Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/C14DRI-snEsOkMIiNc-U5aBQhaY.roa
File:                     C14DRI-snEsOkMIiNc-U5aBQhaY.roa (raw, json)
Hash identifier:          5Ry3pWdioDfi9ncgeY0rIB8W8oudaHMSAsLacYeKQos=
Subject key identifier:   0B:5E:03:44:8F:AC:9C:4B:0E:90:C2:22:35:CF:94:E5:A0:50:85:A6
Certificate issuer:       /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial:       01942369A85DC3E1FF401B05C1492FF17EB2
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/C14DRI-snEsOkMIiNc-U5aBQhaY.roa
Signing time:             Wed 01 Jan 2025 19:48:34 +0000
ROA not before:           Wed 01 Jan 2025 19:48:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210400
IP address blocks:        2a0d:d742:40::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:a8:5d:c3:e1:ff:40:1b:05:c1:49:2f:f1:7e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
        Validity
            Not Before: Jan  1 19:48:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0b5e03448fac9c4b0e90c22235cf94e5a05085a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:7a:cc:c1:2a:8c:00:e5:71:94:cd:fa:54:
                    32:bc:1d:7c:38:5e:02:27:79:86:cb:0c:f3:6c:bf:
                    35:b2:4e:8e:8b:c7:8b:f6:dd:04:7f:f3:88:cd:f0:
                    3b:96:98:d8:d4:93:18:80:fc:dd:4f:c6:0b:4b:a7:
                    c0:14:ec:91:09:dc:5d:c6:78:2f:23:8b:bd:8c:8a:
                    fe:97:29:04:0d:54:db:74:9b:b2:a2:63:57:5e:90:
                    b6:fc:82:f9:2c:a9:9e:da:02:bd:74:6c:ab:8c:a2:
                    df:67:01:3a:f2:45:02:a5:a5:b0:49:8a:ec:15:fb:
                    3e:17:35:d8:ce:6d:0b:e2:f9:e3:2b:a5:14:4d:af:
                    b2:ed:de:f6:bc:09:6c:fe:ad:9b:67:67:d1:69:c7:
                    11:57:2c:52:bb:15:4f:00:92:94:3f:23:b7:9f:2c:
                    5f:f6:b5:93:fc:2e:f8:d9:03:b4:16:df:10:4e:29:
                    4f:09:62:0f:58:df:72:7d:38:b5:9b:f3:02:b8:67:
                    1e:ea:2b:03:d7:d6:68:4d:be:36:94:a2:bb:33:90:
                    95:f0:1c:92:b0:ad:fa:55:71:b1:16:32:7c:80:86:
                    55:dd:3a:69:9d:f6:b9:41:41:46:12:5e:45:ad:54:
                    64:3c:67:b3:5c:3b:b8:1c:eb:d7:06:b6:71:d1:41:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5E:03:44:8F:AC:9C:4B:0E:90:C2:22:35:CF:94:E5:A0:50:85:A6
            X509v3 Authority Key Identifier:
                keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/C14DRI-snEsOkMIiNc-U5aBQhaY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:d742:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         16:ed:6d:1b:d9:22:d7:d9:e6:6e:c2:04:fd:30:d4:9d:db:b8:
         ac:fe:6d:fd:07:ee:13:df:66:79:67:c5:97:11:8b:57:d4:1a:
         94:6d:b8:23:18:ed:83:84:0b:13:a4:78:d0:3a:f6:80:d5:20:
         7e:79:61:80:5f:b2:f2:f8:87:c8:cb:cf:87:9a:57:f8:e6:1e:
         0e:be:ff:9d:1a:ff:51:a8:4e:4c:5d:1d:6d:a8:a0:a6:46:4e:
         9c:58:0d:10:49:7d:4e:0d:f4:53:25:9a:8a:f4:0a:79:78:e7:
         d3:aa:74:87:a6:ec:96:a7:8f:e9:94:40:47:7d:39:e8:fa:8a:
         95:82:6f:5f:ab:ed:70:43:22:1b:ad:f6:f0:b9:23:d7:b8:9c:
         c1:a1:c8:89:b6:dd:58:cd:80:b6:ea:59:d2:df:89:41:47:01:
         f2:57:57:39:77:31:5f:22:11:52:67:48:25:07:de:49:58:69:
         a0:f7:74:06:f3:e9:0b:f3:3b:24:05:10:27:15:86:56:52:be:
         9c:bc:64:2a:c7:44:37:b9:7e:22:89:69:4d:8f:7a:7e:72:ac:
         8b:d5:2f:14:be:3c:23:13:32:5a:d2:f8:3b:c5:1f:2f:a2:d6:
         6c:64:d8:00:5b:d9:b7:d7:d6:db:47:8c:1b:52:72:c5:cd:1d:
         1f:c0:68:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----