Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/IUh9_C97qpOKm_8AV-AspCaoEAg.roa
File:                     IUh9_C97qpOKm_8AV-AspCaoEAg.roa (raw, json)
Hash identifier:          c2S3m+7nRWXLhOWwBs+WGI3pFEVCypK98I+qc9J+WoQ=
Subject key identifier:   21:48:7D:FC:2F:7B:AA:93:8A:9B:FF:00:57:E0:2C:A4:26:A8:10:08
Certificate issuer:       /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial:       0194206857773B4EA17204E923412E7C7AA3
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/IUh9_C97qpOKm_8AV-AspCaoEAg.roa
Signing time:             Wed 01 Jan 2025 05:48:16 +0000
ROA not before:           Wed 01 Jan 2025 05:48:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     50684
IP address blocks:        2001:4de0:49::/48 maxlen: 48
                          2001:4de0:1006::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:57:77:3b:4e:a1:72:04:e9:23:41:2e:7c:7a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
        Validity
            Not Before: Jan  1 05:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=21487dfc2f7baa938a9bff0057e02ca426a81008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:a9:67:58:19:66:0a:28:63:05:a8:0a:c4:
                    e1:13:c5:f3:6d:33:95:ff:50:46:c5:37:bc:22:54:
                    58:f9:99:2e:6f:2d:0e:70:8b:0d:4a:5e:63:18:17:
                    71:cf:67:a9:36:82:ec:43:73:02:42:9e:f0:42:9d:
                    b7:95:e5:cb:5a:c0:50:72:25:f3:a1:13:12:75:8f:
                    3e:d2:8a:d5:c8:83:0f:21:e3:3f:14:9c:3c:20:ee:
                    8f:e7:ec:fd:86:da:1f:e4:53:3f:0b:b3:92:16:3a:
                    9d:01:04:18:0d:8f:e5:df:c9:e6:1d:77:2e:5c:5b:
                    5e:31:c6:10:f3:a8:13:b9:6b:4d:6a:bb:d1:3e:35:
                    ba:aa:50:0e:45:c4:11:e8:cf:91:48:df:c1:9f:b8:
                    4a:f1:30:70:a3:a3:de:41:0f:39:fd:56:37:aa:b1:
                    59:d8:35:10:94:a6:3b:70:40:d3:e9:7a:3b:da:6a:
                    32:ad:d4:11:9d:49:f9:93:97:37:a7:44:3a:5c:d1:
                    72:c3:99:8f:cc:a7:0d:1d:2b:4d:a5:df:35:00:3c:
                    d5:8c:f8:d4:34:83:06:42:a2:d1:ca:f7:f6:38:de:
                    19:c1:1b:25:a9:53:dd:28:f6:7e:da:b6:0d:35:14:
                    fb:a4:8c:a9:c3:68:d1:dc:fc:d4:e5:85:1a:36:08:
                    05:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:48:7D:FC:2F:7B:AA:93:8A:9B:FF:00:57:E0:2C:A4:26:A8:10:08
            X509v3 Authority Key Identifier:
                keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/IUh9_C97qpOKm_8AV-AspCaoEAg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4de0:49::/48
                  2001:4de0:1006::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:ab:41:46:ba:db:b0:78:22:9a:8e:06:c6:4b:6b:85:f3:f8:
         35:b1:21:f9:29:96:bb:72:85:ef:9c:ea:cb:52:a4:f7:c2:62:
         9f:a5:1e:28:e9:08:f4:ff:20:b9:97:61:f2:ce:d3:a2:10:2a:
         23:d4:b3:05:ea:f0:1a:e1:2a:a7:28:9f:4e:2c:55:f5:6f:e2:
         e1:03:64:31:53:1a:6b:da:89:dd:ab:d9:9f:db:97:98:28:41:
         d2:76:60:22:cb:15:a6:18:8c:c3:0b:cd:1d:5b:c0:87:8a:da:
         95:5c:d6:51:6a:a9:bf:8d:54:78:dc:09:3c:4f:19:85:d2:09:
         2b:5e:a5:72:a9:20:e0:1b:bb:3c:24:18:3a:2f:56:6a:e2:54:
         1d:23:91:a8:a1:20:b5:15:c3:90:85:84:45:e8:40:1c:43:5e:
         00:a1:33:90:be:0e:ec:4a:c5:a3:20:93:1c:b0:3d:38:2a:8f:
         6d:58:ee:bb:57:e3:10:c4:21:e4:a3:ca:c1:fe:69:27:5b:ac:
         95:3c:d6:e2:37:0d:24:9e:31:1d:44:ad:58:d6:65:82:80:ca:
         ee:85:e6:d0:d0:d9:5b:f2:d0:33:41:0a:b8:01:82:8d:24:4a:
         3a:ef:8e:4f:28:7d:e4:94:2f:31:3e:fd:7d:f2:9b:47:ea:c2:
         1d:c4:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----