Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/6zamDTUBwAsnOFkspEkx8jbI6wY.roa
File:                     6zamDTUBwAsnOFkspEkx8jbI6wY.roa (raw, json)
Hash identifier:          dvRTh/kPMauvkj5ufzVensqKmDYCodFR0kOnwH7zmxk=
Subject key identifier:   EB:36:A6:0D:35:01:C0:0B:27:38:59:2C:A4:49:31:F2:36:C8:EB:06
Certificate issuer:       /CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
Certificate serial:       0194244524D97393A9D1445E5DC27C3E0534
Authority key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/6zamDTUBwAsnOFkspEkx8jbI6wY.roa
Signing time:             Wed 01 Jan 2025 23:48:18 +0000
ROA not before:           Wed 01 Jan 2025 23:48:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215629
IP address blocks:        2001:67c:da0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:24:d9:73:93:a9:d1:44:5e:5d:c2:7c:3e:05:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
        Validity
            Not Before: Jan  1 23:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eb36a60d3501c00b2738592ca44931f236c8eb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d4:7b:f9:cb:aa:41:74:20:71:8a:0d:71:94:
                    7d:b0:53:a0:74:90:43:98:7f:26:b9:c7:02:87:d6:
                    9f:55:6a:c6:88:d2:1a:0f:02:73:21:ff:cb:49:bc:
                    74:65:3f:a0:87:3a:89:ce:5f:a0:e2:f9:b5:2f:5a:
                    0d:30:bd:c9:a5:4e:1e:e1:00:fd:d9:25:e1:70:a4:
                    7f:ad:1b:61:c8:0d:19:b8:c3:fc:18:de:98:b3:da:
                    ba:5a:53:ce:6b:10:ba:a3:21:22:f1:48:06:e1:28:
                    66:86:fa:12:e7:14:9f:8e:10:ef:44:91:e0:37:76:
                    0c:5c:55:58:f9:d3:d9:53:0d:c9:d4:ae:14:85:3d:
                    c2:70:75:a3:07:ce:5a:11:8b:50:33:4c:3c:42:a4:
                    ba:40:2f:42:78:dc:80:2b:52:17:82:43:3e:4a:e0:
                    b1:be:55:18:ff:65:02:d3:71:37:61:82:38:49:d2:
                    d8:b4:ea:a8:6e:24:8f:96:15:34:8f:63:fa:6b:2e:
                    e9:fc:63:eb:6f:85:ee:21:d4:ee:59:54:c2:2d:8c:
                    91:8a:27:17:71:db:28:91:5b:b5:e6:a4:65:18:ba:
                    71:e3:85:6b:f2:73:c5:1f:32:cb:64:96:55:8a:cd:
                    cc:0d:ad:9d:92:97:5a:36:e7:88:92:d0:49:4c:21:
                    4b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:36:A6:0D:35:01:C0:0B:27:38:59:2C:A4:49:31:F2:36:C8:EB:06
            X509v3 Authority Key Identifier:
                keyid:75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/6zamDTUBwAsnOFkspEkx8jbI6wY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:da0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:78:94:41:9c:4c:06:54:90:08:cd:fa:2c:d9:15:90:4f:12:
         0e:99:d5:24:fa:bc:04:ce:ba:1c:43:e3:88:27:07:0c:58:df:
         86:8b:8a:c9:b4:5d:d9:93:aa:e0:5e:26:25:c0:eb:50:4c:02:
         3f:a1:08:ae:35:f0:28:47:ff:6c:0d:a2:ce:73:2a:a1:62:0d:
         db:e0:31:bf:41:02:1d:8b:d6:4a:d7:34:d2:d4:ad:7c:5a:9e:
         53:52:fb:ed:56:4e:47:3b:5e:eb:33:7b:ee:1e:d0:1e:70:78:
         a0:25:f8:19:0a:80:d7:f2:72:6a:c4:5c:60:09:8a:29:7b:23:
         af:da:88:e3:37:69:f9:10:06:9a:06:6d:5c:f5:61:02:03:eb:
         37:d9:58:6c:4d:d8:5c:f4:1f:89:41:d1:a0:05:1f:14:67:0f:
         07:b8:ee:ac:e7:94:e5:de:8b:8f:ed:9e:ef:6d:f5:02:09:ca:
         e7:2d:48:84:04:84:b2:65:21:8a:16:0c:b7:63:55:0d:9e:dc:
         e4:31:2e:24:7b:a2:d0:c4:0c:1f:98:e5:d6:25:93:45:5a:20:
         b7:e1:c4:74:82:e4:d5:ff:22:5c:2e:a4:dc:53:d0:0e:16:19:
         42:c7:14:37:05:f9:78:92:43:43:2d:61:fa:8a:23:39:d6:17:
         0b:5a:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----