Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/FN9s0emjeCgWBqKJJtshpPwmYi4.roa
File:                     FN9s0emjeCgWBqKJJtshpPwmYi4.roa (raw, json)
Hash identifier:          8kw1IFpWUQ7Eox2fKOo9dF2d+dLqFWAwJOjdWrfI2Bs=
Subject key identifier:   14:DF:6C:D1:E9:A3:78:28:16:06:A2:89:26:DB:21:A4:FC:26:62:2E
Certificate issuer:       /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial:       01909BDFA1F61220E56A9560E465ADE1D8D4
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/FN9s0emjeCgWBqKJJtshpPwmYi4.roa
Signing time:             Wed 10 Jul 2024 09:00:42 +0000
ROA not before:           Wed 10 Jul 2024 09:00:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12695
IP address blocks:        2a12:1cc4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9b:df:a1:f6:12:20:e5:6a:95:60:e4:65:ad:e1:d8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
        Validity
            Not Before: Jul 10 09:00:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=14df6cd1e9a378281606a28926db21a4fc26622e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:d8:98:14:84:93:2a:04:09:62:08:40:e0:
                    99:e1:ce:f9:53:3d:1c:50:69:4c:05:cc:d2:9b:c5:
                    cf:0d:96:0d:b6:b2:c6:ff:c2:5f:c6:30:46:e5:f5:
                    07:a3:75:8d:35:d3:22:ca:62:86:29:02:76:c0:10:
                    a3:33:05:f8:09:66:d0:c0:de:75:ec:e1:e3:30:c7:
                    d8:2d:74:c0:46:70:3e:da:18:c5:06:c3:b6:a9:70:
                    83:bf:98:f5:d7:63:ad:b9:20:80:8d:db:26:80:58:
                    4f:1b:09:9d:89:09:ea:57:ec:f2:48:e7:29:81:b5:
                    d9:73:b5:37:1d:cb:bb:53:7c:22:f5:86:fd:ae:de:
                    e5:85:7b:95:b2:84:e6:4d:0d:81:4c:48:35:8a:e5:
                    6e:b1:93:36:46:df:c3:d9:02:e1:44:36:04:4b:70:
                    29:e2:b7:24:d5:74:1d:a6:a6:d2:1f:20:a3:d8:7a:
                    56:bb:b3:fd:84:e3:74:04:6c:1c:2b:29:ea:a2:6f:
                    d7:14:23:bd:9c:af:d1:36:18:36:99:6a:ee:90:55:
                    85:99:22:60:e9:ed:4e:5d:0c:b8:a6:ec:e2:fd:ae:
                    c4:94:07:6b:5c:33:69:34:8f:ec:cd:bf:e6:0a:6a:
                    38:68:eb:9f:00:0e:72:c2:1c:37:d8:9a:f4:3d:6c:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DF:6C:D1:E9:A3:78:28:16:06:A2:89:26:DB:21:A4:FC:26:62:2E
            X509v3 Authority Key Identifier:
                keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/FN9s0emjeCgWBqKJJtshpPwmYi4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:1cc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:0d:2b:ae:60:2b:cd:c9:3a:b4:63:84:7e:ab:4e:7a:14:52:
         c6:23:cd:3a:c7:98:d5:5a:bf:a5:6e:33:54:07:75:f6:57:46:
         42:f3:9f:7c:95:95:8b:31:8f:15:79:8c:7f:bd:bf:1c:ac:3d:
         b0:df:e2:03:39:c9:d7:54:cc:a7:ed:14:cc:18:83:f2:54:0d:
         51:92:22:1a:3c:6b:08:32:9e:56:b0:82:1a:b7:6a:08:81:da:
         8e:27:b3:0e:2e:21:48:c1:0d:62:a8:db:70:7c:c8:f6:31:9a:
         30:c5:bd:52:d1:d4:50:88:44:b3:a1:1f:55:d6:a0:aa:b1:34:
         56:44:bd:4c:45:59:35:65:d6:47:2c:5c:b9:98:6e:a1:60:f5:
         6e:26:26:49:82:59:85:64:87:f7:3a:f9:48:68:80:b2:2d:c3:
         74:df:b5:48:ba:78:01:35:ee:13:cf:f3:3a:3d:4f:3d:79:9b:
         c4:61:26:54:e6:e3:02:83:3b:d3:fe:ae:b4:0b:b0:03:b6:dd:
         af:8a:12:a4:b5:90:64:55:4c:63:87:25:51:e4:ef:8c:dd:34:
         8d:e4:b0:bd:ea:93:b7:a2:1e:36:77:8c:ef:b8:70:7f:a1:86:
         1f:7d:5e:ee:c4:5c:ff:97:77:11:c2:a4:52:85:f8:97:5d:66:
         c8:60:e1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----