Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/1-yGyAb5aLCteBw1IK7px8umPM0E.roa
File:                     1-yGyAb5aLCteBw1IK7px8umPM0E.roa (raw, json)
Hash identifier:          sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=
Subject key identifier:   FB:21:B2:01:BE:5A:2C:2B:5E:07:0D:48:2B:BA:71:F2:E9:8F:33:41
Certificate issuer:       /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial:       01942143B7C97BFB5945B3D8D63110909B6C
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/1-yGyAb5aLCteBw1IK7px8umPM0E.roa
Signing time:             Wed 01 Jan 2025 09:47:53 +0000
ROA not before:           Wed 01 Jan 2025 09:47:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     51861
IP address blocks:        2001:67c:374::/48 maxlen: 48
                          2001:67c:374:4000::/50 maxlen: 50

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:b7:c9:7b:fb:59:45:b3:d8:d6:31:10:90:9b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
        Validity
            Not Before: Jan  1 09:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fb21b201be5a2c2b5e070d482bba71f2e98f3341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:e4:33:06:2d:43:7d:d0:9e:20:35:15:af:
                    3f:7f:6e:3b:ec:b9:8b:9a:89:91:b6:6c:74:3b:a5:
                    6e:ab:4c:e8:13:83:dc:e3:3c:c0:1c:97:cd:af:8e:
                    48:68:6c:d2:fd:c6:d7:64:bc:ee:03:4d:0a:e1:de:
                    88:1d:95:ea:aa:37:09:15:5a:62:7c:57:1b:4b:dd:
                    d1:43:57:24:51:c8:3c:3d:85:97:bc:99:db:2a:6a:
                    77:fb:11:c3:d4:f5:b8:4a:cd:ea:53:6a:d2:32:90:
                    7f:3b:a8:36:dd:77:d1:a7:c0:da:d0:eb:46:df:ed:
                    6a:69:13:2f:97:d6:ca:69:d8:0a:08:29:42:dd:f1:
                    ed:37:ec:43:7a:3e:2d:db:80:ec:bd:a9:3f:dd:ac:
                    b9:63:f2:e9:3d:b9:15:7e:b9:87:b7:da:fb:28:a1:
                    5e:5a:3d:84:61:6a:c3:a6:ec:bd:fc:11:f5:66:37:
                    e4:de:59:3d:40:67:ce:8b:42:de:1c:e0:eb:7f:bb:
                    7c:19:00:8f:57:d2:be:5c:f7:6a:f4:3d:05:df:71:
                    27:b8:bb:89:65:ec:b9:c9:74:81:93:d2:b0:2f:84:
                    5c:59:66:12:27:0e:3f:59:32:ab:e0:f5:a4:f7:56:
                    51:db:ad:6d:bc:71:bd:df:a5:4c:c8:36:33:14:05:
                    c4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:21:B2:01:BE:5A:2C:2B:5E:07:0D:48:2B:BA:71:F2:E9:8F:33:41
            X509v3 Authority Key Identifier:
                keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/1-yGyAb5aLCteBw1IK7px8umPM0E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:374::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:61:16:19:0a:43:5f:9e:60:2a:e5:3f:1d:d5:b8:61:47:44:
         62:7f:80:b9:24:a8:9f:34:08:a1:52:ba:5c:e6:6f:fb:ff:37:
         6d:94:cc:2f:89:bc:56:10:6a:ed:f7:f9:d8:ef:47:5e:71:42:
         20:06:a8:50:9a:72:a1:46:61:38:f0:48:49:2a:c4:9a:8f:55:
         a3:d0:ee:46:6a:99:92:c3:76:09:c7:97:71:c9:6f:69:6e:59:
         e9:e6:db:bd:f5:6e:8d:61:25:a0:89:6e:e0:1a:ec:80:71:e3:
         7d:55:fa:f1:72:2e:06:aa:21:1c:ac:64:75:84:0a:d8:a3:2c:
         c9:c3:a6:f0:72:b7:03:bd:de:11:59:0d:9c:4a:b3:fd:0e:9d:
         a9:fe:76:6f:62:3d:03:7b:b1:fe:f4:ef:52:d5:b1:e9:77:e7:
         ed:fa:79:97:69:6e:38:34:4d:b4:e6:69:3c:fe:2a:3d:6f:7a:
         0a:4c:ea:19:b4:a4:4e:af:05:c4:db:d3:b1:3c:06:b3:2e:c7:
         dd:7a:f0:48:29:a3:ef:73:8a:0d:3e:8e:cb:80:ef:ed:d6:25:
         07:34:bf:bb:08:a7:b5:34:86:6b:bf:76:b2:e8:39:0a:9c:f4:
         1d:99:cd:25:fa:b3:ff:11:9b:44:e8:a3:9b:a6:b9:e5:be:de:
         b2:d9:fb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----