Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/rqFZA9uVkdGBL0x6Ei0L9MHEurQ.roa
File:                     rqFZA9uVkdGBL0x6Ei0L9MHEurQ.roa (raw, json)
Hash identifier:          L0IGvxVXiMO117M8Wm4IgrHBTq1xuhWbcFCP05D3zJk=
Subject key identifier:   AE:A1:59:03:DB:95:91:D1:81:2F:4C:7A:12:2D:0B:F4:C1:C4:BA:B4
Certificate issuer:       /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial:       019425215CAB00E6A18DC67E4C98CE5A503E
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/rqFZA9uVkdGBL0x6Ei0L9MHEurQ.roa
Signing time:             Thu 02 Jan 2025 03:48:50 +0000
ROA not before:           Thu 02 Jan 2025 03:48:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216348
IP address blocks:        2a0a:9740:dead::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:5c:ab:00:e6:a1:8d:c6:7e:4c:98:ce:5a:50:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
        Validity
            Not Before: Jan  2 03:48:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aea15903db9591d1812f4c7a122d0bf4c1c4bab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:07:d7:54:de:af:51:54:27:82:54:9a:d9:
                    17:c5:c6:b3:1f:cf:37:82:ab:bb:14:2b:b7:08:79:
                    ec:c0:70:b0:00:c9:0e:b7:73:1b:d2:c2:44:a0:12:
                    d0:63:81:a3:29:9d:af:3e:60:4d:73:b7:e4:97:3b:
                    59:93:98:a1:ec:e1:cf:c6:a6:8e:07:5a:9b:50:a3:
                    47:89:51:b5:63:49:57:00:2f:20:f9:39:37:09:37:
                    55:14:f5:63:35:f1:ce:6f:1a:f2:26:95:82:0f:ef:
                    29:7c:ce:98:96:c6:40:ed:55:8f:b9:77:6c:90:62:
                    18:61:08:7a:af:70:6b:d9:6e:03:52:53:30:94:ca:
                    aa:57:b4:af:a5:40:70:cf:cf:07:99:8e:41:72:7c:
                    98:1b:37:4b:9a:ac:5a:01:23:0b:ea:e2:f3:5a:bb:
                    13:22:bf:75:26:04:c1:7d:43:83:20:d4:f7:f2:cc:
                    76:e6:53:43:ea:7f:93:d8:0d:14:27:e4:bc:9b:79:
                    33:74:03:fc:c3:cb:bb:37:fb:fd:0d:ad:12:18:eb:
                    37:90:d4:be:10:d7:78:ef:82:77:fb:3b:0a:c9:5d:
                    c8:f4:95:96:ef:59:b7:08:a8:5e:96:3a:e9:db:0b:
                    2e:9c:a6:ef:e0:5e:28:aa:7b:d2:c4:b9:f0:40:db:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A1:59:03:DB:95:91:D1:81:2F:4C:7A:12:2D:0B:F4:C1:C4:BA:B4
            X509v3 Authority Key Identifier:
                keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/rqFZA9uVkdGBL0x6Ei0L9MHEurQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:9740:dead::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:c9:18:26:3c:75:7b:76:03:36:04:b3:61:c4:5c:d4:63:e6:
         fd:e4:29:b2:2b:56:e3:7f:88:1b:f1:3a:7f:e8:e1:5f:43:2d:
         a2:87:aa:20:3e:21:ca:ca:41:f6:df:a0:28:b9:85:88:a7:04:
         f8:0d:8e:ba:ea:aa:98:81:7b:4c:6e:49:fe:1a:0a:ba:2d:20:
         dd:3c:b9:16:88:3f:dd:83:b2:04:4c:a1:c0:67:0e:d1:b7:3b:
         7b:d4:df:e6:ab:6b:82:0c:8d:8d:f2:72:03:c7:d4:e6:cc:12:
         9b:0a:80:0b:39:24:e4:df:f1:49:11:20:25:b4:01:ad:8e:77:
         e0:e8:76:0e:61:24:32:43:77:b1:97:92:81:01:7a:2a:75:1f:
         e2:02:83:58:d5:f3:ac:6c:e3:0e:08:07:83:06:1f:89:e4:76:
         29:9a:81:7c:15:cf:80:6a:6e:89:1e:be:02:36:6c:c3:df:36:
         eb:f7:36:c1:ba:01:ee:6a:f7:b5:38:45:27:e5:ca:df:03:cc:
         27:70:b9:76:f7:d4:1b:c7:03:df:46:7a:6e:56:f8:b6:53:f3:
         1b:a7:88:67:f7:2a:6c:5f:9c:9f:11:18:6a:e4:eb:35:c8:47:
         ff:78:3d:e0:6d:73:67:03:5c:7f:94:b8:10:29:bf:3f:40:ab:
         87:99:ab:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----