Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/A8TukvgDm2_mAvbO8Qh2ldXZd9Y.roa
File:                     A8TukvgDm2_mAvbO8Qh2ldXZd9Y.roa (raw, json)
Hash identifier:          /JIMryvixQaluB5n97mezkD1EyPJinxMba0OGSdEKhE=
Subject key identifier:   03:C4:EE:92:F8:03:9B:6F:E6:02:F6:CE:F1:08:76:95:D5:D9:77:D6
Certificate issuer:       /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial:       0195FCC7D6B5A4994BB7E6FF527C89F8244E
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/A8TukvgDm2_mAvbO8Qh2ldXZd9Y.roa
Signing time:             Thu 03 Apr 2025 17:51:49 +0000
ROA not before:           Thu 03 Apr 2025 17:51:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21534
IP address blocks:        2a05:4200:7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:fc:c7:d6:b5:a4:99:4b:b7:e6:ff:52:7c:89:f8:24:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
        Validity
            Not Before: Apr  3 17:51:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=03c4ee92f8039b6fe602f6cef1087695d5d977d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:48:02:a8:00:2a:2f:77:a2:88:74:f6:3a:f3:
                    7d:09:c9:4b:3a:49:91:db:12:0a:cf:2a:5e:ca:ee:
                    24:ec:be:ed:f3:b6:4f:f3:f9:db:88:a8:bf:cd:ff:
                    0a:df:43:99:3b:8e:73:0c:9a:35:1b:3b:c3:b9:a5:
                    01:1a:bb:df:cd:ef:71:76:9f:f3:d3:5f:65:f3:50:
                    e5:20:59:72:a0:cb:ec:fe:0d:14:c4:d0:40:1f:20:
                    35:51:d8:88:dc:52:6f:e6:5c:c5:e8:e8:53:3f:d9:
                    ce:11:97:3f:97:6e:b3:18:20:b0:5e:1b:24:be:49:
                    1c:5b:f2:98:d5:8b:27:1c:f6:96:aa:23:ca:30:6e:
                    65:96:8d:2b:1d:2c:dd:53:0a:6f:7c:73:e3:e8:3a:
                    73:6c:53:9f:ed:af:10:0b:20:a2:a4:e3:1a:be:98:
                    7b:68:b0:f1:f5:fd:ad:c9:32:82:c2:6a:03:c6:52:
                    10:7d:ab:03:8d:20:ba:ba:17:4b:3a:6c:a7:05:96:
                    8c:9f:2e:00:4e:4d:b6:8c:5e:eb:68:48:66:bc:aa:
                    cc:ef:89:9c:6a:97:62:39:f7:30:df:73:96:63:d8:
                    e1:11:27:7c:2d:5f:a8:42:0b:22:ec:68:ea:84:d5:
                    24:eb:bd:dd:c3:00:39:59:81:d6:76:d1:80:34:d6:
                    6e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C4:EE:92:F8:03:9B:6F:E6:02:F6:CE:F1:08:76:95:D5:D9:77:D6
            X509v3 Authority Key Identifier:
                keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/A8TukvgDm2_mAvbO8Qh2ldXZd9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4200:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:0d:1e:c0:28:14:09:fa:d7:92:3d:1b:25:b6:1b:bd:de:ca:
         d6:19:3b:da:fb:ec:09:67:60:61:11:8b:28:6f:e8:3b:0c:15:
         12:81:48:01:67:0a:73:60:9d:aa:15:06:aa:fb:cd:db:d1:1d:
         09:11:39:88:d3:fb:47:ff:5b:80:bc:11:16:49:5f:31:5c:bb:
         2f:ec:9b:e6:81:8b:53:f8:71:44:5d:c6:ed:d9:15:e7:98:56:
         0a:6b:ea:7d:a3:36:12:f0:26:d5:26:ff:bf:c5:53:14:2e:51:
         d8:ca:38:67:c9:0d:57:fb:7b:f2:a5:68:9e:fe:fd:40:88:f0:
         f1:54:69:d0:c3:1d:a5:46:be:da:d2:28:96:1f:a2:47:9a:fb:
         9d:b5:6a:6c:4b:dc:6d:4a:fa:27:ad:b2:eb:8b:10:c1:5b:c0:
         c4:e9:c7:71:2c:0b:9c:9c:bd:4f:82:e0:39:ea:90:9e:57:92:
         69:e1:f1:48:7d:97:21:d5:a2:77:fa:21:e9:49:30:ac:16:31:
         11:7f:22:89:c1:20:f5:da:a2:ec:b6:28:dc:8f:2a:af:34:58:
         e5:e6:8e:14:6d:df:9c:13:29:57:23:ca:4e:9d:ff:af:69:2a:
         26:1c:54:19:10:17:b6:e2:0f:52:55:f2:1f:71:78:0b:99:5f:
         3a:b9:f8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----