Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/vdKJ4VP8I-i-guYkkpwttCVrQIU.roa
File:                     vdKJ4VP8I-i-guYkkpwttCVrQIU.roa (raw, json)
Hash identifier:          p+JgyUOEURGu3VWxUcx0JVwt9sD2Q41aSbbM15KWS1Q=
Subject key identifier:   BD:D2:89:E1:53:FC:23:E8:BE:82:E6:24:92:9C:2D:B4:25:6B:40:85
Certificate issuer:       /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial:       019553880C27224BF5C20CDB00C342AA6814
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/vdKJ4VP8I-i-guYkkpwttCVrQIU.roa
Signing time:             Sat 01 Mar 2025 21:06:19 +0000
ROA not before:           Sat 01 Mar 2025 21:06:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214145
IP address blocks:        2a01:e140::/44 maxlen: 48
                          2a01:e140::/48 maxlen: 48
                          2a01:e140:3::/48 maxlen: 48
                          2a01:e140:10::/44 maxlen: 48
                          2a01:e140:10::/48 maxlen: 48
                          2a01:e140:11::/48 maxlen: 48
                          2a01:e140:12::/48 maxlen: 48
                          2a01:e140:20::/44 maxlen: 48
                          2a01:e140:20::/48 maxlen: 48
                          2a01:e140:21::/48 maxlen: 48
                          2a01:e140:100::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:53:88:0c:27:22:4b:f5:c2:0c:db:00:c3:42:aa:68:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
        Validity
            Not Before: Mar  1 21:06:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bdd289e153fc23e8be82e624929c2db4256b4085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:32:d0:d2:55:f6:a7:db:47:42:3e:64:09:
                    a8:66:1b:dc:3c:6e:f4:16:bb:3e:63:76:1f:74:b6:
                    55:2c:23:9c:0c:aa:d1:88:7a:94:f1:92:74:19:15:
                    4d:37:0b:d2:01:67:72:ff:5b:7f:f4:60:a6:9e:86:
                    9e:eb:fe:55:b3:65:3d:b2:2b:8a:2a:e0:52:f8:e8:
                    b1:96:c6:1d:e9:b0:7d:3a:6d:1d:86:b7:73:16:56:
                    0d:54:9a:d3:d6:ea:c4:eb:f7:d1:b7:e9:0d:18:1e:
                    f1:75:b0:99:46:8f:15:69:e1:47:1a:6e:2e:1c:32:
                    8e:6a:9f:fd:fe:de:ac:d7:db:e4:74:5b:2d:1e:7e:
                    77:85:95:ac:35:13:d8:d9:80:11:0e:bc:12:34:10:
                    23:d5:59:09:6c:82:da:e6:bc:d8:95:89:2d:59:73:
                    06:de:f5:c7:e3:7f:7f:c4:83:22:4a:8c:94:de:32:
                    e9:e6:76:7d:1b:9a:b0:da:5f:80:ba:3b:7f:16:e1:
                    ca:cc:e5:37:d5:12:2e:26:1b:40:86:c7:8d:d2:1d:
                    b4:a3:1f:c2:04:70:2b:cc:2c:ac:77:92:9b:0a:d5:
                    01:c1:98:b9:b1:9e:97:8d:14:27:cb:58:20:87:72:
                    e1:b8:cc:f0:f4:90:53:74:7c:33:21:6f:1e:fb:0a:
                    b4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D2:89:E1:53:FC:23:E8:BE:82:E6:24:92:9C:2D:B4:25:6B:40:85
            X509v3 Authority Key Identifier:
                keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/vdKJ4VP8I-i-guYkkpwttCVrQIU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:e140::-2a01:e140:2f:ffff:ffff:ffff:ffff:ffff
                  2a01:e140:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         63:45:d9:ed:d7:df:03:48:22:6f:d4:d0:6b:c3:1c:41:f5:d2:
         a8:8f:61:a0:1b:d7:7d:48:62:bc:a6:6c:e9:a6:c5:8d:bc:de:
         10:c0:7f:44:82:02:2a:53:4a:33:88:18:bb:48:79:49:fb:42:
         b2:53:14:87:9a:f6:86:e3:f5:b2:a5:ab:40:b1:50:a3:53:b3:
         7b:91:ae:03:41:7d:36:fa:97:31:66:0f:4f:c2:23:2a:24:87:
         c8:9c:bc:f5:94:fc:c7:ba:b5:bc:e8:d0:4e:6b:fb:db:da:aa:
         0b:a5:96:72:4e:17:d2:a1:ae:37:ae:56:80:5b:6a:b5:37:e8:
         c7:83:21:d7:bc:ee:b4:72:1b:ea:cd:08:2b:45:9f:0e:dc:95:
         bc:69:a9:f0:78:3e:d4:b0:83:12:2d:09:cc:5b:a3:1b:ea:80:
         ca:d5:58:48:22:ac:ed:b1:e2:36:bd:0b:82:f4:a4:5f:5e:0c:
         5b:b9:ef:4f:ae:63:2c:39:73:3a:25:05:a0:82:5c:3a:37:7b:
         0d:d2:58:5f:be:88:06:ab:f2:ee:6b:bb:b7:df:96:85:79:b3:
         44:8f:22:05:f6:50:25:ae:5a:ee:32:6f:12:09:0a:4f:32:ae:
         de:16:6d:4b:cd:12:33:37:51:a1:33:3e:b9:ec:d8:2e:94:2a:
         0f:c7:56:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----