Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/YQH8RWxADt9aJV8FpUmZfLr_4hA.roa
File:                     YQH8RWxADt9aJV8FpUmZfLr_4hA.roa (raw, json)
Hash identifier:          as+j57YQ6lscVO9lYUdKRdByZHNNE4AzI7PATyHo/j0=
Subject key identifier:   61:01:FC:45:6C:40:0E:DF:5A:25:5F:05:A5:49:99:7C:BA:FF:E2:10
Certificate issuer:       /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial:       0194221F88D5F3F6CF041E4313605F3EEE2F
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/YQH8RWxADt9aJV8FpUmZfLr_4hA.roa
Signing time:             Wed 01 Jan 2025 13:47:59 +0000
ROA not before:           Wed 01 Jan 2025 13:47:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59749
IP address blocks:        2a01:73e0:e030::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:88:d5:f3:f6:cf:04:1e:43:13:60:5f:3e:ee:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
        Validity
            Not Before: Jan  1 13:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6101fc456c400edf5a255f05a549997cbaffe210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:a7:67:21:50:58:6c:47:90:e6:c1:63:65:
                    36:8c:56:7b:4b:e5:30:b6:e4:47:e1:b6:34:b6:5c:
                    50:33:c8:34:6a:b1:b9:a3:84:cc:d9:3c:1d:fa:63:
                    3b:24:d2:76:a8:b1:4a:97:02:88:fe:d1:17:e5:e4:
                    1d:3e:df:16:16:cb:95:cc:f7:d2:92:c8:04:51:48:
                    19:37:7e:ed:60:1c:39:d1:92:97:5f:25:21:2d:19:
                    b3:0b:86:ad:11:af:15:c9:7f:80:4a:b1:8c:ca:07:
                    bf:ff:eb:48:07:42:74:7a:5a:3e:f3:f1:ae:8a:c2:
                    a1:eb:c3:a2:0a:23:45:fc:f1:bc:52:a9:f2:02:d0:
                    4e:99:13:c3:fd:8f:ce:14:b8:75:6e:cc:c9:49:f4:
                    42:4f:3b:12:7a:60:bd:36:83:c1:9c:7a:e1:c4:84:
                    bc:62:86:6a:1b:8d:f0:97:d8:35:8c:51:2f:16:5a:
                    b0:bd:df:e0:82:90:f0:80:89:a3:5d:c1:27:6a:6a:
                    27:98:8c:d8:ef:bd:ba:66:f9:5a:07:40:a2:dc:71:
                    26:23:29:11:31:97:56:00:a6:36:83:42:2a:c0:d8:
                    d7:eb:2f:9a:01:1c:c6:8c:51:ab:d4:1b:b8:53:46:
                    39:88:8f:e6:45:cc:8d:ce:25:88:cd:69:47:5e:3c:
                    78:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:01:FC:45:6C:40:0E:DF:5A:25:5F:05:A5:49:99:7C:BA:FF:E2:10
            X509v3 Authority Key Identifier:
                keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/YQH8RWxADt9aJV8FpUmZfLr_4hA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:73e0:e030::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:20:ee:75:82:7a:02:bd:a5:11:49:28:78:2e:f3:03:14:01:
         9a:14:b8:a3:2d:9a:af:51:db:16:6f:33:59:9d:ef:40:97:e4:
         91:bd:86:df:2a:87:b3:01:d9:25:59:ed:68:85:54:a9:af:7f:
         1b:6e:03:85:b4:57:7c:5a:b6:63:5f:56:dd:ed:b5:8f:4b:5e:
         e3:fe:f8:b9:a2:b0:82:33:83:5a:9e:7b:0d:71:fb:da:09:0c:
         e0:3d:b1:40:59:9c:d5:eb:dc:48:c0:3b:fc:e4:00:7b:91:23:
         74:c7:6d:aa:b9:ee:45:ec:6b:01:cf:c8:ac:23:e9:1a:46:6c:
         1c:57:ed:db:1e:29:39:73:2e:c2:94:70:84:83:a5:c4:51:c2:
         69:c0:a5:35:47:20:75:79:87:8c:b9:8a:a5:c2:5a:f9:58:eb:
         9a:cd:73:29:e9:2e:36:b8:9a:81:f3:6f:64:c8:b1:59:d6:8f:
         4d:d7:25:a3:ed:68:83:31:b6:71:19:c4:e5:84:ae:d4:88:3b:
         06:6e:e3:a9:f1:b6:f4:ed:6c:28:2d:59:e9:f4:24:f6:01:c0:
         e4:8e:b9:e6:7d:81:2d:09:14:84:28:b9:ee:55:bb:66:8e:b1:
         7c:57:0f:79:a7:db:af:f6:35:f3:ad:a9:53:e5:00:06:81:4e:
         29:a4:55:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----