Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/KArVYyPO9fBEhTTRJ1tDthlJCOw.roa
File:                     KArVYyPO9fBEhTTRJ1tDthlJCOw.roa (raw, json)
Hash identifier:          a0gp1BPnbKmQpx9TqJhgPqer5KuegL1mEbSjNdCn0ek=
Subject key identifier:   28:0A:D5:63:23:CE:F5:F0:44:85:34:D1:27:5B:43:B6:19:49:08:EC
Certificate issuer:       /CN=36574be6ae76cd523b33787cfbdb69264263d074
Certificate serial:       019427B5D007931992B68101ED3FDFE939EB
Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/KArVYyPO9fBEhTTRJ1tDthlJCOw.roa
Signing time:             Thu 02 Jan 2025 15:50:14 +0000
ROA not before:           Thu 02 Jan 2025 15:50:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6831
IP address blocks:        2a04:6580::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:d0:07:93:19:92:b6:81:01:ed:3f:df:e9:39:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074
        Validity
            Not Before: Jan  2 15:50:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=280ad56323cef5f0448534d1275b43b6194908ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6c:c8:7c:9c:25:69:8b:5a:a3:e8:db:ec:30:
                    bb:db:9a:df:30:56:e6:5a:08:0f:4a:07:3e:e0:51:
                    d8:53:25:bf:ea:65:3e:c5:bf:90:96:62:00:f4:1c:
                    67:46:35:87:c4:17:89:2b:46:fa:fa:30:62:ee:ed:
                    31:65:58:25:cc:bd:2e:7d:ae:f4:e5:22:f2:04:1b:
                    48:97:9c:c2:1d:b0:ad:db:b5:1c:46:aa:6f:0d:bc:
                    66:0c:3f:8a:62:90:b5:56:52:b3:89:e8:fc:d9:a9:
                    81:c9:f3:99:0f:c3:6d:5a:0d:43:30:0b:46:28:f8:
                    e9:b7:7a:b3:e1:c7:b1:23:e8:35:3e:23:89:f9:62:
                    c3:42:b9:10:64:19:00:8b:18:08:58:42:9f:16:ed:
                    7d:70:d7:19:d5:6b:15:9d:49:6d:24:b7:6c:c9:db:
                    ab:a1:3f:67:a8:db:bd:82:86:9d:d6:d7:6c:8f:11:
                    0c:cc:0b:9a:e1:f6:11:52:8b:3b:a2:50:8b:0f:e5:
                    2a:99:4d:48:aa:3a:83:ba:28:66:7b:c2:c2:13:20:
                    ee:0e:af:a4:8b:4a:19:35:1f:5e:79:8e:27:83:3b:
                    d1:46:70:87:6c:bb:9e:69:48:e0:b9:06:44:55:c4:
                    77:c8:e8:fd:7f:99:90:a3:34:8e:49:77:71:b5:f4:
                    b7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0A:D5:63:23:CE:F5:F0:44:85:34:D1:27:5B:43:B6:19:49:08:EC
            X509v3 Authority Key Identifier:
                keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/KArVYyPO9fBEhTTRJ1tDthlJCOw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:6580::/29

    Signature Algorithm: sha256WithRSAEncryption
         20:a1:52:76:a0:b7:a1:70:f0:c1:30:38:a4:d3:95:3d:9f:ac:
         5f:d4:16:85:79:64:dd:38:a5:b0:a9:95:3c:8e:ef:a8:f4:2b:
         02:71:28:b8:fa:8d:b7:89:f0:2f:18:e0:fb:95:fe:d4:59:4c:
         05:ee:b6:a2:f2:8b:57:e3:73:bc:fe:cf:49:4f:20:05:b8:d8:
         e6:00:b8:bd:60:a1:ed:65:79:3b:41:c5:92:24:a1:6f:e2:53:
         17:37:b5:36:71:b2:24:c1:ce:7f:1d:73:1a:39:bf:40:4a:06:
         a8:37:15:dd:b0:a8:13:a4:66:00:a7:bd:04:78:93:6a:f0:0f:
         49:eb:06:39:ab:0e:44:fc:7d:11:00:6d:70:dd:f1:67:44:0c:
         62:58:e3:ce:be:4e:6b:00:eb:79:62:38:72:f7:18:66:e0:09:
         56:9f:97:00:18:8c:64:53:6d:de:28:58:06:17:05:b5:da:cf:
         dd:24:f8:4d:22:c2:ba:cf:e3:49:84:5a:9a:2c:a9:4f:02:f2:
         5f:f2:e1:6f:db:2e:a4:8d:4f:93:6b:da:16:69:1a:3e:d0:7e:
         61:50:cd:e8:cf:5d:92:9b:8c:23:dd:56:3f:43:f5:0d:eb:7f:
         89:b5:46:6c:7a:e6:17:80:91:1f:53:19:29:53:41:9b:7a:bc:
         e7:6d:d7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----