Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/cTM_wPu67RVLbAM3nD6sWnqniqw.roa
File:                     cTM_wPu67RVLbAM3nD6sWnqniqw.roa (raw, json)
Hash identifier:          Ate7PK/dPf9sl6jT2ZlxKjCFiwliYg6RScR5spCNLF4=
Subject key identifier:   71:33:3F:C0:FB:BA:ED:15:4B:6C:03:37:9C:3E:AC:5A:7A:A7:8A:AC
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       019427B555BE9BECA900452C30931A113FB8
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/cTM_wPu67RVLbAM3nD6sWnqniqw.roa
Signing time:             Thu 02 Jan 2025 15:49:42 +0000
ROA not before:           Thu 02 Jan 2025 15:49:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39091
IP address blocks:        2a10:4646:9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:55:be:9b:ec:a9:00:45:2c:30:93:1a:11:3f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Jan  2 15:49:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=71333fc0fbbaed154b6c03379c3eac5a7aa78aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d0:3d:bc:04:a1:bc:82:42:c8:eb:3a:67:10:
                    d4:b0:2d:20:cf:06:b4:c3:dd:b8:3a:57:d5:ee:67:
                    8d:47:a6:fa:d5:63:64:f7:64:d0:cd:ba:0a:5d:e9:
                    2b:cd:6b:4e:cc:ff:ec:f8:7d:63:d8:5c:c4:0f:db:
                    86:cf:ba:65:7b:f9:c9:63:fd:70:41:a2:c8:81:74:
                    fc:27:01:57:16:32:f6:87:9b:30:97:ec:dd:3b:4a:
                    6e:b7:de:bb:fe:ec:c0:62:8c:0e:a4:f0:06:c5:31:
                    a7:ff:ab:33:41:90:41:68:f0:0d:e9:8d:81:d1:fe:
                    87:75:01:fe:c8:0e:aa:28:aa:7d:d7:dc:fe:dd:4b:
                    2f:ed:09:44:d7:0c:60:e9:91:46:63:1d:30:52:37:
                    b0:06:67:7c:e7:ed:78:97:f7:22:9f:ed:01:ce:c7:
                    21:05:5d:1f:e6:bd:44:c1:58:dc:8d:9f:5a:d6:e9:
                    1d:df:86:0d:5e:10:40:b2:1d:31:96:12:de:cd:a8:
                    30:47:f6:3b:ee:37:4a:e0:f0:f4:20:38:4d:18:1a:
                    cb:3b:c4:30:72:82:93:14:26:86:6b:9d:ef:71:63:
                    57:ff:ab:e2:e2:56:c3:48:ba:61:a1:b5:32:52:d1:
                    02:31:5b:7f:27:37:9d:1d:f4:3a:8f:cd:78:37:2c:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:33:3F:C0:FB:BA:ED:15:4B:6C:03:37:9C:3E:AC:5A:7A:A7:8A:AC
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/cTM_wPu67RVLbAM3nD6sWnqniqw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:d6:b2:ac:ab:2d:a7:be:a6:cb:97:f2:44:b2:35:06:42:ed:
         c4:77:3a:60:f1:2f:02:60:5f:bd:40:c4:0f:eb:1a:75:21:8b:
         65:4e:02:ed:73:bd:a5:a8:a6:82:82:00:53:5c:85:3c:32:69:
         63:4f:b8:d3:fe:6f:b0:ae:46:1a:b9:5d:6c:ae:5d:76:da:f6:
         9f:43:fb:f9:2a:fc:ec:3a:85:b6:1c:54:5f:74:a1:6e:d4:97:
         e5:53:99:08:f5:8f:07:0a:5a:fa:0a:28:fe:c2:92:80:1f:6d:
         43:18:1f:d9:ea:3c:6a:8a:59:1f:2a:5b:3a:81:ee:b6:ca:47:
         b8:d0:1e:90:b1:7f:72:b0:e7:2c:97:7a:b9:04:cb:61:2f:20:
         8f:6f:a3:45:5b:95:f0:53:45:0f:39:8a:aa:b0:db:4b:85:28:
         ee:12:80:31:d9:2e:77:8b:7e:23:96:94:95:a4:78:f4:45:c0:
         12:a4:c7:b8:a2:3f:11:06:49:1b:bb:4b:9d:80:6f:4d:8e:cd:
         a0:36:ba:98:e2:ea:00:df:eb:01:ea:c9:ef:6d:57:8e:2a:58:
         8a:d7:2f:52:a8:5d:d9:64:f6:17:f3:df:26:fd:97:75:00:eb:
         f8:03:5d:82:df:85:32:37:a0:e0:0d:8e:38:6a:e3:e8:64:90:
         39:ef:29:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----