Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/7oayGcY3Qdt9R-HR-VvUkK4tdUQ.roa
File:                     7oayGcY3Qdt9R-HR-VvUkK4tdUQ.roa (raw, json)
Hash identifier:          JBF3Cz4Y9X2mzfXIi45uJ7vNKUzCzYVEwRnol0zS7Q4=
Subject key identifier:   EE:86:B2:19:C6:37:41:DB:7D:47:E1:D1:F9:5B:D4:90:AE:2D:75:44
Certificate issuer:       /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial:       019620F7C901B55C8C73AAEF0B6F13F5F8AA
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/7oayGcY3Qdt9R-HR-VvUkK4tdUQ.roa
Signing time:             Thu 10 Apr 2025 18:30:31 +0000
ROA not before:           Thu 10 Apr 2025 18:30:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214079
IP address blocks:        2a01:ecc0:300::/42 maxlen: 42
                          2a01:ecc0:580::/42 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:20:f7:c9:01:b5:5c:8c:73:aa:ef:0b:6f:13:f5:f8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
        Validity
            Not Before: Apr 10 18:30:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ee86b219c63741db7d47e1d1f95bd490ae2d7544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:35:8f:e1:67:38:80:85:27:6b:cc:4b:0a:54:
                    ab:49:e3:48:93:0c:82:ee:13:da:f1:a6:6c:f7:ce:
                    3b:3c:c2:b5:d5:b8:72:4e:c6:55:2c:13:8c:4e:5e:
                    93:b1:78:59:8e:6c:aa:b5:71:11:d2:4f:12:66:f5:
                    16:51:e5:05:00:93:dc:4f:c0:be:87:8b:41:34:d9:
                    4a:a0:77:5b:2d:dd:64:3b:8e:66:a2:88:e6:80:f2:
                    eb:ea:75:f3:0b:c0:65:f8:52:f3:00:a4:96:a5:bf:
                    97:d7:ac:66:91:ff:cc:95:bb:2f:85:bc:dd:33:e3:
                    8b:d2:bc:4c:61:d6:2a:35:94:4f:e1:dc:bd:ba:56:
                    16:4b:ef:59:dd:72:ac:7e:a3:bb:a8:23:4a:2f:4f:
                    73:ad:cb:61:c0:89:fd:bd:87:97:92:22:68:a4:3e:
                    1d:26:73:48:88:a0:5f:46:e1:d1:fc:fc:02:54:42:
                    aa:84:2d:66:a2:73:d9:46:6b:08:53:99:26:16:32:
                    3b:1a:ee:2e:6e:60:04:66:71:39:73:3e:c7:bd:d2:
                    e8:7a:3c:da:53:2a:4b:48:dd:f7:ab:e5:c9:f3:d4:
                    07:61:2d:9d:52:4c:b7:e9:4f:9d:ab:a8:06:ba:d7:
                    2d:e0:67:a4:c8:95:6e:07:c3:5c:46:dd:2a:11:37:
                    df:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:86:B2:19:C6:37:41:DB:7D:47:E1:D1:F9:5B:D4:90:AE:2D:75:44
            X509v3 Authority Key Identifier:
                keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/7oayGcY3Qdt9R-HR-VvUkK4tdUQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:ecc0:300::/42
                  2a01:ecc0:580::/42

    Signature Algorithm: sha256WithRSAEncryption
         98:de:95:72:e6:9b:1f:92:1b:6b:3f:4b:0b:0a:71:4b:ee:ed:
         8d:d6:4f:ff:3a:8d:91:3c:53:b1:04:9e:c9:09:78:a8:69:43:
         9e:1c:57:9f:fe:d7:70:75:fc:82:28:0e:d8:d4:b2:49:56:5e:
         d4:20:14:53:36:d7:61:9f:ce:b2:b1:67:1a:b2:e3:2f:23:88:
         16:53:a3:50:ce:f9:51:15:90:80:8e:c3:dc:d4:0e:02:7e:73:
         38:48:52:08:a1:78:6a:28:04:50:fc:1d:c3:2c:73:e9:d3:d9:
         77:47:27:36:d1:56:71:45:dc:42:d4:5a:46:aa:48:66:40:c4:
         c2:ec:96:42:b9:55:07:8c:be:d3:a4:8d:3c:2e:ef:72:b1:49:
         22:86:9f:6b:e7:9d:3c:ee:1b:65:e1:f5:6d:ee:24:60:0c:ed:
         42:2e:9f:19:b9:df:a4:e4:05:67:df:8a:fd:a2:79:7e:e0:19:
         2e:4c:ce:d2:b5:a1:18:20:b1:60:b3:5e:ad:f6:03:78:8a:9d:
         a7:6a:e2:bf:c0:d2:a6:ef:c1:90:75:55:c5:5d:34:af:29:e6:
         91:aa:48:36:5d:30:d6:d4:1a:ad:22:b2:6e:c0:ad:d4:d5:70:
         74:43:c4:58:da:cb:35:3c:5d:cc:4a:82:49:bf:1e:e1:db:66:
         d4:ce:0f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----