Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/H3ANC_Zr3HuvxcsKgmLcR7Rbd0k.roa
File:                     H3ANC_Zr3HuvxcsKgmLcR7Rbd0k.roa (raw, json)
Hash identifier:          QhCktI6Qg0USZE6iF49wU9TX0uMlvnP2Vzj+lZRVasI=
Subject key identifier:   1F:70:0D:0B:F6:6B:DC:7B:AF:C5:CB:0A:82:62:DC:47:B4:5B:77:49
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       0195D42949192F7917464EB779476FD8E1A3
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/H3ANC_Zr3HuvxcsKgmLcR7Rbd0k.roa
Signing time:             Wed 26 Mar 2025 20:33:50 +0000
ROA not before:           Wed 26 Mar 2025 20:33:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49006
IP address blocks:        2a13:be43::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:d4:29:49:19:2f:79:17:46:4e:b7:79:47:6f:d8:e1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Mar 26 20:33:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1f700d0bf66bdc7bafc5cb0a8262dc47b45b7749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:db:12:68:be:8d:d8:94:d1:cb:1b:cf:8a:
                    dd:49:1c:3d:37:aa:be:15:9a:e4:1f:f9:12:5c:8f:
                    28:74:b6:74:21:6a:d7:fe:bb:bf:e3:31:9a:84:dc:
                    5b:db:01:cd:20:f2:2e:a6:7e:15:f3:9f:f4:85:54:
                    26:41:91:f0:ed:97:fd:62:74:46:1d:03:03:42:a4:
                    4a:d9:10:ce:c7:9c:d3:ae:bd:6f:b6:23:34:b9:f4:
                    81:2c:41:e9:76:2d:69:d5:70:91:9d:29:1a:1a:ae:
                    c2:55:ef:d6:3d:fd:a1:86:a9:6f:d3:8e:cb:ad:57:
                    fe:a3:f7:80:ee:b8:8d:48:10:c1:31:2a:85:1e:e0:
                    fe:75:b0:09:50:43:c2:37:85:4c:27:37:00:5d:cb:
                    8c:62:19:a8:2f:1b:55:c3:de:c5:41:b6:71:6a:19:
                    88:7c:ee:e0:11:8e:e9:10:65:e8:e9:5e:29:49:a5:
                    03:00:a1:0a:09:76:9d:b4:cd:48:b3:52:5f:25:3b:
                    99:19:25:67:81:0c:07:08:65:c0:49:94:09:f7:36:
                    c5:b8:81:fa:c3:d8:e3:49:32:85:8f:63:17:ba:a8:
                    2b:28:d0:27:fd:a3:ca:58:0c:b8:fd:51:6c:06:3d:
                    6b:8a:2a:e7:6d:d3:65:a5:25:23:17:5a:a6:31:16:
                    24:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:70:0D:0B:F6:6B:DC:7B:AF:C5:CB:0A:82:62:DC:47:B4:5B:77:49
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/H3ANC_Zr3HuvxcsKgmLcR7Rbd0k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:be43::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:28:2e:52:4a:40:89:1b:bb:91:f8:9a:e4:21:e4:50:40:50:
         30:aa:8b:d3:85:27:09:d6:52:0a:55:16:b8:7d:b9:2b:a3:f0:
         48:a6:f4:14:5d:e9:28:2c:37:83:1f:3b:c6:64:e4:05:17:5d:
         a1:13:24:61:84:c4:ac:9d:58:85:55:36:0c:36:1c:c7:fe:3e:
         4d:c0:35:9e:8e:10:14:b0:0b:47:97:ba:8f:45:ec:ae:de:53:
         e7:42:65:ab:9a:e3:96:eb:67:b7:3a:c7:50:5e:75:bc:c2:0a:
         fc:cb:a6:dc:39:ef:00:6e:5d:f1:8a:f1:6c:8f:ee:1c:94:65:
         f0:53:cc:54:d9:4c:47:c9:33:46:da:92:84:da:84:c3:2e:29:
         27:71:96:18:28:93:7a:b9:0d:d2:31:db:cc:3c:e5:67:7d:a7:
         f6:b8:4d:77:cf:8a:b5:23:e2:62:1c:86:d5:f7:d8:33:a1:b6:
         43:b2:ca:92:fa:05:43:13:e1:cb:80:6a:c3:02:6c:26:10:f1:
         24:7e:b6:99:b5:7a:78:86:c4:e4:6c:9d:3f:71:37:65:9b:2f:
         8b:cd:b7:a6:d4:b9:c3:62:52:88:1d:64:71:b7:4e:28:ed:dd:
         22:f8:d0:40:ac:f6:c8:83:b7:3c:18:33:e2:79:d1:c3:8f:84:
         33:b2:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----