Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/eKUE7w3_x6Z4Zp87l6f60Obs3-Q.roa
File:                     eKUE7w3_x6Z4Zp87l6f60Obs3-Q.roa (raw, json)
Hash identifier:          HtL/2/5nhyhmwHOnndCOppg1hRfKkYbOfyIYd9I04I0=
Subject key identifier:   78:A5:04:EF:0D:FF:C7:A6:78:66:9F:3B:97:A7:FA:D0:E6:EC:DF:E4
Certificate issuer:       /CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Certificate serial:       86FA
Authority key identifier: 38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/eKUE7w3_x6Z4Zp87l6f60Obs3-Q.roa
Signing time:             Fri 17 Jun 2022 00:24:22 +0000
ROA not before:           Fri 17 Jun 2022 00:24:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15562
IP address blocks:        2a0e:b240:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34554 (0x86fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
        Validity
            Not Before: Jun 17 00:24:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=78A504EF0DFFC7A678669F3B97A7FAD0E6ECDFE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:aa:9d:8e:68:68:13:77:b3:43:9f:52:b6:
                    46:be:f5:d8:06:38:99:a0:8a:08:d0:a8:f3:07:25:
                    84:bc:29:25:d8:c0:e4:2a:e6:20:7a:d9:38:07:71:
                    d8:10:5d:56:c0:60:74:f9:c6:a3:52:46:c7:38:8f:
                    b5:cf:b2:a6:f4:3e:f1:e6:60:51:47:fa:84:2a:c3:
                    95:7c:c4:6e:a4:44:6d:c9:13:97:60:40:dd:94:b8:
                    26:bb:22:0b:39:b9:5e:e6:0a:da:a2:f0:5c:20:1c:
                    f4:3d:28:e0:27:05:17:fd:5f:1c:7a:06:e1:20:8e:
                    9f:66:0b:96:3c:7e:bd:c6:57:14:c8:8d:71:cd:61:
                    a6:99:31:3d:5e:ac:1b:54:c5:8b:76:79:26:77:54:
                    f0:d8:32:bf:4f:b3:e1:de:69:37:9a:fb:45:ef:fa:
                    94:14:9f:60:ab:2f:06:f4:da:b8:22:81:07:fb:7b:
                    5a:3c:c5:b5:ad:3d:88:6b:a4:79:b7:98:b8:9b:a3:
                    47:92:63:ad:35:ff:8e:11:00:28:1e:46:5b:e7:4f:
                    f3:bb:73:ee:9c:aa:0a:4b:80:45:87:b2:7b:09:98:
                    63:e9:69:10:00:ec:70:29:89:d3:e1:94:7f:ca:e4:
                    b1:43:ad:7d:e0:2c:ad:1b:2a:48:48:ea:a2:04:28:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A5:04:EF:0D:FF:C7:A6:78:66:9F:3B:97:A7:FA:D0:E6:EC:DF:E4
            X509v3 Authority Key Identifier:
                keyid:38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/eKUE7w3_x6Z4Zp87l6f60Obs3-Q.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b240:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:6d:9a:0c:21:d5:65:ed:bb:20:c8:72:b3:5b:55:c7:eb:e1:
         93:62:50:e8:a6:4a:2e:e2:c2:d1:f6:30:8c:67:da:b6:1d:36:
         c2:c0:14:0b:a2:ef:3c:3a:50:f0:95:b6:da:4f:74:99:e8:af:
         88:3f:92:d2:f1:28:70:f7:16:87:6c:cf:7d:df:d9:7e:75:1c:
         23:91:39:60:e2:43:aa:a1:25:66:0e:4c:b7:79:af:54:cb:1d:
         69:c4:bd:5e:6e:56:66:5e:a5:a0:e3:52:dc:28:30:0c:18:89:
         cb:65:e4:c1:d0:69:80:2e:e0:37:98:5d:48:b4:1e:2e:10:c4:
         91:96:a8:13:3c:a3:9c:d7:37:1e:85:67:04:4b:81:13:8c:7c:
         f0:f3:5e:42:8b:73:e6:24:87:7a:18:3d:dd:08:74:f3:9f:bf:
         c9:d8:0b:5c:56:65:59:b6:1a:de:69:50:ee:19:b6:c9:57:85:
         1d:0d:7b:ad:bd:b6:08:d9:52:a4:48:5d:28:af:97:2c:b5:0f:
         78:76:b1:09:ca:b9:e2:4b:2d:3b:b7:80:15:81:c8:a5:11:73:
         f2:f0:9b:a9:06:20:d5:d5:89:ec:35:4f:3a:b6:0f:ad:75:9d:
         b6:57:c4:aa:82:b2:e4:d2:87:7c:87:b7:33:ac:4e:5e:77:a7:
         76:bf:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----