Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/lKN4UVZtN90tPiHbxWVbAiES2eo.roa
File:                     lKN4UVZtN90tPiHbxWVbAiES2eo.roa (raw, json)
Hash identifier:          z/Q5abY5hFpeI2vwI0AV9WzD16kLOgpzqlnEO3K5QQg=
Subject key identifier:   94:A3:78:51:56:6D:37:DD:2D:3E:21:DB:C5:65:5B:02:21:12:D9:EA
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       01942826493D217113123E605938A5595780
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/lKN4UVZtN90tPiHbxWVbAiES2eo.roa
Signing time:             Thu 02 Jan 2025 17:53:05 +0000
ROA not before:           Thu 02 Jan 2025 17:53:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215427
IP address blocks:        2a13:d0c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:26:49:3d:21:71:13:12:3e:60:59:38:a5:59:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Jan  2 17:53:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=94a37851566d37dd2d3e21dbc5655b022112d9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:41:25:8a:da:ca:7d:35:14:af:b1:81:a7:
                    b1:1d:b7:53:b0:b0:82:ee:ff:b4:34:66:d6:33:17:
                    dc:b4:db:88:e0:18:de:cc:db:db:de:dd:4a:72:37:
                    3e:ea:8a:c5:48:f6:b6:e1:56:a4:61:97:66:2b:23:
                    b2:d5:05:49:ab:71:f1:69:98:81:6c:eb:18:75:f3:
                    89:a6:e8:1e:a2:e0:d1:dc:54:75:90:a8:8e:b1:9f:
                    b2:42:af:58:2f:4d:e4:57:8b:ea:77:06:87:b3:5e:
                    32:67:92:28:47:6e:0e:e6:61:c1:52:e2:cd:4c:a9:
                    84:0e:82:14:bd:36:bb:6d:78:35:68:59:59:84:c4:
                    9f:5d:3c:53:89:d4:79:49:ea:ce:32:b2:e0:3b:04:
                    81:9d:97:a5:a4:53:1e:bd:0e:b8:d0:f3:86:20:e3:
                    98:8b:c6:16:1b:4d:ef:89:f5:8b:fc:ed:dc:a0:70:
                    cf:bc:98:c2:fb:0d:09:b6:3f:43:68:e6:2c:dd:c0:
                    3c:fc:b3:34:e1:5b:bc:d8:16:d0:65:a5:89:54:3b:
                    d8:c2:8e:c2:e4:f2:11:a1:f3:7f:b6:a2:4a:fb:a5:
                    a7:65:08:f2:e1:7f:05:f2:dc:e1:f3:1d:2a:10:db:
                    62:0b:e6:9f:74:05:f1:1c:cd:65:5d:40:d0:2b:2c:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A3:78:51:56:6D:37:DD:2D:3E:21:DB:C5:65:5B:02:21:12:D9:EA
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/lKN4UVZtN90tPiHbxWVbAiES2eo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:d0c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         24:70:54:d6:3f:b0:14:d4:62:14:a8:c1:c6:6d:e8:bb:83:94:
         fc:5a:53:a5:d0:85:e6:ca:44:e7:ad:4e:40:30:aa:31:73:8f:
         2b:ef:7c:72:ae:81:3b:5b:d7:11:60:35:30:95:ab:2e:d8:cd:
         18:b4:30:de:03:d5:ab:6c:08:9c:e3:4c:40:3e:6b:74:f1:46:
         1d:ca:60:85:04:4e:a7:70:f9:c3:0f:01:d9:1a:41:02:dd:53:
         67:4d:07:f7:27:0d:fb:79:5b:e5:29:8f:59:dd:c3:9e:ab:52:
         28:bb:a5:d4:61:a1:29:3f:ea:ff:b2:26:35:08:df:3f:97:d7:
         c2:1a:38:8b:1b:ae:6e:27:93:bb:7e:b4:44:e9:fd:10:c1:0e:
         a3:42:b7:36:4c:27:7a:64:f9:73:f5:73:af:a2:86:c7:a2:95:
         27:b5:b2:13:85:90:39:0d:26:a2:dd:a1:df:0d:7a:77:99:59:
         a6:4f:1a:ff:8d:15:e9:18:59:78:86:d0:f0:79:f0:f7:d6:d2:
         5a:44:9e:ab:af:f3:8f:88:fd:24:26:c1:a6:16:5f:4a:61:82:
         e3:a7:73:40:85:4a:90:34:b0:c5:e4:5f:31:a6:45:ae:06:a5:
         a7:cc:7f:0d:d9:94:c6:6b:24:6c:58:d2:ca:44:39:84:2b:20:
         45:d7:46:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----