Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/rtcb-zGPyuGh29mwzkvcD3uLPuI.roa
File:                     rtcb-zGPyuGh29mwzkvcD3uLPuI.roa (raw, json)
Hash identifier:          9MQOIxNN0EBrG+oQ1pYSvmpQYRkZy5o+MkouGYFkYpk=
Subject key identifier:   AE:D7:1B:FB:31:8F:CA:E1:A1:DB:D9:B0:CE:4B:DC:0F:7B:8B:3E:E2
Certificate issuer:       /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial:       0195073EAC141C50AEC12AB72EA3217FF947
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/rtcb-zGPyuGh29mwzkvcD3uLPuI.roa
Signing time:             Sat 15 Feb 2025 01:35:02 +0000
ROA not before:           Sat 15 Feb 2025 01:35:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213527
IP address blocks:        2a14:47c0::/32 maxlen: 32
                          2a14:47c0::/40 maxlen: 40
                          2a14:47c0::/48 maxlen: 48
                          2a14:47c0:e::/48 maxlen: 48
                          2a14:47c0:100::/48 maxlen: 48
                          2a14:47c0:fffe::/48 maxlen: 48
                          2a14:47c0:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:07:3e:ac:14:1c:50:ae:c1:2a:b7:2e:a3:21:7f:f9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
        Validity
            Not Before: Feb 15 01:35:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aed71bfb318fcae1a1dbd9b0ce4bdc0f7b8b3ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:ed:5f:99:63:8d:38:a8:48:0a:40:de:c1:
                    fd:cc:dd:64:d2:40:5e:5f:3a:13:3b:58:0b:56:7e:
                    ba:14:f2:d7:62:0d:0d:6c:1a:53:7c:ea:88:20:d8:
                    da:38:16:7b:de:88:af:26:93:42:66:58:8e:d1:30:
                    fe:51:c9:8e:6b:3d:55:a1:c3:29:96:3f:69:64:a2:
                    fa:06:70:23:0c:5e:b3:39:21:8b:ce:4e:f7:b5:4f:
                    0b:e3:b3:44:09:03:06:c1:c0:1b:6e:18:40:5c:28:
                    47:4f:3d:a7:fa:cc:ed:b5:6b:99:a0:1b:31:c5:a2:
                    27:dc:3e:b4:e2:cb:ea:71:1d:99:72:8c:62:2c:15:
                    27:e9:95:64:fb:8c:6d:de:fe:84:27:50:32:6b:df:
                    fc:cd:4f:18:5c:be:f8:44:82:b8:4f:56:b1:ab:de:
                    30:65:0d:ef:ac:80:47:e8:03:a4:5b:43:b1:49:20:
                    ee:6b:6b:02:26:20:44:ff:7c:b7:17:62:75:1d:8c:
                    4c:b4:6a:eb:63:69:e6:46:93:9d:f6:56:c6:85:15:
                    53:ee:89:25:a4:15:e6:c4:3a:c2:f4:6f:26:a0:2f:
                    b5:37:a8:82:7c:8d:37:b9:28:ee:10:8c:b0:ab:5d:
                    a7:05:a2:8a:56:a4:9c:01:57:0b:dc:e7:15:82:20:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D7:1B:FB:31:8F:CA:E1:A1:DB:D9:B0:CE:4B:DC:0F:7B:8B:3E:E2
            X509v3 Authority Key Identifier:
                keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/rtcb-zGPyuGh29mwzkvcD3uLPuI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:47c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:ed:3b:79:73:c2:5f:fb:cd:94:d2:4e:73:7e:27:75:01:b0:
         45:44:32:31:c2:21:64:fa:1c:d6:41:f9:5a:0e:30:92:d3:fd:
         92:82:d5:0f:47:cc:23:ed:aa:6a:7c:2a:d7:08:01:af:e9:c4:
         fc:21:57:17:3a:d1:fe:3e:b6:6f:f0:cd:4e:27:1e:f7:12:ea:
         99:4e:a8:9e:1d:a3:16:97:b4:17:fc:2a:99:22:7d:39:4c:d1:
         a6:0e:62:5e:f0:21:f1:86:0c:5f:8c:80:15:bc:7d:0d:0d:26:
         b5:3b:37:3b:87:09:7b:4d:84:8e:32:b6:19:e4:4e:46:b2:20:
         4f:0d:8f:af:7d:18:97:42:8d:e4:01:96:23:1f:f9:12:4e:7f:
         d6:a8:20:42:69:e5:e9:09:be:5c:2e:d0:29:96:f5:c5:94:5f:
         80:45:c4:77:86:48:19:3d:80:ef:9f:c3:55:f5:80:3a:3e:5d:
         34:22:7d:ce:4f:a7:19:88:43:50:56:97:cd:79:f5:76:77:79:
         6d:4b:a5:b6:bc:f4:92:cf:95:a3:16:4f:f2:c8:f7:96:a6:fe:
         48:0f:b2:34:85:7e:8e:8e:4c:b8:2a:7f:bf:d3:7a:ab:dd:25:
         44:d5:cc:8b:ba:c3:60:13:a7:2a:1c:1b:5f:6f:5b:aa:ce:b6:
         61:84:f1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----