Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS61125.roa
File:                     AS61125.roa (raw, json)
Hash identifier:          /nm0bo3twFADofXSGus6spYrRwFRm8G5najovnaDzkQ=
Subject key identifier:   22:99:00:1A:F6:3A:CE:CD:4B:D6:56:A9:76:7A:6D:D1:C7:C4:31:53
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       510116B788B6D1639B6107BF130F8896A5CAC449
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS61125.roa
Signing time:             Sun 01 Jan 2023 23:59:17 +0000
ROA not before:           Sun 01 Jan 2023 23:54:17 +0000
ROA not after:            Sun 31 Dec 2023 23:59:17 +0000
asID:                     61125
IP address blocks:        2a06:a005:a05::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:01:16:b7:88:b6:d1:63:9b:61:07:bf:13:0f:88:96:a5:ca:c4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:17 2023 GMT
            Not After : Dec 31 23:59:17 2023 GMT
        Subject: CN=2299001AF63ACECD4BD656A9767A6DD1C7C43153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:92:80:4b:12:52:a5:7f:03:3e:be:88:13:12:
                    cf:f1:92:01:b6:3e:be:63:06:4c:15:98:76:35:ac:
                    86:c5:10:4e:28:79:14:fe:d7:c6:90:8a:75:73:f6:
                    e5:6b:f1:62:e9:e5:7d:4d:7c:6d:a9:3a:2b:21:07:
                    b8:7c:09:f5:49:4d:57:51:8d:78:de:4f:c2:19:84:
                    77:61:f8:26:35:e8:46:01:a1:df:8e:26:c2:eb:95:
                    ca:55:6d:6d:87:bd:0c:c7:fd:da:3f:7e:5d:a3:11:
                    3f:a2:30:61:a0:1d:6b:3a:6f:0e:3c:45:b1:d6:8a:
                    9d:ed:a4:7c:d2:9e:ce:75:a9:e7:29:c6:a6:ff:ac:
                    23:39:82:53:ef:79:d1:d4:d2:b9:a4:4d:1b:fc:0f:
                    59:72:d7:66:67:9d:7d:70:15:23:a9:95:1e:1c:d0:
                    a4:8c:e1:55:2b:68:c1:65:61:34:57:02:ac:2e:c1:
                    38:51:65:45:09:43:47:85:bb:92:6f:39:17:e4:17:
                    b7:a7:e8:9b:1b:17:b2:91:86:d5:a9:d9:5b:eb:7f:
                    e8:fc:29:04:21:50:22:4d:f8:12:61:cb:95:c9:c8:
                    a7:5a:27:d6:1b:0d:e0:18:72:53:2d:4d:62:c7:55:
                    2f:3c:dc:8d:b1:d6:d4:e2:ed:a6:7a:fb:bb:0f:a4:
                    07:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:99:00:1A:F6:3A:CE:CD:4B:D6:56:A9:76:7A:6D:D1:C7:C4:31:53
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS61125.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a05::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:1a:d5:92:87:51:49:d3:a8:e7:73:c5:47:81:22:9b:02:17:
         fc:20:19:e9:8c:ed:e7:dc:39:61:d8:4f:4a:81:d5:ba:5b:d6:
         2e:dc:f2:a0:1a:84:35:31:b0:70:d5:cf:56:66:74:56:c7:26:
         6a:ba:ce:3f:ad:c9:d4:16:4f:52:b2:ec:ee:7d:45:81:ab:06:
         ce:c7:91:77:10:50:fb:fc:09:88:ae:f5:9d:9a:1a:c3:5c:07:
         c5:a0:9a:fe:95:f7:16:01:22:a1:00:cf:da:a1:41:87:65:2f:
         e7:0c:71:ca:c8:40:b6:b9:ce:df:f9:63:00:5e:7e:1b:54:6e:
         71:51:bf:93:cb:18:65:d0:bc:27:0a:b5:15:ea:b7:3f:da:59:
         b3:93:73:45:0f:65:5b:0f:40:56:d3:4b:08:03:c8:d8:6f:b3:
         0f:e7:8e:75:5d:9a:20:56:bf:3a:39:ba:2f:bf:4a:21:8a:b1:
         0e:e3:b3:8f:51:5b:81:8d:6f:55:04:f5:f8:c9:b2:39:0f:29:
         bc:24:2a:84:48:24:78:42:ca:3a:cc:18:73:92:95:41:3c:3e:
         6d:c0:7f:12:40:6d:9e:9c:47:e8:4a:8d:33:4a:ea:df:50:3d:
         0d:23:97:f9:89:9c:3e:d8:84:b7:08:e1:fe:46:61:ae:93:dc:
         e9:60:29:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----