Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/BEBIiS8kF8YsGnU_xtcNUlRLrD4.roa
File:                     BEBIiS8kF8YsGnU_xtcNUlRLrD4.roa (raw, json)
Hash identifier:          jOHIlKdvXIgJGWM14XmaB7UsAMXtqbb4a2RVgY2if5A=
Subject key identifier:   04:40:48:89:2F:24:17:C6:2C:1A:75:3F:C6:D7:0D:52:54:4B:AC:3E
Certificate issuer:       /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial:       0195C68834A21C4540C3D0C5547097C016C7
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/BEBIiS8kF8YsGnU_xtcNUlRLrD4.roa
Signing time:             Mon 24 Mar 2025 05:02:49 +0000
ROA not before:           Mon 24 Mar 2025 05:02:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214537
IP address blocks:        2a0d:d940:50::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c6:88:34:a2:1c:45:40:c3:d0:c5:54:70:97:c0:16:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
        Validity
            Not Before: Mar 24 05:02:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=044048892f2417c62c1a753fc6d70d52544bac3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:73:d3:9c:5e:65:ea:12:0d:12:4d:0f:68:23:
                    4b:b1:a3:ba:5b:05:07:fd:d7:35:7a:b9:5b:0d:31:
                    7f:44:9f:18:78:3c:f0:89:20:fc:ed:3b:fe:84:b9:
                    8b:e3:38:81:49:c1:d6:2b:33:bf:2b:d9:36:f4:70:
                    75:be:04:9c:ff:e3:42:0e:f9:54:e2:83:97:d1:7b:
                    68:2f:3c:9a:fd:4a:20:33:19:ea:a1:e7:8e:11:59:
                    8b:85:e2:31:3c:f4:3d:90:99:41:cd:ac:78:ed:00:
                    30:71:70:35:e5:63:54:c8:d9:c8:d5:72:50:2d:12:
                    3a:03:c5:09:42:d2:6b:e9:f5:c9:77:87:eb:f7:57:
                    51:13:76:0b:ff:2f:7f:b6:a8:08:82:18:ac:2e:19:
                    47:cc:f3:c2:6c:62:39:62:a3:81:92:33:a0:14:35:
                    0b:fc:45:af:24:53:b7:74:23:c0:3b:79:15:8d:8c:
                    a1:58:ad:18:e4:fd:05:de:6d:8f:c8:7c:10:2b:88:
                    1e:8e:c1:39:40:84:11:25:95:4f:f2:7e:fe:de:26:
                    76:d3:ff:e6:3b:3d:ba:e7:22:a7:09:be:0e:59:fb:
                    92:b5:7d:70:4d:8f:62:4b:9d:61:56:59:fc:02:eb:
                    a6:55:c7:a2:3a:cb:22:8c:04:b0:8b:27:9e:92:53:
                    cc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:40:48:89:2F:24:17:C6:2C:1A:75:3F:C6:D7:0D:52:54:4B:AC:3E
            X509v3 Authority Key Identifier:
                keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/BEBIiS8kF8YsGnU_xtcNUlRLrD4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:d940:50::/46

    Signature Algorithm: sha256WithRSAEncryption
         63:55:17:f0:fc:2d:c4:fd:a5:8a:9e:30:1b:0a:67:3a:38:ff:
         d2:5d:86:63:42:6b:8f:29:27:98:d4:4d:c0:d5:53:20:a2:d5:
         2b:42:66:4b:2d:dd:a4:f7:36:c8:b2:bf:88:5d:4f:5a:d0:b6:
         29:1b:28:64:2f:f5:3c:01:1a:db:77:c0:6d:4b:7c:92:ef:4d:
         f8:4e:44:bd:d5:88:27:19:17:83:ae:7e:4c:72:d6:1e:5e:b0:
         f3:38:d2:9d:f5:49:32:6c:4a:1d:77:ae:1a:a1:66:26:78:b2:
         a6:90:e0:d9:cb:05:8c:4a:5b:6c:36:48:98:a2:1f:71:fd:d4:
         df:73:84:ff:00:aa:66:ac:24:cf:83:a8:8c:51:3b:56:20:27:
         08:94:db:61:89:ca:17:cc:94:26:fd:85:7c:25:4a:47:43:23:
         67:1f:c8:cd:d5:47:fe:4d:de:b3:23:3f:8b:7a:bd:01:e1:c5:
         55:b0:76:dc:65:34:40:da:0b:8d:14:0c:06:af:de:4a:7a:c7:
         87:d7:91:5f:bb:f8:d1:4b:59:98:9b:3f:ab:10:21:6c:6b:1f:
         9c:ad:84:c9:d1:3c:61:d4:c6:81:9b:3f:cb:0b:89:6a:c1:f5:
         44:8e:c3:f2:1e:90:38:d1:df:ee:20:ea:24:56:6c:fd:b1:94:
         4f:f8:39:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----