Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/XxHEoHSmaUZCdqhyF-8R1fXJK2s.roa
File:                     XxHEoHSmaUZCdqhyF-8R1fXJK2s.roa (raw, json)
Hash identifier:          ZDVLnDp+CjsJYq9nGB8Fx25sme4loxzKQeCqC4xcibs=
Subject key identifier:   5F:11:C4:A0:74:A6:69:46:42:76:A8:72:17:EF:11:D5:F5:C9:2B:6B
Certificate issuer:       /CN=e099ee07822ef2ace9c356f7b42caeaff25c9692
Certificate serial:       019423697FEFB8C5AD952AC128C15B11E39C
Authority key identifier: E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/XxHEoHSmaUZCdqhyF-8R1fXJK2s.roa
Signing time:             Wed 01 Jan 2025 19:48:23 +0000
ROA not before:           Wed 01 Jan 2025 19:48:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199681
IP address blocks:        2a14:6980:30::/44 maxlen: 44
                          2a14:6980:30::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:7f:ef:b8:c5:ad:95:2a:c1:28:c1:5b:11:e3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e099ee07822ef2ace9c356f7b42caeaff25c9692
        Validity
            Not Before: Jan  1 19:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5f11c4a074a669464276a87217ef11d5f5c92b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5d:ea:dd:24:b9:16:78:82:84:0c:3f:0b:c7:
                    a5:fb:b0:31:4a:e6:20:30:1d:7d:c9:2a:10:88:63:
                    19:02:06:c9:d4:2a:bc:73:8f:00:c9:75:7a:fd:17:
                    0e:78:fd:bb:bd:a7:b5:d0:86:bb:bb:6e:8b:cb:21:
                    06:f8:81:1e:77:4b:90:52:ca:62:3a:a6:ad:cd:82:
                    d2:ea:b4:a9:de:a9:7a:1b:c4:6d:6a:55:5b:b7:6c:
                    fe:1d:a4:e0:0d:5f:1e:66:a0:be:80:49:c2:77:bd:
                    82:ca:9f:00:a3:fa:31:77:d8:e4:67:20:20:9c:fa:
                    56:1b:7d:72:4b:25:bb:2d:17:b3:89:41:7b:23:55:
                    77:6a:23:e0:4e:95:69:88:e6:44:3c:ea:70:d8:b3:
                    92:ef:98:9e:c6:56:5d:4c:e4:0e:c0:22:12:7a:5b:
                    d2:bc:6a:61:5e:ad:5b:7c:67:a3:50:4c:e0:7d:71:
                    7a:2a:01:1d:79:e7:2a:1a:ce:a6:af:d7:b7:1f:57:
                    ad:a7:e6:f3:b8:87:36:f2:1f:70:7a:12:df:ce:49:
                    84:30:10:54:ec:92:9a:50:8c:73:5a:8b:a9:8d:8f:
                    7a:3e:06:96:97:3d:aa:1f:82:65:ba:e3:0f:79:b3:
                    86:25:de:40:c1:fd:33:d1:a7:f2:b2:ad:16:2c:55:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:11:C4:A0:74:A6:69:46:42:76:A8:72:17:EF:11:D5:F5:C9:2B:6B
            X509v3 Authority Key Identifier:
                keyid:E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/XxHEoHSmaUZCdqhyF-8R1fXJK2s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6980:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:cc:6a:05:55:7a:26:aa:35:8e:3b:53:1b:dd:69:65:db:38:
         93:bf:9e:c4:a2:cd:f4:96:e2:b4:1e:8d:2b:ac:05:c4:02:6d:
         9d:84:c8:12:97:69:72:ad:db:b2:e1:ca:3f:c3:69:6e:58:fb:
         48:ac:ec:6e:7e:7a:db:cd:ab:0a:f7:b6:78:50:20:d5:93:da:
         f8:41:f5:25:45:d0:ce:c5:bd:3e:03:33:ef:c6:0f:03:7f:05:
         ad:c5:c3:e1:52:51:6d:25:57:a5:1a:5f:06:01:6e:82:12:0c:
         26:e9:86:7f:2b:d8:fd:47:f1:d7:42:00:1c:dd:82:44:99:25:
         76:f3:c5:ff:a4:94:22:35:3c:fc:b6:de:52:3d:eb:4a:4c:e4:
         0c:49:b0:9f:53:7e:09:14:6d:4f:67:76:74:f6:61:48:de:c2:
         b1:81:ed:d8:05:a6:d0:33:92:49:4c:3b:00:10:5c:32:b1:bd:
         a7:70:3f:26:8f:77:ab:e6:3e:9f:a1:7e:35:c0:b2:d2:07:c7:
         e7:fb:04:f3:95:65:df:25:bd:74:8f:82:9b:7e:67:29:43:43:
         18:a9:4b:43:99:fb:5e:03:c8:6b:7d:91:b4:bf:15:00:e2:14:
         3d:2f:e7:e1:54:1e:8d:b8:2f:95:08:3b:33:6c:11:60:cb:bb:
         b3:ca:b5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----