Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/Ss_gmkh6d77XOwagQpek6F2KDc4.roa
File:                     Ss_gmkh6d77XOwagQpek6F2KDc4.roa (raw, json)
Hash identifier:          ehBv0ZTfOaGs3MQtKwprAexmlFiBcrDssOx9h7zM5w8=
Subject key identifier:   4A:CF:E0:9A:48:7A:77:BE:D7:3B:06:A0:42:97:A4:E8:5D:8A:0D:CE
Certificate issuer:       /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial:       0193ACDE7EE828F2DFA22E7C812964D63887
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/Ss_gmkh6d77XOwagQpek6F2KDc4.roa
Signing time:             Mon 09 Dec 2024 19:21:22 +0000
ROA not before:           Mon 09 Dec 2024 19:21:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213861
IP address blocks:        2a11:b680::/32 maxlen: 32
                          2a11:b681::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ac:de:7e:e8:28:f2:df:a2:2e:7c:81:29:64:d6:38:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
        Validity
            Not Before: Dec  9 19:21:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4acfe09a487a77bed73b06a04297a4e85d8a0dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:a5:65:99:ec:f3:5c:25:9c:04:1e:6c:2a:
                    50:83:08:5c:1b:3f:88:fb:0d:68:f4:69:21:68:5b:
                    58:0c:69:ae:72:49:ba:ad:50:9b:52:d8:49:3b:67:
                    54:68:49:7e:1b:5f:0f:95:3d:3a:31:7f:b5:56:5c:
                    8c:cb:9b:f5:88:7d:99:93:0c:08:c9:30:40:55:63:
                    3f:f5:ab:2f:ab:0e:e0:ca:f7:68:b2:7c:2d:e2:c5:
                    26:70:f0:3f:9c:4b:df:c6:36:bb:6b:32:9a:69:e1:
                    95:6a:f5:62:76:89:7b:59:7c:eb:15:62:b6:08:f0:
                    41:43:fb:8a:b5:5f:4f:99:6a:11:bf:20:d2:15:d1:
                    f4:e8:d2:c1:8d:13:b9:76:05:8e:98:3e:d0:9b:6b:
                    1b:fc:a4:1a:a0:a8:dd:a5:ea:83:05:e1:18:64:75:
                    de:1f:af:a7:e3:5b:fd:24:df:fb:40:b1:f7:f8:74:
                    7d:d1:2d:e1:68:6c:8a:11:4a:2b:e8:97:5e:fa:d0:
                    1d:1e:5e:94:35:1d:0e:e5:84:51:5f:cd:d6:42:82:
                    63:10:f5:ce:dc:db:77:4c:36:98:b8:b3:4d:da:03:
                    3a:b7:ff:c4:2d:e6:cb:3e:78:a5:14:39:61:f2:14:
                    b7:5e:06:f5:f1:30:1b:41:9c:c8:3a:59:76:7b:ca:
                    b9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CF:E0:9A:48:7A:77:BE:D7:3B:06:A0:42:97:A4:E8:5D:8A:0D:CE
            X509v3 Authority Key Identifier:
                keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/Ss_gmkh6d77XOwagQpek6F2KDc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:b680::/31

    Signature Algorithm: sha256WithRSAEncryption
         18:48:0e:b8:82:c5:56:18:e6:8f:1d:5f:b0:82:6d:00:be:04:
         fa:f3:68:ec:7b:3f:77:35:88:17:87:5d:be:51:21:67:93:4f:
         8a:05:40:09:d2:80:8c:fd:b4:bb:26:68:5e:98:d2:b2:56:c5:
         a5:27:7e:80:e3:bd:16:b7:82:fd:71:82:4e:03:fd:9a:a4:a4:
         1f:1f:24:49:28:6c:d1:68:bf:12:23:89:53:00:c2:90:6c:b1:
         bb:1a:18:f8:e5:4e:b9:53:ab:9b:71:1d:04:3d:fa:ad:bf:89:
         9c:8e:7b:f5:9b:81:97:15:ef:ba:20:f1:7e:95:15:50:a6:a5:
         3e:3c:0c:cc:d7:4f:6a:83:c2:4a:47:32:dc:c9:0a:c4:7a:5a:
         79:bb:a7:81:48:99:33:f4:3d:3e:f3:ff:4a:42:24:c0:8e:83:
         e5:10:61:50:03:a2:25:73:88:84:4e:4d:4d:49:6a:ce:a0:2c:
         ac:70:4d:ce:a1:bb:82:b7:96:4c:66:ee:86:a4:98:af:36:fe:
         0e:63:13:66:2a:d3:0c:29:e8:67:77:8e:ca:07:40:22:e4:ed:
         cb:b4:ae:c7:c6:7c:f2:1c:c1:29:db:3b:23:32:3c:48:c0:43:
         f2:a9:f8:52:40:e7:de:ce:47:fe:fd:a3:3a:ae:7c:f6:40:b4:
         72:3b:a8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----