Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/q2JPU8dxIMMe2Q7x6Q9pfIEW5vc.roa
File:                     q2JPU8dxIMMe2Q7x6Q9pfIEW5vc.roa (raw, json)
Hash identifier:          899bNl9fPVf+A0gU4Vj1vZoq6SULDUfpfOHC6wEz9xY=
Subject key identifier:   AB:62:4F:53:C7:71:20:C3:1E:D9:0E:F1:E9:0F:69:7C:81:16:E6:F7
Certificate issuer:       /CN=59a06c187953cfc8133b2beee5f01a15e45da078
Certificate serial:       0195EC55D14AB5667D13BE8D13BCED694188
Authority key identifier: 59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/q2JPU8dxIMMe2Q7x6Q9pfIEW5vc.roa
Signing time:             Mon 31 Mar 2025 13:13:21 +0000
ROA not before:           Mon 31 Mar 2025 13:13:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        2a11:6740::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ec:55:d1:4a:b5:66:7d:13:be:8d:13:bc:ed:69:41:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59a06c187953cfc8133b2beee5f01a15e45da078
        Validity
            Not Before: Mar 31 13:13:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ab624f53c77120c31ed90ef1e90f697c8116e6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:49:7a:7c:85:2e:39:35:16:65:fb:89:19:
                    e5:85:45:90:cc:5a:20:40:0e:09:28:d7:f7:55:b3:
                    89:92:18:79:cb:0a:1d:2b:e2:88:30:7a:7c:0a:7c:
                    a8:89:d2:28:f4:8c:00:89:10:9a:b6:c1:fa:e5:81:
                    4b:7c:32:f6:d6:8e:9d:a8:7c:17:63:ed:4b:18:9b:
                    be:9c:5c:79:b1:7e:92:9d:2e:6f:f0:d5:27:fa:c7:
                    bb:d3:49:e4:2e:48:29:b4:77:92:aa:91:9a:5c:4e:
                    74:41:55:5a:09:03:10:4d:40:ce:62:fb:8a:9a:64:
                    7c:9a:61:3d:30:74:62:80:7f:27:9a:59:3f:a7:b1:
                    03:7b:61:b8:3f:e3:f0:18:35:b8:ae:d4:f9:e1:20:
                    8d:08:d2:77:0a:63:09:59:12:61:ad:20:a3:94:f8:
                    73:a6:c0:14:3d:8d:95:c5:62:e9:5a:a5:27:e9:8e:
                    b3:07:cc:ab:dc:c3:5e:0f:97:3d:12:75:31:d0:01:
                    dc:ef:5a:e4:d2:a4:aa:cf:e6:3d:5f:03:3f:5f:15:
                    19:ff:06:4d:a8:73:d4:2a:3f:e8:21:b5:2a:75:ae:
                    d5:7d:13:9f:0f:e5:58:15:83:a8:29:c7:19:fa:f4:
                    fd:60:27:c4:58:ab:f6:a1:56:03:b8:79:6e:21:39:
                    29:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:62:4F:53:C7:71:20:C3:1E:D9:0E:F1:E9:0F:69:7C:81:16:E6:F7
            X509v3 Authority Key Identifier:
                keyid:59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/q2JPU8dxIMMe2Q7x6Q9pfIEW5vc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/WaBsGHlTz8gTOyvu5fAaFeRdoHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:6740::/29

    Signature Algorithm: sha256WithRSAEncryption
         23:d9:2b:ec:b8:64:d4:53:90:95:f3:29:ac:92:b8:17:3c:e5:
         9b:8c:63:82:0c:54:66:f5:dc:ef:47:d7:2f:7f:4c:87:11:dd:
         d0:a1:b4:b1:39:36:fb:91:9c:37:49:0d:aa:eb:03:ab:5f:62:
         49:08:ec:83:7e:7e:ff:e9:ec:4f:a9:c7:cf:8b:f2:c9:5a:2b:
         b3:c4:c1:ef:cd:1c:23:37:aa:70:f2:48:57:a6:8d:e3:82:62:
         d4:b4:51:ce:b4:35:38:1e:82:e9:26:81:b9:78:50:90:1c:3d:
         53:ad:81:e0:a4:c9:be:c0:c6:8d:ee:32:08:ff:a7:e6:f6:b2:
         44:88:22:1b:44:da:1c:8f:1a:37:87:ab:17:9d:37:2b:18:6c:
         4d:50:fc:57:cc:ff:3e:34:83:2c:3b:eb:f5:34:2c:81:80:a4:
         f4:c4:7c:15:3c:a1:19:ea:bb:80:6d:19:34:5f:97:38:92:70:
         8d:93:28:ad:44:36:4a:d9:c2:25:30:22:20:08:4a:d8:da:2a:
         19:dd:3d:e2:9c:e6:00:57:6f:65:0e:dd:e9:72:47:e4:40:a7:
         0c:a7:06:05:7b:e7:1c:f9:89:ea:27:38:61:7a:bb:01:a4:3a:
         7f:e4:d2:2e:3c:b0:71:28:cb:61:3b:ba:09:d8:da:96:e8:ec:
         84:ec:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----