Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/zvMqPtiLMOCgjOxqm6euJp83YNA.roa
File:                     zvMqPtiLMOCgjOxqm6euJp83YNA.roa (raw, json)
Hash identifier:          jIvx8RFgHAKB/kauSEcxDljiE/0sDn1/Jfcw3a0iCKU=
Subject key identifier:   CE:F3:2A:3E:D8:8B:30:E0:A0:8C:EC:6A:9B:A7:AE:26:9F:37:60:D0
Certificate issuer:       /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Certificate serial:       0195EC2A4C588E9C2C09237C36EE595B8533
Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/zvMqPtiLMOCgjOxqm6euJp83YNA.roa
Signing time:             Mon 31 Mar 2025 12:25:49 +0000
ROA not before:           Mon 31 Mar 2025 12:25:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216213
IP address blocks:        2a14:c880::/29 maxlen: 34
                          2a14:c880::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ec:2a:4c:58:8e:9c:2c:09:23:7c:36:ee:59:5b:85:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
        Validity
            Not Before: Mar 31 12:25:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cef32a3ed88b30e0a08cec6a9ba7ae269f3760d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:68:62:8e:59:64:0f:54:3f:e9:bf:74:13:d3:
                    34:89:86:17:c5:8a:d0:5c:ef:e3:9e:80:6a:4a:80:
                    07:67:99:27:01:8f:1c:e9:f4:11:9d:9c:fc:ca:77:
                    bf:62:b0:a8:cb:f4:c6:36:05:a9:d5:ed:56:1c:51:
                    e4:0e:02:82:a5:1a:b8:bb:83:bb:68:94:41:97:41:
                    d6:2f:cd:91:c7:b3:60:ea:cf:94:8c:7c:c3:16:c9:
                    44:20:9f:bb:87:ae:57:5a:7e:21:3a:ca:0e:d7:05:
                    7a:b7:85:fa:65:9b:e1:d7:a2:65:e9:58:d3:99:5f:
                    d2:b7:75:56:9d:75:58:15:0b:bb:81:70:1f:0f:38:
                    ab:64:4b:7d:ca:78:8f:0c:1f:0b:4c:5c:79:fe:da:
                    c2:30:69:25:96:67:97:01:ff:50:02:df:ee:cb:d5:
                    42:73:5f:d2:ed:16:4c:f9:84:60:64:43:7a:4c:1c:
                    d7:ac:22:20:5d:09:48:da:a6:f1:10:b6:a1:19:37:
                    50:ad:a5:88:65:3a:55:bf:22:9d:39:4c:07:99:80:
                    09:9b:b9:f4:e0:3e:68:1c:a7:58:57:07:e6:e6:17:
                    b9:7b:eb:43:4a:cf:62:cc:92:c6:97:98:f8:b4:89:
                    cb:0b:4a:96:aa:9c:31:5c:38:8f:5d:e8:ed:bb:84:
                    dc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F3:2A:3E:D8:8B:30:E0:A0:8C:EC:6A:9B:A7:AE:26:9F:37:60:D0
            X509v3 Authority Key Identifier:
                keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/zvMqPtiLMOCgjOxqm6euJp83YNA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:c880::/29

    Signature Algorithm: sha256WithRSAEncryption
         5d:e9:61:ec:ef:72:71:bf:0e:09:bb:8a:0d:77:de:71:07:9d:
         24:2f:1e:6f:22:b4:1f:67:af:c8:c1:70:7a:51:c0:d9:65:c8:
         ae:b6:ca:46:13:da:1b:2f:28:06:f4:49:54:80:5c:53:59:b0:
         54:c8:03:77:64:d0:be:19:87:21:f2:4f:1a:7f:f6:e9:29:ec:
         ce:fa:ef:8e:75:cb:ea:55:a9:aa:f2:50:25:b9:6e:1f:df:22:
         55:a7:67:96:55:eb:b7:f4:63:7a:4d:0f:a3:54:51:9f:69:87:
         fe:66:8c:cd:86:90:12:93:35:b8:27:90:7c:fe:f0:c8:16:7f:
         40:3e:23:c9:b7:7a:7d:0c:cc:01:75:20:8a:8f:a6:3b:cf:bd:
         85:94:18:c0:89:8f:43:2e:1c:d7:1a:8f:cb:b6:3f:ca:f9:14:
         d5:3a:f2:6f:cd:a3:a9:a3:01:52:2d:06:b9:e9:29:ea:fe:30:
         b0:a9:fa:61:be:ad:f5:98:a5:c1:c9:db:7b:d3:76:e2:d1:c5:
         3f:bc:05:3c:f9:91:ff:5e:40:73:34:6e:fb:54:f8:1d:60:49:
         81:79:01:f7:99:01:b8:59:fe:71:11:c6:b7:f4:61:2c:6a:a5:
         42:0d:13:ed:7f:54:66:ff:5c:d9:e3:1d:f4:d9:6b:d5:8a:7a:
         43:2b:4d:33
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZXsKkxYjpwsCSN8Nu5ZW4UzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl
MTRlNDQwHhcNMjUwMzMxMTIyNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWYzMmEzZWQ4OGIzMGUwYTA4Y2VjNmE5YmE3YWUyNjlmMzc2MGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GhijllkD1Q/6b90E9M0iYYXxYrQ
XO/jnoBqSoAHZ5knAY8c6fQRnZz8yne/YrCoy/TGNgWp1e1WHFHkDgKCpRq4u4O7
aJRBl0HWL82Rx7Ng6s+UjHzDFslEIJ+7h65XWn4hOsoO1wV6t4X6ZZvh16Jl6VjT
mV/St3VWnXVYFQu7gXAfDzirZEt9yniPDB8LTFx5/trCMGkllmeXAf9QAt/uy9VC
c1/S7RZM+YRgZEN6TBzXrCIgXQlI2qbxELahGTdQraWIZTpVvyKdOUwHmYAJm7n0
4D5oHKdYVwfm5he5e+tDSs9izJLGl5j4tInLC0qWqpwxXDiPXejtu4TcrQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFM7zKj7YizDgoIzsapunriafN2DQMB8GA1UdIwQY
MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt
NzlmN2I2ZWE3YzE0LzEvenZNcVB0aUxNT0Nnak94cW02ZXVKcDgzWU5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0
LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhTIgDAN
BgkqhkiG9w0BAQsFAAOCAQEAXelh7O9ycb8OCbuKDXfecQedJC8ebyK0H2evyMFw
elHA2WXIrrbKRhPaGy8oBvRJVIBcU1mwVMgDd2TQvhmHIfJPGn/26SnszvrvjnXL
6lWpqvJQJbluH98iVadnllXrt/Rjek0Po1RRn2mH/maMzYaQEpM1uCeQfP7wyBZ/
QD4jybd6fQzMAXUgio+mO8+9hZQYwImPQy4c1xqPy7Y/yvkU1Tryb82jqaMBUi0G
uekp6v4wsKn6Yb6t9Zilwcnbe9N24tHFP7wFPPmR/15AczRu+1T4HWBJgXkB95kB
uFn+cRHGt/RhLGqlQg0T7X9UZv9c2eMd9Nlr1Yp6QytNMw==
-----END CERTIFICATE-----