc:63:93:12:6a:9c:65:dd:36:b1:ee:5a:3f:28:2b:
                    56:52:4b:e6:7a:ba:6f:2b:5a:0f:b3:9d:d0:a9:8b:
                    ef:06:24:56:08:9e:0d:05:ee:5c:99:5c:b3:25:14:
                    8d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E7:D5:B0:0C:D5:51:E2:FF:67:E6:A7:90:AB:C8:81:9A:BD:27:2C
            X509v3 Authority Key Identifier:
                keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/U-fVsAzVUeL_Z-ankKvIgZq9Jyw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:e300::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:94:e0:01:92:e8:a1:7c:b7:c4:fd:b8:81:74:be:81:a7:92:
         f6:10:60:b3:d2:46:65:e3:80:27:41:f7:a4:d3:9e:1d:23:fd:
         58:be:18:1b:f3:21:48:83:82:69:71:8f:1e:4d:17:94:8a:9c:
         c8:c9:e3:36:5b:7a:8e:c4:da:54:85:59:1d:fb:d5:29:7d:91:
         a4:0f:5b:87:44:1d:af:c9:75:6f:38:d3:e2:df:a6:03:02:16:
         b6:a0:4f:5e:af:41:9c:e1:58:7d:d1:bd:39:87:d4:00:32:36:
         22:c4:4f:fd:8f:33:6f:e7:b6:c3:d5:60:75:89:e3:38:d3:8e:
         41:a3:65:4e:d7:d5:94:4f:9a:3d:eb:68:ee:35:f0:4c:0f:67:
         ae:61:f9:c1:c8:92:69:d7:35:bc:df:3d:5a:05:0d:5e:b4:67:
         8e:1c:4b:d0:e6:c1:8a:4c:1e:76:83:f4:de:7b:cd:7c:34:a6:
         0a:93:90:f4:d1:9d:f8:45:b3:29:6b:da:19:02:20:2c:72:29:
         19:6e:83:db:9b:1d:e5:29:9c:09:fd:fd:bb:64:11:66:22:e8:
         3a:a9:96:d0:73:ea:6a:9f:79:8d:25:03:ee:59:06:0c:67:af:
         e9:4e:e8:d1:53:e0:5f:e1:b5:fc:cf:16:d1:0d:b1:53:91:b1:
         c4:e4:0b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----