Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/ixnuzzyIGziCtrC0l3qz41OIrjQ.roa
File:                     ixnuzzyIGziCtrC0l3qz41OIrjQ.roa (raw, json)
Hash identifier:          JSBHGZiyISoLK4HOeW+w9s4fRtop7E+RouVUw4Z0VAQ=
Subject key identifier:   8B:19:EE:CF:3C:88:1B:38:82:B6:B0:B4:97:7A:B3:E3:53:88:AE:34
Certificate issuer:       /CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
Certificate serial:       01941F8C188E19EBDE685790E728EA4B3B05
Authority key identifier: D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/ixnuzzyIGziCtrC0l3qz41OIrjQ.roa
Signing time:             Wed 01 Jan 2025 01:47:42 +0000
ROA not before:           Wed 01 Jan 2025 01:47:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8365
IP address blocks:        2001:67c:2184::/48 maxlen: 48
                          2001:67c:295c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:18:8e:19:eb:de:68:57:90:e7:28:ea:4b:3b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
        Validity
            Not Before: Jan  1 01:47:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8b19eecf3c881b3882b6b0b4977ab3e35388ae34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9c:b2:1d:82:1b:2a:d3:c8:5f:eb:f0:74:c3:
                    a5:ba:6b:3e:98:68:37:e5:1d:97:c7:cc:58:17:9c:
                    9f:6e:40:08:09:db:82:4c:5d:39:03:62:8b:50:07:
                    9d:82:ab:3f:de:9b:89:3c:9b:4a:02:60:9c:1d:5b:
                    e9:02:9a:ea:25:e9:87:7b:b6:f6:3e:58:9d:2e:98:
                    d3:f9:bd:27:c4:52:47:0c:c4:4e:67:bf:5a:b3:ae:
                    41:35:0b:54:dc:96:65:9d:ab:d6:5f:f2:0f:f3:c6:
                    1c:e1:99:87:b9:f9:ee:14:bd:ed:e0:df:10:01:c1:
                    13:fe:00:9e:2d:07:b3:f2:5f:5b:05:c6:1f:5d:c2:
                    f8:30:3e:68:9e:c4:6a:c0:af:69:93:aa:e1:4f:8e:
                    8b:e1:dc:9e:4e:25:4e:2d:29:d4:5e:05:27:2c:5d:
                    ed:d6:3f:70:e4:cd:c6:83:61:f2:34:eb:f5:38:c3:
                    0a:a0:c7:ce:09:43:a8:30:d8:05:b2:a1:d5:d5:ff:
                    63:88:9a:32:5b:95:27:6e:43:4a:8f:c1:04:1a:7d:
                    30:e8:01:6e:bd:92:8f:d3:74:ec:bf:76:f5:0a:0a:
                    91:3b:b7:a3:4c:f9:d4:21:e5:af:a1:24:20:0d:73:
                    1a:a8:e9:63:8c:5e:fb:7e:ad:98:1f:1d:d7:9c:a4:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:19:EE:CF:3C:88:1B:38:82:B6:B0:B4:97:7A:B3:E3:53:88:AE:34
            X509v3 Authority Key Identifier:
                keyid:D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/ixnuzzyIGziCtrC0l3qz41OIrjQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2184::/48
                  2001:67c:295c::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:a9:9e:be:10:25:6d:3e:2c:e9:ac:bc:8b:f9:db:a2:62:69:
         56:ef:2f:1c:44:af:03:50:77:1a:35:84:61:50:24:e4:5a:49:
         d4:08:50:8c:dd:f1:48:15:f0:c3:91:36:c9:4f:50:e6:28:60:
         02:41:ab:34:98:3b:c1:a8:4f:1f:2e:69:5d:01:d4:53:53:97:
         84:bc:fb:e6:9b:01:5e:c8:67:5f:e0:16:84:30:72:e7:d0:a4:
         01:2d:ce:4b:9f:88:0c:90:2b:84:6c:c8:2d:dc:3c:1c:dd:b6:
         a2:26:8f:51:66:08:62:8c:0d:f5:37:24:46:c3:ce:86:05:28:
         28:3d:e0:00:65:41:1a:75:ee:c4:62:d2:c4:8b:8f:14:85:bb:
         70:24:e4:58:05:a6:85:ea:b3:ef:e6:7b:00:b5:b6:9e:c1:a7:
         1b:60:b5:84:6f:da:d4:7a:6e:26:5a:02:50:81:44:1d:48:e3:
         e9:a1:d6:b5:0b:78:bc:31:b4:9a:4d:19:69:12:9c:83:92:fe:
         c7:28:e7:65:5a:dd:9b:47:28:66:68:19:42:be:76:4d:06:c0:
         93:36:88:cc:15:dc:d6:1c:a2:b9:ae:71:2d:b7:99:7e:a9:bf:
         b8:71:09:54:b6:6e:99:57:3f:81:91:2c:c5:af:29:4e:4a:56:
         0c:79:c5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----