Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/kbIKXfyrQieSTZCjNAsPSb_dgGY.roa
File:                     kbIKXfyrQieSTZCjNAsPSb_dgGY.roa (raw, json)
Hash identifier:          gYFYIUtXaZJHM1/r08VSADCf+TGZjjkYv1FzaOId8qg=
Subject key identifier:   91:B2:0A:5D:FC:AB:42:27:92:4D:90:A3:34:0B:0F:49:BF:DD:80:66
Certificate issuer:       /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial:       019614B1F825BF319171E77C9F7E1327F093
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/kbIKXfyrQieSTZCjNAsPSb_dgGY.roa
Signing time:             Tue 08 Apr 2025 09:18:49 +0000
ROA not before:           Tue 08 Apr 2025 09:18:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     43833
IP address blocks:        2a00:4b80::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:14:b1:f8:25:bf:31:91:71:e7:7c:9f:7e:13:27:f0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
        Validity
            Not Before: Apr  8 09:18:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=91b20a5dfcab4227924d90a3340b0f49bfdd8066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:40:77:3d:de:a0:cf:ef:ca:cc:ad:03:3a:bf:
                    8f:b8:2e:a5:be:99:fe:37:5d:33:86:b4:d7:02:dc:
                    61:42:36:a8:c3:6c:ac:4a:be:0d:20:2f:44:1d:23:
                    32:13:0a:ca:12:9e:36:12:25:af:d2:a5:43:99:98:
                    44:f2:17:b9:d8:64:8a:5a:26:96:0b:1c:3c:f3:e2:
                    b9:d6:80:a4:b5:f7:10:a5:8d:99:ca:9c:0c:c2:50:
                    ed:e8:d7:d4:dc:51:e5:ec:e0:a8:16:97:f2:94:c5:
                    ef:8d:2b:ff:90:d0:c9:82:88:76:9d:07:09:9e:59:
                    e5:ab:37:d1:06:78:0c:1a:00:f3:26:2c:83:9a:e3:
                    47:9f:df:bd:d7:ff:0c:8e:cf:95:4d:34:3b:69:1c:
                    f8:e1:09:76:86:73:ad:70:dc:39:ea:04:70:68:9b:
                    b3:c0:89:f5:f1:34:0f:e3:93:a4:c8:49:c6:a0:32:
                    71:d6:9a:6f:56:8d:bf:81:7e:64:18:7a:91:28:9a:
                    9b:c2:4d:e5:60:1f:a5:4e:60:98:1b:8c:3a:b2:05:
                    69:33:7d:16:96:a3:4e:fb:09:0b:32:06:1d:ad:05:
                    73:6b:4b:14:e2:13:88:c6:de:60:9e:76:8b:ff:bf:
                    b8:0a:9b:4a:23:2f:73:20:4c:2b:c6:b0:5c:42:f7:
                    81:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B2:0A:5D:FC:AB:42:27:92:4D:90:A3:34:0B:0F:49:BF:DD:80:66
            X509v3 Authority Key Identifier:
                keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/kbIKXfyrQieSTZCjNAsPSb_dgGY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:4b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:65:04:2b:d4:24:ba:74:6d:35:49:99:fb:b3:42:85:60:d8:
         5f:ff:57:5d:a9:ee:f9:f8:74:9a:ae:b4:6d:cd:95:89:3c:e7:
         00:5d:57:7f:9e:d5:09:52:2d:f1:17:a0:90:5b:d8:84:62:a2:
         27:3d:da:69:85:a4:93:d1:ac:8c:d2:5d:cc:81:c6:13:59:37:
         be:b1:ae:b3:32:ab:20:a8:96:fb:f7:68:b9:26:0b:73:44:f4:
         25:90:75:14:af:1f:50:65:6d:72:ab:59:d5:0e:92:81:b8:4a:
         ea:57:38:52:02:3d:aa:e4:65:27:d5:7a:b8:7b:88:a4:b8:1b:
         41:37:ef:66:14:3c:84:aa:bc:2a:9a:d4:f4:09:d1:18:fe:23:
         ac:c4:76:64:78:76:94:13:28:fe:93:d5:ce:e3:87:3e:50:f4:
         db:2c:f8:34:01:23:58:9c:d3:33:86:ac:80:e5:a8:08:d6:bc:
         bc:99:8f:0d:32:d4:64:63:5b:7f:49:7c:3f:07:31:6d:74:86:
         e8:e2:3f:a9:3c:eb:24:d2:bb:5b:a4:07:2d:86:70:10:f4:84:
         bb:e5:13:fa:1f:ab:ee:c3:36:3a:de:a2:11:b2:15:d7:e5:fe:
         f4:3a:0c:d1:e9:80:de:a0:af:43:14:41:a3:29:51:97:e6:46:
         d1:65:8a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----