Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/Ke6BIcKr553RdNTHAAiP-pm7d4U.roa
File:                     Ke6BIcKr553RdNTHAAiP-pm7d4U.roa (raw, json)
Hash identifier:          YC8hk6oKhl67AQI7JSOSYdAfbuzkCnLEvEUsrgjHG4c=
Subject key identifier:   29:EE:81:21:C2:AB:E7:9D:D1:74:D4:C7:00:08:8F:FA:99:BB:77:85
Certificate issuer:       /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial:       01942143E82D4F4B3E02D3147BA96ABF83A1
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/Ke6BIcKr553RdNTHAAiP-pm7d4U.roa
Signing time:             Wed 01 Jan 2025 09:48:05 +0000
ROA not before:           Wed 01 Jan 2025 09:48:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203838
IP address blocks:        2001:67c:2ecc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:e8:2d:4f:4b:3e:02:d3:14:7b:a9:6a:bf:83:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
        Validity
            Not Before: Jan  1 09:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=29ee8121c2abe79dd174d4c700088ffa99bb7785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:2c:c9:73:93:a7:85:69:6c:07:dc:46:12:
                    4a:46:76:bd:aa:1c:6e:fc:d0:c5:43:14:a8:d3:6b:
                    31:09:e0:c3:d5:2f:97:ea:62:7a:ff:45:e6:fb:4d:
                    35:03:b8:a7:f1:a7:4f:d3:ec:1f:24:50:6c:bf:67:
                    f9:4e:b6:5a:28:2f:33:f7:76:06:03:58:37:a3:33:
                    92:46:61:6e:02:bc:a2:16:34:11:a2:5d:a6:65:dd:
                    2a:f9:d9:8f:9e:51:a7:12:8f:a3:b1:c6:ac:5a:d5:
                    98:12:be:71:e3:af:4c:b7:cf:05:4e:a0:57:7c:44:
                    1f:97:cf:94:fc:23:36:91:4c:6e:a9:41:fc:2e:bb:
                    e9:a7:b1:af:c6:bc:d3:05:41:fd:ea:f5:f5:e4:44:
                    f5:13:39:eb:14:fb:8a:b6:f7:65:4a:58:99:12:47:
                    04:ab:c8:90:55:6c:2c:5b:0b:6a:11:4a:d6:bf:8c:
                    d6:5c:a8:d2:6d:58:d8:5a:ed:37:00:f6:50:64:a3:
                    e1:88:ad:75:f7:5a:6c:5b:b9:2a:6d:31:10:e0:0e:
                    fa:1a:2c:e8:c2:95:5d:5d:4d:3e:43:91:a5:a5:50:
                    30:fb:74:2c:7c:9b:2d:1c:33:23:ba:59:aa:a8:5c:
                    11:06:63:74:97:c7:f9:91:60:d5:04:33:24:f1:43:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EE:81:21:C2:AB:E7:9D:D1:74:D4:C7:00:08:8F:FA:99:BB:77:85
            X509v3 Authority Key Identifier:
                keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/Ke6BIcKr553RdNTHAAiP-pm7d4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2ecc::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:a7:61:08:85:a5:93:b0:50:f3:9d:1e:d8:83:fc:b0:49:cd:
         e0:a0:86:11:41:d2:a8:04:cb:44:dc:b8:69:a6:d9:60:8c:bd:
         e5:4e:3b:9a:4f:8a:88:52:6d:f5:c2:18:7d:31:ce:28:ef:63:
         e7:eb:d8:a1:99:ac:e1:40:1c:99:0c:41:e6:ce:b1:6d:71:80:
         28:65:3c:f8:8d:b2:5d:ff:3f:04:56:25:8f:a0:31:d0:22:16:
         de:b2:56:54:15:c3:0d:38:88:f2:cb:ce:35:ce:ff:dc:1b:00:
         fc:e0:19:6e:83:4c:2d:a3:ff:9f:bd:97:70:2f:08:1d:83:f2:
         36:a4:ee:76:9c:f0:56:38:3e:11:35:6c:9e:e8:77:0c:2e:4c:
         ea:37:7e:18:fb:42:0f:51:6b:af:1d:b4:38:a2:a7:16:a4:f8:
         78:3f:b7:f5:30:af:88:cb:3c:50:a1:d7:aa:45:b3:54:9a:d9:
         27:35:7e:40:6b:61:cf:8b:39:b2:9e:25:17:c7:50:8b:6c:a0:
         c1:c3:a6:5e:a5:02:1e:26:e4:26:a7:b1:94:a8:57:7f:dc:8d:
         9c:77:9f:ce:e1:48:27:8a:d2:13:65:2f:cd:c0:33:57:70:a2:
         27:e2:9d:2c:4a:43:57:46:65:f3:52:cc:bd:71:98:fa:ff:bf:
         5d:8e:e6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----