Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/l_eha-Kfj71W6eObliu6t318qCM.roa
File:                     l_eha-Kfj71W6eObliu6t318qCM.roa (raw, json)
Hash identifier:          tf40PQaQefcqXM6QqdGlznp88pKP+J6tfusYSudNAag=
Subject key identifier:   97:F7:A1:6B:E2:9F:8F:BD:56:E9:E3:9B:96:2B:BA:B7:7D:7C:A8:23
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       01962EBCFDAD46A1E800FEE57F9E99346A05
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/l_eha-Kfj71W6eObliu6t318qCM.roa
Signing time:             Sun 13 Apr 2025 10:40:59 +0000
ROA not before:           Sun 13 Apr 2025 10:40:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6079
IP address blocks:        2a06:b3c0::/29 maxlen: 29
                          2a0f:e000::/29 maxlen: 29
                          2a11:1140::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:bc:fd:ad:46:a1:e8:00:fe:e5:7f:9e:99:34:6a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: Apr 13 10:40:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=97f7a16be29f8fbd56e9e39b962bbab77d7ca823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:47:a8:57:26:93:a1:c4:45:18:c0:fa:33:
                    31:9a:32:90:47:1f:9d:8c:46:c8:90:3c:6a:f1:2e:
                    c1:15:88:50:71:a1:b6:70:88:37:32:aa:f6:9f:0d:
                    37:bf:76:7d:a0:31:70:d7:b0:d9:44:9b:ae:58:4b:
                    f9:c6:00:ba:60:bb:05:1f:11:84:c6:d8:ac:77:09:
                    4b:d8:be:6e:ba:6c:3d:6f:d5:03:4a:58:b7:73:e2:
                    95:65:f7:46:5b:f1:75:63:24:b0:97:bb:a0:0a:6c:
                    26:de:4d:f1:d2:9d:e2:11:57:d8:5f:12:bf:15:2d:
                    2e:4b:4b:78:10:7b:c9:bd:5e:e8:ee:62:15:65:3e:
                    32:18:de:18:54:05:8a:c8:3c:40:15:c7:47:d9:32:
                    8f:29:c9:65:02:09:1e:63:9a:1e:3f:03:03:8c:dc:
                    8a:ec:70:dd:ab:64:9d:f9:a3:fe:e0:58:7e:b0:24:
                    22:f6:a6:16:ac:43:69:92:5c:c3:27:b7:c5:8c:04:
                    2b:00:04:d4:f0:45:17:91:e3:e0:8d:ca:d3:f7:a5:
                    7d:6d:0b:4a:f7:26:c0:44:fd:df:03:50:7e:29:c1:
                    36:11:99:d3:b5:42:18:98:b6:ec:a6:37:7c:51:7c:
                    a1:15:6c:6e:4d:bf:af:ee:0b:b3:e5:27:d6:a9:74:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F7:A1:6B:E2:9F:8F:BD:56:E9:E3:9B:96:2B:BA:B7:7D:7C:A8:23
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/l_eha-Kfj71W6eObliu6t318qCM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:b3c0::/29
                  2a0f:e000::/29
                  2a11:1140::/29

    Signature Algorithm: sha256WithRSAEncryption
         83:8e:28:b1:37:92:71:f3:6f:1a:25:22:92:7e:0b:da:00:aa:
         6c:d3:a3:f3:c2:ea:9e:d6:9f:b7:a9:7b:67:dc:8c:eb:88:4d:
         b4:a8:37:78:9b:fd:7e:9b:c0:a7:7b:64:09:54:50:9b:b6:63:
         b2:6b:34:42:d7:2e:dd:de:1a:1b:76:bc:3b:ca:d6:cd:bf:b9:
         f3:ee:28:c5:ce:9b:a5:22:a5:40:ba:7f:2c:a7:05:41:f1:65:
         6e:90:97:94:89:08:b2:06:de:ee:59:ea:f1:68:64:3f:a5:97:
         e2:74:c1:c4:73:19:b1:44:73:1e:f8:59:a9:a1:05:b4:48:6f:
         8f:39:f5:df:b7:58:7c:e5:3e:3a:1a:9e:41:bf:9a:26:5e:ae:
         a7:f8:a9:51:1e:96:06:c5:1c:ed:d4:4f:10:ec:be:78:5e:40:
         e6:52:4c:89:28:33:5c:ef:0e:31:1b:a5:71:10:50:d6:dc:36:
         38:9f:5c:34:0a:6b:ed:9f:dc:9a:1b:90:b7:32:30:8d:23:99:
         1b:c9:9f:53:c9:8b:aa:f3:cd:d5:84:e3:b8:a1:eb:07:4f:ee:
         f2:b8:b9:01:7c:ab:28:d8:f0:53:8c:b7:bb:11:a3:08:00:ec:
         2f:34:aa:ef:19:05:44:56:3a:f3:48:4c:24:f9:02:82:17:4a:
         8f:81:c3:8c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZYuvP2tRqHoAP7lf56ZNGoFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjUwNDEzMTA0MDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2Y3YTE2YmUyOWY4ZmJkNTZlOWUzOWI5NjJiYmFiNzdkN2NhODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoVHqFcmk6HERRjA+jMxmjKQRx+d
jEbIkDxq8S7BFYhQcaG2cIg3Mqr2nw03v3Z9oDFw17DZRJuuWEv5xgC6YLsFHxGE
xtisdwlL2L5uumw9b9UDSli3c+KVZfdGW/F1YySwl7ugCmwm3k3x0p3iEVfYXxK/
FS0uS0t4EHvJvV7o7mIVZT4yGN4YVAWKyDxAFcdH2TKPKcllAgkeY5oePwMDjNyK
7HDdq2Sd+aP+4Fh+sCQi9qYWrENpklzDJ7fFjAQrAATU8EUXkePgjcrT96V9bQtK
9ybARP3fA1B+KcE2EZnTtUIYmLbspjd8UXyhFWxuTb+v7guz5SfWqXSvuwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJf3oWvin4+9Vunjm5Yrurd9fKgjMB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvbF9laGEtS2ZqNzFXNmVPYmxpdTZ0MzE4cUNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKgazwAMF
AyoP4AADBQMqERFAMA0GCSqGSIb3DQEBCwUAA4IBAQCDjiixN5Jx828aJSKSfgva
AKps06Pzwuqe1p+3qXtn3IzriE20qDd4m/1+m8Cne2QJVFCbtmOyazRC1y7d3hob
drw7ytbNv7nz7ijFzpulIqVAun8spwVB8WVukJeUiQiyBt7uWerxaGQ/pZfidMHE
cxmxRHMe+FmpoQW0SG+POfXft1h85T46Gp5Bv5omXq6n+KlRHpYGxRzt1E8Q7L54
XkDmUkyJKDNc7w4xG6VxEFDW3DY4n1w0Cmvtn9yaG5C3MjCNI5kbyZ9TyYuq883V
hOO4oesHT+7yuLkBfKso2PBTjLe7EaMIAOwvNKrvGQVEVjrzSEwk+QKCF0qPgcOM
-----END CERTIFICATE-----