Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/0JP1rYYlR_X6D5iHUoj_KYcqUSo.roa
File:                     0JP1rYYlR_X6D5iHUoj_KYcqUSo.roa (raw, json)
Hash identifier:          wjmqDxc+2r+Vp+ZOLaOS+K0/VdU7JYoPAv1nsDuMtE4=
Subject key identifier:   D0:93:F5:AD:86:25:47:F5:FA:0F:98:87:52:88:FF:29:87:2A:51:2A
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       01951FBC3415F9661A5B6234BB15E443AC07
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/0JP1rYYlR_X6D5iHUoj_KYcqUSo.roa
Signing time:             Wed 19 Feb 2025 19:43:02 +0000
ROA not before:           Wed 19 Feb 2025 19:43:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60781
IP address blocks:        2a13:be40::/29 maxlen: 29
                          2a13:bec0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:1f:bc:34:15:f9:66:1a:5b:62:34:bb:15:e4:43:ac:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Feb 19 19:43:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d093f5ad862547f5fa0f98875288ff29872a512a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:6e:6b:49:35:e6:d6:27:a4:07:ce:b6:55:
                    e3:a3:5a:a8:75:8f:73:7f:4b:a9:ab:a6:98:d8:ec:
                    a9:45:7f:ee:38:7e:65:1c:48:4a:cf:51:74:23:85:
                    2e:ca:37:b4:4d:5f:98:71:5f:ad:a5:a0:ec:63:00:
                    de:47:dc:5d:91:ab:5e:f7:ac:43:f3:8e:36:cd:8a:
                    fa:aa:ef:a5:31:18:c5:ad:67:98:28:39:9f:cb:98:
                    e7:52:61:09:40:d8:6f:0a:67:10:a6:b2:b1:ae:cb:
                    1f:8f:b6:eb:6f:e2:e7:44:c0:e8:7b:1b:c8:57:9a:
                    86:0a:2b:0f:d9:a2:24:e1:9e:10:a8:81:43:97:6d:
                    00:b7:f9:11:7c:7f:5e:59:47:4a:03:38:aa:bb:2d:
                    fe:99:cd:d2:6c:50:0b:f9:ba:5d:01:ef:fb:16:f1:
                    d1:5c:5b:57:d1:ee:a2:54:4c:a1:15:32:68:9c:06:
                    66:00:45:c8:ab:d9:f7:5d:82:eb:ac:6f:7b:04:f4:
                    ed:8d:bc:e6:77:ce:c2:1d:b8:7b:35:e2:4f:53:ba:
                    e2:cd:b9:99:5f:65:44:d8:0e:50:c1:7c:d2:42:2b:
                    85:1c:36:fc:ec:10:8d:0e:f6:6f:11:97:e9:c0:47:
                    50:c0:36:ba:7f:83:40:07:80:b8:57:67:df:bb:6c:
                    9b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:93:F5:AD:86:25:47:F5:FA:0F:98:87:52:88:FF:29:87:2A:51:2A
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/0JP1rYYlR_X6D5iHUoj_KYcqUSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:be40::/29
                  2a13:bec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         2c:0d:cb:27:39:9f:fe:b8:a3:ed:8f:a2:4d:9d:2a:da:25:f4:
         4e:1f:ca:f6:39:eb:d7:d3:4a:fc:9f:51:58:a2:d0:88:a6:41:
         0c:99:c6:a4:1d:67:d5:bf:c6:f0:64:ef:a8:4e:da:f1:c4:44:
         95:2c:ca:cf:7b:ff:4a:30:33:32:86:81:90:47:e4:96:14:b2:
         89:07:cc:f8:5d:61:0d:7b:42:a5:71:ae:6b:d8:27:c3:d8:0b:
         c9:6e:ba:3e:cb:74:7e:b0:b7:df:d2:cf:56:4d:06:9e:93:1a:
         10:f3:2f:a7:be:23:dd:30:b4:94:e1:62:85:6b:e6:5e:96:a8:
         47:c7:94:37:d7:29:98:47:38:fb:8c:97:00:de:33:a6:5e:2e:
         a6:6d:13:24:ad:cc:ce:c8:e1:02:92:35:50:44:b0:e2:f5:22:
         1c:8e:b8:46:b0:57:be:10:88:0e:c3:31:cd:f3:96:df:10:c6:
         20:e7:e5:98:12:1b:e6:49:a7:fa:82:55:87:c3:6c:a4:8f:b8:
         bf:17:07:48:c9:bf:d6:59:63:f7:5a:31:be:64:08:ae:3f:d3:
         d7:c4:8d:70:68:72:0a:cd:5d:1c:05:d3:f7:6d:2f:52:44:1c:
         fc:a7:1c:3e:f3:c4:7f:14:09:9b:29:dc:78:56:94:c5:4d:2b:
         60:0e:82:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----