Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/6mH1yDlUh6pG9RleZb3EGXu59Zg.roa
File:                     6mH1yDlUh6pG9RleZb3EGXu59Zg.roa (raw, json)
Hash identifier:          etKxea+yPAs2ZwU2gpdjs53mOsUOx8jQ/xZdi5xgXfI=
Subject key identifier:   EA:61:F5:C8:39:54:87:AA:46:F5:19:5E:65:BD:C4:19:7B:B9:F5:98
Certificate issuer:       /CN=732944a8538355b2aec76645fd9494488ae702e7
Certificate serial:       019426D9EB32460725B10F1F8BED88942C13
Authority key identifier: 73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/6mH1yDlUh6pG9RleZb3EGXu59Zg.roa
Signing time:             Thu 02 Jan 2025 11:50:03 +0000
ROA not before:           Thu 02 Jan 2025 11:50:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200559
IP address blocks:        2001:67c:2edc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:eb:32:46:07:25:b1:0f:1f:8b:ed:88:94:2c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732944a8538355b2aec76645fd9494488ae702e7
        Validity
            Not Before: Jan  2 11:50:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ea61f5c8395487aa46f5195e65bdc4197bb9f598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:77:d1:04:2f:fb:44:30:d3:3e:ea:8e:43:18:
                    27:0f:c1:7b:a4:d8:79:ce:06:5e:3f:d3:ef:7b:cf:
                    e2:b6:65:59:79:dc:c6:47:b3:e4:73:f0:9e:c3:e5:
                    8d:79:2d:8a:6e:b2:42:be:6e:bd:f8:32:c6:c2:e7:
                    f6:ec:f3:b1:fc:c2:02:09:cb:2d:0d:5b:69:b6:0f:
                    16:4b:ef:ae:38:28:ff:af:7a:81:89:77:6e:b5:26:
                    f0:87:17:c5:03:e4:80:c5:7e:04:97:ec:d9:4c:6a:
                    28:58:dd:f0:e1:68:38:b4:75:6d:c5:8a:33:9d:de:
                    b0:77:c8:99:57:36:f3:aa:d7:30:3e:36:ef:8c:b3:
                    05:27:2e:7e:59:28:c8:76:59:60:63:48:03:9c:ff:
                    11:92:cb:c7:1d:38:d0:4f:61:9b:2a:4e:12:47:f2:
                    60:a9:b8:b5:22:85:e9:57:69:d8:3c:cb:ea:2e:e4:
                    08:b3:7b:90:4d:44:e9:b6:71:d0:be:76:87:68:41:
                    25:c9:a5:76:af:24:d5:cd:6d:2f:b7:34:3e:82:6a:
                    1b:66:c2:38:ce:5b:d7:8b:df:f8:e5:df:3b:e2:ff:
                    d0:06:f6:ed:78:f0:09:02:c9:51:3a:a1:23:59:5d:
                    6e:d5:80:bc:3b:d7:02:de:3c:99:14:f1:a9:29:36:
                    1c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:61:F5:C8:39:54:87:AA:46:F5:19:5E:65:BD:C4:19:7B:B9:F5:98
            X509v3 Authority Key Identifier:
                keyid:73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/6mH1yDlUh6pG9RleZb3EGXu59Zg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2edc::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:b9:39:95:3b:23:17:06:5b:91:97:5c:8d:cf:9e:ed:b9:f4:
         6f:de:3d:75:6f:91:7e:d2:35:32:e8:b5:fa:04:21:45:4d:08:
         9f:09:dd:42:83:66:ad:4b:87:bc:ee:6a:7e:ab:99:ea:06:3b:
         d4:5e:f7:cc:43:99:2f:d7:13:cc:fc:0d:a1:42:ef:53:c2:ba:
         bd:64:1c:64:4e:ac:7d:4d:b3:9a:c0:ef:b9:55:98:85:b0:8c:
         6d:3c:d3:4d:11:83:c4:b0:64:dd:8f:44:89:de:ca:f1:28:d1:
         a6:51:0e:89:73:78:73:f2:05:3c:c2:a0:38:7b:a9:c9:ff:f5:
         cc:af:48:a3:a9:57:29:61:5c:93:72:3a:87:2c:2c:cc:c7:76:
         18:5d:83:f2:b7:7f:4b:a5:66:39:a9:83:1a:4f:95:60:75:16:
         e6:51:05:75:e6:dc:c9:30:49:23:85:f3:cc:5d:17:44:57:03:
         f0:9d:7b:88:4f:f4:88:41:b2:e2:e1:ab:6e:0f:d3:91:55:0d:
         08:cd:c6:c5:b2:29:d3:4e:54:24:7b:9f:e2:78:d4:dd:c5:8a:
         e8:db:f8:dd:96:20:aa:f8:94:8c:4d:15:74:d2:96:9f:b7:4c:
         bf:6b:1c:e3:84:2f:96:99:78:fa:e0:5f:e1:d5:85:f8:5e:4e:
         47:f5:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----