Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/E09vqP6Dhzwi3swUd7vdKQdAZ-E.roa
File:                     E09vqP6Dhzwi3swUd7vdKQdAZ-E.roa (raw, json)
Hash identifier:          MzWcZL4YZkWICabmNLBtwrsQlq2zb5xWQgY5PAU+5oM=
Subject key identifier:   13:4F:6F:A8:FE:83:87:3C:22:DE:CC:14:77:BB:DD:29:07:40:67:E1
Certificate issuer:       /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Certificate serial:       019422FB7EAAEBA86CD133C7CFA1B58F5F65
Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/E09vqP6Dhzwi3swUd7vdKQdAZ-E.roa
Signing time:             Wed 01 Jan 2025 17:48:14 +0000
ROA not before:           Wed 01 Jan 2025 17:48:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213813
IP address blocks:        2001:67c:fa4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:7e:aa:eb:a8:6c:d1:33:c7:cf:a1:b5:8f:5f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
        Validity
            Not Before: Jan  1 17:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=134f6fa8fe83873c22decc1477bbdd29074067e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c6:c9:3d:fe:3d:02:c5:f1:4e:fc:2c:27:5c:
                    2c:0e:44:d0:d2:0a:91:12:73:67:36:07:a0:2e:a5:
                    a8:10:43:24:5e:2e:7b:a5:0c:8a:d8:c4:a2:f4:67:
                    09:a2:9a:46:86:83:b3:96:73:65:3d:81:27:b8:9c:
                    de:00:96:f9:fc:09:29:79:e2:1e:1a:75:93:5c:f4:
                    ce:35:ac:e1:6e:07:8c:fc:59:0e:d4:ac:b3:f2:68:
                    5e:ac:ac:a1:5b:a9:0e:7f:d5:78:33:9a:15:11:83:
                    ce:ef:89:6c:41:a9:d2:db:f0:a8:3d:23:36:92:97:
                    78:1c:b4:83:56:24:e7:b9:e4:90:7e:29:5c:e0:83:
                    4a:26:d9:da:3c:62:f7:58:56:be:e4:f6:64:2b:19:
                    20:9a:3d:06:cc:9b:ac:20:75:ac:29:98:c8:02:e3:
                    d3:36:30:60:cf:ea:81:17:23:1b:5c:14:97:ca:69:
                    09:72:69:ee:75:dd:62:b8:8e:fc:23:c7:53:7a:85:
                    98:c2:78:ac:3f:08:c3:cf:ce:93:04:61:96:33:a2:
                    27:98:57:cd:29:08:36:9c:2c:54:51:b6:2e:83:d7:
                    bc:46:ed:23:21:15:e5:9f:13:bd:13:99:47:9a:b1:
                    cd:91:3c:c8:3d:d0:89:a1:41:47:45:79:c6:f0:16:
                    b0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4F:6F:A8:FE:83:87:3C:22:DE:CC:14:77:BB:DD:29:07:40:67:E1
            X509v3 Authority Key Identifier:
                keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/E09vqP6Dhzwi3swUd7vdKQdAZ-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:fa4::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:48:4b:ec:10:b3:18:03:3e:b0:66:2e:f9:e4:ea:66:38:96:
         56:bc:26:11:86:9f:24:38:be:66:aa:b3:ed:07:f9:1c:ed:99:
         4a:0c:c0:82:4a:56:2b:9d:d8:cf:6e:35:c4:58:d3:a2:0a:24:
         50:b6:94:be:ee:0c:3a:f4:38:86:3f:45:03:ae:05:46:f8:a0:
         b2:e6:28:d7:0f:a6:06:86:d6:ad:13:58:65:a6:15:61:87:9e:
         b1:a3:24:0a:90:f7:09:7b:f6:19:00:99:f5:72:c8:d7:2a:c1:
         1e:82:8e:b1:37:95:3e:5b:7a:8c:e4:64:c2:c4:2d:d7:d3:0a:
         03:96:a3:6c:ed:70:b8:21:2c:30:78:62:90:a4:0d:1c:fc:04:
         37:2b:35:72:3c:0b:97:ab:9c:6f:84:c9:0f:a1:8c:bd:47:bd:
         77:96:9c:a5:98:9a:b6:17:b9:00:a8:76:a8:5f:bb:00:ee:14:
         4c:fd:06:5b:d2:6e:7d:55:86:d1:ce:a0:a1:d5:8b:14:f7:7a:
         fe:42:97:c6:50:b3:69:8e:9a:12:c8:3d:4a:3a:b6:2f:4a:42:
         1e:38:5b:82:a2:5f:f8:2b:2c:55:c0:1e:42:b6:02:cd:43:cf:
         c9:90:ce:62:29:1e:ba:e5:44:e9:9b:a6:6e:5d:48:a2:af:df:
         f7:db:b9:ca
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi+36q66hs0TPHz6G1j19lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYmIwYWQ3NzY1NjEzOTUzYjkyYjZjYmY0Y2RhOTNmOWMx
MzcyZTYwHhcNMjUwMTAxMTc0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzRmNmZhOGZlODM4NzNjMjJkZWNjMTQ3N2JiZGQyOTA3NDA2N2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+sbJPf49AsXxTvwsJ1wsDkTQ0gqR
EnNnNgegLqWoEEMkXi57pQyK2MSi9GcJoppGhoOzlnNlPYEnuJzeAJb5/AkpeeIe
GnWTXPTONazhbgeM/FkO1Kyz8mherKyhW6kOf9V4M5oVEYPO74lsQanS2/CoPSM2
kpd4HLSDViTnueSQfilc4INKJtnaPGL3WFa+5PZkKxkgmj0GzJusIHWsKZjIAuPT
NjBgz+qBFyMbXBSXymkJcmnudd1iuI78I8dTeoWYwnisPwjDz86TBGGWM6InmFfN
KQg2nCxUUbYug9e8Ru0jIRXlnxO9E5lHmrHNkTzIPdCJoUFHRXnG8BawfwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBNPb6j+g4c8It7MFHe73SkHQGfhMB8GA1UdIwQY
MBaAFAO7Ctd2VhOVO5K2y/TNqT+cE3LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTIt
ZDc1ODI1ODliYjU5LzEvRTA5dnFQNkRoendpM3N3VWQ3dmRLUWRBWi1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTItZDc1ODI1ODliYjU5
LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA+k
MA0GCSqGSIb3DQEBCwUAA4IBAQB1SEvsELMYAz6wZi755OpmOJZWvCYRhp8kOL5m
qrPtB/kc7ZlKDMCCSlYrndjPbjXEWNOiCiRQtpS+7gw69DiGP0UDrgVG+KCy5ijX
D6YGhtatE1hlphVhh56xoyQKkPcJe/YZAJn1csjXKsEego6xN5U+W3qM5GTCxC3X
0woDlqNs7XC4ISwweGKQpA0c/AQ3KzVyPAuXq5xvhMkPoYy9R713lpylmJq2F7kA
qHaoX7sA7hRM/QZb0m59VYbRzqCh1YsU93r+QpfGULNpjpoSyD1KOrYvSkIeOFuC
ol/4KyxVwB5CtgLNQ8/JkM5iKR665UTpm6ZuXUiir9/327nK
-----END CERTIFICATE-----