Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/Ct9bHG4SWHTl9PMz5PXSs2vCxX8.roa
File:                     Ct9bHG4SWHTl9PMz5PXSs2vCxX8.roa (raw, json)
Hash identifier:          N/U8cjrJKkb1U0RlpmtZn+cKz90pd4hkwgPvU1swCC0=
Subject key identifier:   0A:DF:5B:1C:6E:12:58:74:E5:F4:F3:33:E4:F5:D2:B3:6B:C2:C5:7F
Certificate issuer:       /CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
Certificate serial:       019425FCFC69E254D73CFA915DAAC622ABF7
Authority key identifier: 1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/Ct9bHG4SWHTl9PMz5PXSs2vCxX8.roa
Signing time:             Thu 02 Jan 2025 07:48:44 +0000
ROA not before:           Thu 02 Jan 2025 07:48:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216295
IP address blocks:        2001:67c:d28::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:fc:69:e2:54:d7:3c:fa:91:5d:aa:c6:22:ab:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
        Validity
            Not Before: Jan  2 07:48:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0adf5b1c6e125874e5f4f333e4f5d2b36bc2c57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:49:31:f7:f6:82:03:02:97:22:b6:d0:6f:
                    7b:35:2d:7b:1f:6b:47:86:55:0d:8c:79:90:56:58:
                    ee:9d:eb:a8:03:5a:0e:05:e9:f0:18:cf:8c:f7:76:
                    60:f7:85:6e:af:2f:54:37:13:20:bb:e1:8f:56:21:
                    8e:25:6a:bf:4c:1e:b0:15:19:cf:92:5e:90:d5:48:
                    75:f6:93:89:5f:ba:0c:40:df:1d:57:36:e3:2c:45:
                    73:e7:7b:a0:76:4b:fb:23:8a:53:8b:50:af:2e:ba:
                    1d:61:44:8c:7b:17:5a:5f:7c:e9:cd:68:4f:cd:de:
                    5f:89:ea:5f:6a:1e:53:3e:e0:fd:94:8f:71:e8:b0:
                    46:08:ee:32:5c:c0:82:22:a9:26:26:89:11:90:7c:
                    11:b1:85:94:9f:20:ef:b6:36:3e:34:70:71:d0:eb:
                    9b:c5:9b:f6:47:9e:ff:c6:0e:53:fe:5b:6c:45:4f:
                    a4:9b:a6:3c:46:43:43:4f:bb:87:28:af:78:9c:a0:
                    8e:27:1a:83:05:09:6c:ba:92:91:a7:24:78:3e:33:
                    93:c2:3a:d1:a9:aa:42:37:1f:9c:9d:e4:b4:42:eb:
                    23:c4:34:27:ac:d0:fd:87:17:84:29:78:28:f0:71:
                    d2:7c:3c:c0:15:4f:94:8c:74:ab:02:02:3b:f9:6f:
                    1e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DF:5B:1C:6E:12:58:74:E5:F4:F3:33:E4:F5:D2:B3:6B:C2:C5:7F
            X509v3 Authority Key Identifier:
                keyid:1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/Ct9bHG4SWHTl9PMz5PXSs2vCxX8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:d28::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:e7:6c:17:2b:4a:11:60:37:de:c0:e9:db:6f:bf:06:78:1a:
         87:da:ee:08:92:ea:a7:dc:d3:d3:18:4c:cb:aa:d9:f1:a6:1d:
         f3:cc:10:ba:b2:5e:00:4f:1e:39:bd:b0:6d:6b:76:ee:cf:45:
         d3:77:24:63:e1:95:c7:ba:5f:3c:76:6e:39:c8:f2:6c:f6:4d:
         ac:7a:d3:f0:0e:14:24:fb:a3:32:95:d1:82:c4:95:85:5b:19:
         f4:4f:75:f7:8e:55:0d:ad:08:9a:fd:98:9b:2f:66:00:91:98:
         c6:2e:23:7e:b8:b5:c6:06:f0:bc:8d:d2:2b:25:a6:e5:d6:25:
         89:25:f0:d5:94:1d:60:ae:95:5f:03:fa:55:30:b4:78:a9:40:
         ae:87:d8:c7:56:9a:33:52:5f:8f:14:a5:ad:04:4c:d9:39:bc:
         bf:d2:9f:2f:65:b6:32:b3:5a:a4:93:a3:f8:4a:a6:1a:8f:8a:
         2a:30:41:11:21:ce:af:76:54:cf:1a:5d:da:99:c5:56:14:02:
         85:aa:1a:0b:3c:a7:90:71:ca:9b:81:7a:88:ac:56:82:8e:03:
         15:1e:24:45:12:63:da:c7:44:93:45:46:ae:38:2a:85:b6:4a:
         f5:6e:a5:31:9e:6e:b8:8d:87:00:ed:d8:54:0c:5d:70:7f:b1:
         56:4b:5b:8d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQl/Pxp4lTXPPqRXarGIqv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkM2I2NGQ5NWY2MTMxNjgyYjk5MDVjNDQwYTc4NWE2MGE4
YWM4YjgwHhcNMjUwMTAyMDc0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWRmNWIxYzZlMTI1ODc0ZTVmNGYzMzNlNGY1ZDJiMzZiYzJjNTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA019JMff2ggMClyK20G97NS17H2tH
hlUNjHmQVljuneuoA1oOBenwGM+M93Zg94Vury9UNxMgu+GPViGOJWq/TB6wFRnP
kl6Q1Uh19pOJX7oMQN8dVzbjLEVz53ugdkv7I4pTi1CvLrodYUSMexdaX3zpzWhP
zd5fiepfah5TPuD9lI9x6LBGCO4yXMCCIqkmJokRkHwRsYWUnyDvtjY+NHBx0Oub
xZv2R57/xg5T/ltsRU+km6Y8RkNDT7uHKK94nKCOJxqDBQlsupKRpyR4PjOTwjrR
qapCNx+cneS0QusjxDQnrND9hxeEKXgo8HHSfDzAFU+UjHSrAgI7+W8eZQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFArfWxxuElh05fTzM+T10rNrwsV/MB8GA1UdIwQY
MBaAFB07ZNlfYTFoK5kFxECnhaYKisi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFR0azJWOWhNV2dybVFYRVFLZUZwZ3FLeUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zZTYyZDgtOWU0MS00Zjg2LTkzMTMt
NjE1Y2IzNzJlMDc3LzEvQ3Q5YkhHNFNXSFRsOVBNejVQWFNzMnZDeFg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zZTYyZDgtOWU0MS00Zjg2LTkzMTMtNjE1Y2IzNzJlMDc3
LzEvSFR0azJWOWhNV2dybVFYRVFLZUZwZ3FLeUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA0o
MA0GCSqGSIb3DQEBCwUAA4IBAQAi52wXK0oRYDfewOnbb78GeBqH2u4Ikuqn3NPT
GEzLqtnxph3zzBC6sl4ATx45vbBta3buz0XTdyRj4ZXHul88dm45yPJs9k2setPw
DhQk+6MyldGCxJWFWxn0T3X3jlUNrQia/ZibL2YAkZjGLiN+uLXGBvC8jdIrJabl
1iWJJfDVlB1grpVfA/pVMLR4qUCuh9jHVpozUl+PFKWtBEzZOby/0p8vZbYys1qk
k6P4SqYaj4oqMEERIc6vdlTPGl3amcVWFAKFqhoLPKeQccqbgXqIrFaCjgMVHiRF
EmPax0STRUauOCqFtkr1bqUxnm64jYcA7dhUDF1wf7FWS1uN
-----END CERTIFICATE-----