Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/Z_OLWZ6W9BJiFacNzeW_BCTt8Gc.roa
File:                     Z_OLWZ6W9BJiFacNzeW_BCTt8Gc.roa (raw, json)
Hash identifier:          Zv3WTepDDuaUMOjNvNkUTX961SONZOKhWmA3prVMCew=
Subject key identifier:   67:F3:8B:59:9E:96:F4:12:62:15:A7:0D:CD:E5:BF:04:24:ED:F0:67
Certificate issuer:       /CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Certificate serial:       01941F8C00D12E90A97CBED04E250D1D7864
Authority key identifier: 88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/Z_OLWZ6W9BJiFacNzeW_BCTt8Gc.roa
Signing time:             Wed 01 Jan 2025 01:47:36 +0000
ROA not before:           Wed 01 Jan 2025 01:47:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59422
IP address blocks:        2a13:74c0:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:00:d1:2e:90:a9:7c:be:d0:4e:25:0d:1d:78:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88179ac9052f6941b39535b7fd21e2aab08d5878
        Validity
            Not Before: Jan  1 01:47:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f38b599e96f4126215a70dcde5bf0424edf067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:63:2b:24:b1:ec:73:aa:de:28:e3:25:87:
                    92:1c:af:9c:a5:fb:ef:06:b2:aa:ff:92:86:98:17:
                    f2:57:6a:b5:df:ac:90:21:86:0b:91:fc:f4:1b:95:
                    b5:67:9b:3a:38:15:c2:0d:00:ca:39:a6:96:9c:30:
                    fd:df:3c:74:f3:ea:95:a4:08:79:a3:f5:b2:28:08:
                    ba:96:5e:af:68:f8:23:ef:72:18:15:12:1d:b7:ba:
                    ec:8a:0e:03:24:12:f6:8b:18:7c:86:50:84:d0:f5:
                    7b:6b:1d:a7:f8:48:c3:d4:3b:33:25:58:8b:b3:a4:
                    e7:ea:42:1a:87:40:8c:d1:bc:78:26:f4:e2:b6:c2:
                    6c:d6:5f:81:c6:91:6d:bf:b3:6c:74:67:38:db:50:
                    0d:11:b7:64:48:c9:be:43:fd:c8:58:50:2b:a0:ab:
                    66:46:7a:af:ea:ab:4f:6b:ad:33:e8:f4:bc:05:1e:
                    d8:8f:f8:e0:e3:27:7e:c8:bf:80:fd:cb:b4:0c:ad:
                    b3:2a:0d:da:0a:a9:4f:d5:02:39:fa:be:7e:61:14:
                    4e:5d:ad:43:94:d4:69:6a:3e:13:cd:f2:e8:8a:00:
                    a5:77:9f:2b:22:e9:bf:ce:7d:60:1c:48:f5:2f:e0:
                    ad:65:6b:5e:22:4c:fe:e1:91:cf:d6:8f:25:3b:99:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F3:8B:59:9E:96:F4:12:62:15:A7:0D:CD:E5:BF:04:24:ED:F0:67
            X509v3 Authority Key Identifier:
                keyid:88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/Z_OLWZ6W9BJiFacNzeW_BCTt8Gc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:74c0:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:69:f4:e7:6f:80:fc:ef:79:78:80:c6:43:5e:a7:be:41:08:
         5a:f2:bb:12:3f:93:1b:90:f6:3f:f6:dc:d9:31:cb:03:cf:10:
         2c:02:47:45:11:f5:f6:eb:ae:ce:d9:c2:94:f0:9b:29:c3:fc:
         ea:f2:eb:93:2b:4f:de:c1:ed:5e:a1:cd:01:8a:b1:dd:ab:dc:
         71:7f:3f:44:8d:17:79:2f:bc:56:91:61:64:f1:61:2f:4f:1c:
         80:4f:c4:21:17:8a:d8:ce:d2:eb:2a:c9:5c:90:ac:0e:b0:91:
         2e:1f:5e:95:d5:c2:38:63:5e:79:6f:bf:e2:a6:c0:f5:cf:10:
         eb:11:95:8b:68:d7:e9:ac:04:65:a0:2a:97:b8:b2:2d:b4:7c:
         b6:65:61:c9:b1:68:d4:aa:60:b9:33:1c:4e:b2:5b:01:a8:99:
         56:b2:33:ab:f1:c1:a4:6b:5b:03:89:70:40:35:98:a4:67:72:
         b8:dd:c7:c8:e9:2d:62:85:95:c7:4e:d4:34:53:e7:fb:22:94:
         6a:2d:b2:b2:4d:b1:4f:63:f1:66:97:19:24:e6:74:85:6b:5c:
         e2:f9:1b:2b:97:da:09:d5:7c:fa:4b:9a:93:8a:03:b5:30:d9:
         40:8d:06:97:29:68:28:08:5c:79:7f:fa:52:ac:e3:96:6d:5f:
         a8:80:ad:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----