Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/1-Eladd6sj8Y7vq1mtW5h6ASM_tM.roa
File:                     1-Eladd6sj8Y7vq1mtW5h6ASM_tM.roa (raw, json)
Hash identifier:          auxhruGljCxtN9ijkL9KZ/K4C+RcNKrzhKvUSRg/9HQ=
Subject key identifier:   F8:49:5A:75:DE:AC:8F:C6:3B:BE:AD:66:B5:6E:61:E8:04:8C:FE:D3
Certificate issuer:       /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial:       01942445A8C9BD41DEE5E2CA999BF11C1DD9
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/1-Eladd6sj8Y7vq1mtW5h6ASM_tM.roa
Signing time:             Wed 01 Jan 2025 23:48:52 +0000
ROA not before:           Wed 01 Jan 2025 23:48:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201307
IP address blocks:        2a06:1e00:70::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:a8:c9:bd:41:de:e5:e2:ca:99:9b:f1:1c:1d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
        Validity
            Not Before: Jan  1 23:48:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f8495a75deac8fc63bbead66b56e61e8048cfed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:98:c4:37:e5:30:62:4e:73:17:c3:95:54:
                    02:54:20:c0:04:61:3c:66:e6:5b:d7:cf:aa:6c:c2:
                    b4:c0:43:92:ac:37:09:87:46:59:d0:20:5e:25:a3:
                    8c:18:fb:72:e4:2d:83:ff:c2:dd:54:62:bc:d0:c0:
                    cb:50:55:ac:56:fe:4e:7c:70:19:6e:99:f7:34:d6:
                    1b:cd:7f:94:5e:a7:fa:46:41:28:ae:53:86:02:c1:
                    40:0e:44:a6:66:d3:91:a8:70:2a:57:ab:a8:7d:e0:
                    5c:c2:6c:d0:d6:63:0d:2c:3e:4f:fc:58:2a:ff:43:
                    89:f0:6e:c2:3a:18:40:c8:73:fc:12:f5:9e:51:32:
                    db:f2:7e:43:76:e4:c7:69:3f:e5:f3:29:d9:0f:3f:
                    8c:f8:9c:57:86:f1:6b:64:13:19:cf:86:0b:9e:37:
                    a1:bf:df:38:c7:01:3e:f9:57:a1:89:14:6b:59:87:
                    38:3e:d6:f3:bd:f6:2d:d6:c7:96:de:f1:25:4d:65:
                    27:25:2d:68:24:ad:1a:c3:37:f4:a0:13:d8:e5:e3:
                    bd:98:81:76:85:f0:a0:1a:60:42:98:64:55:70:e0:
                    2f:ae:1e:87:6a:54:08:61:1f:c6:d1:2a:ae:05:04:
                    49:da:09:e7:b4:a7:10:39:75:47:8c:b5:43:25:87:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:49:5A:75:DE:AC:8F:C6:3B:BE:AD:66:B5:6E:61:E8:04:8C:FE:D3
            X509v3 Authority Key Identifier:
                keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/1-Eladd6sj8Y7vq1mtW5h6ASM_tM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1e00:70::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:d6:f3:f0:50:44:f8:88:93:af:ee:b5:3e:f9:a5:78:a2:a6:
         73:f7:7b:29:70:49:07:87:e2:bf:f7:a1:9b:d2:b1:31:f7:6b:
         20:59:d1:d0:09:e4:75:18:89:9d:9b:90:02:17:c9:88:09:73:
         f3:e1:6a:b0:23:15:5f:2a:cd:e8:62:4e:fd:ac:80:21:4b:58:
         c7:2b:da:f4:35:ac:a9:72:04:eb:52:47:fa:19:f2:40:5c:5c:
         c1:10:09:ad:fd:0c:76:af:71:40:01:cb:d5:61:10:66:b6:bc:
         c2:94:13:54:8a:d7:e7:0b:c1:cb:5b:0f:0e:74:07:2e:35:0a:
         79:7d:ff:04:eb:75:fd:95:07:cf:9b:19:8d:7f:73:73:81:a0:
         20:fe:05:6a:db:00:84:b7:33:11:e1:d2:81:4b:cf:5d:23:e9:
         a9:0c:f7:f9:41:c0:ad:aa:2e:07:37:55:a3:35:c4:1d:fd:7d:
         7a:bf:a2:35:3f:18:bf:cc:79:9c:34:a7:81:89:57:8c:5c:ff:
         e0:66:92:02:fe:c4:c0:6b:1f:ce:18:aa:7e:f3:cb:78:aa:8e:
         09:74:c8:f8:96:2b:da:4d:f7:09:7a:f3:ef:6e:30:7b:02:de:
         1d:d2:70:47:62:07:00:24:d8:e8:de:f2:ca:87:a5:85:12:3d:
         86:81:58:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----