Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/riyzT2qnLDYDe7ymHPaYPb_1vYI.roa
File:                     riyzT2qnLDYDe7ymHPaYPb_1vYI.roa (raw, json)
Hash identifier:          ny+X4nG0djYhJUvfBCtH3V4OGRWZ8Hb5X5uK2wuU6tQ=
Subject key identifier:   AE:2C:B3:4F:6A:A7:2C:36:03:7B:BC:A6:1C:F6:98:3D:BF:F5:BD:82
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       01961AD8233EB71614AE5628D1AF8ECE055F
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/riyzT2qnLDYDe7ymHPaYPb_1vYI.roa
Signing time:             Wed 09 Apr 2025 13:58:14 +0000
ROA not before:           Wed 09 Apr 2025 13:58:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213573
IP address blocks:        2a0e:8f02:f001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1a:d8:23:3e:b7:16:14:ae:56:28:d1:af:8e:ce:05:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Apr  9 13:58:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ae2cb34f6aa72c36037bbca61cf6983dbff5bd82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:81:1c:d3:3f:97:f6:0e:1d:62:0b:24:40:70:
                    24:db:62:94:87:3f:1c:16:c2:63:7a:4a:28:04:89:
                    e8:aa:f8:08:1a:fa:a1:c7:5f:78:be:a4:cf:ab:be:
                    88:e8:28:ff:0d:be:f8:ef:16:7f:5e:a6:d0:e9:b5:
                    34:24:e5:b6:52:5c:93:b8:f5:f5:b0:ec:fd:29:d3:
                    79:81:f7:0c:d5:fe:0f:1b:16:9c:64:11:33:06:ef:
                    53:2d:69:e3:cd:bb:00:7a:64:3b:56:40:04:e1:a5:
                    11:26:35:b3:90:22:33:48:b8:76:87:0a:46:dc:8c:
                    4d:2d:2a:8d:51:1d:2c:b9:7d:6f:f0:39:79:50:ae:
                    9a:9e:fe:34:63:6b:ae:33:c7:84:2f:36:54:ed:37:
                    02:36:be:20:6a:58:99:0c:b9:c5:b8:20:01:db:b9:
                    df:54:61:74:71:f3:a0:68:8a:5b:bc:f0:c9:15:38:
                    69:ab:f3:db:62:a1:f5:18:74:db:83:f8:86:d4:b1:
                    1a:35:7c:86:7e:1a:a5:6e:30:aa:19:c2:71:2c:f3:
                    fd:0b:bd:31:e5:90:7b:d1:3d:a9:06:a7:16:b1:cc:
                    6f:0c:18:4e:7d:90:9a:c5:96:52:ea:35:f3:77:7e:
                    6c:41:6a:27:8d:17:57:5e:b8:51:e5:c7:3c:6f:7f:
                    08:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2C:B3:4F:6A:A7:2C:36:03:7B:BC:A6:1C:F6:98:3D:BF:F5:BD:82
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/riyzT2qnLDYDe7ymHPaYPb_1vYI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f001::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:ef:44:8b:4b:70:a9:52:19:c6:b8:61:58:4a:37:37:5b:8e:
         61:d5:08:ad:a6:46:3d:75:47:56:c9:2f:0e:01:27:86:52:bb:
         80:b2:96:24:a1:e3:28:48:63:cd:18:3a:78:5d:32:a1:6d:06:
         46:e9:ac:e5:a5:24:25:f9:9a:be:0a:78:72:07:9e:f7:2b:5f:
         d1:bf:a3:94:b0:b8:06:30:d2:b6:f3:a7:d8:0d:21:73:64:7a:
         f9:f2:c1:3c:7b:24:51:bc:46:9d:b6:03:86:b6:23:93:dc:e3:
         e5:ed:3f:19:a0:36:ed:29:2e:2f:b2:a1:8d:c5:ac:a3:9a:10:
         ef:c0:23:ce:5e:16:76:23:0f:42:78:29:8e:f4:60:60:b2:7e:
         c9:c4:06:45:bf:42:11:32:5c:b5:b2:5f:07:6e:69:78:b8:bb:
         15:58:5d:d6:3d:58:4f:6a:c8:ea:e6:14:48:c9:9e:b9:af:99:
         2f:3f:03:be:df:9d:6d:0e:21:43:bb:33:4d:08:7a:12:88:de:
         41:dd:57:7e:6c:77:bd:fc:05:55:b5:e3:46:53:ca:86:09:e0:
         c7:c6:da:c5:7b:13:4a:95:47:91:36:dd:c7:94:86:69:6b:f3:
         20:ce:f2:b4:6e:d2:94:35:0c:ad:39:ab:d1:3b:24:a3:0f:68:
         75:85:5d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----