Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/p9UuQE7IxHiGiw_Tp8PySfk0XpA.roa
File:                     p9UuQE7IxHiGiw_Tp8PySfk0XpA.roa (raw, json)
Hash identifier:          Xqy9Em6AjRJ+I/gqlqDmb5niUls7eNf0tdPu3/cAQb8=
Subject key identifier:   A7:D5:2E:40:4E:C8:C4:78:86:8B:0F:D3:A7:C3:F2:49:F9:34:5E:90
Certificate issuer:       /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial:       0196157688E2FDC538A1F4BB395DC4964A50
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/p9UuQE7IxHiGiw_Tp8PySfk0XpA.roa
Signing time:             Tue 08 Apr 2025 12:53:31 +0000
ROA not before:           Tue 08 Apr 2025 12:53:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210738
IP address blocks:        2a13:a5c7:3100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:15:76:88:e2:fd:c5:38:a1:f4:bb:39:5d:c4:96:4a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
        Validity
            Not Before: Apr  8 12:53:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a7d52e404ec8c478868b0fd3a7c3f249f9345e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7f:b9:a8:ca:7e:96:dd:d5:15:d9:a4:a1:b1:
                    32:6b:b8:d6:fe:bb:ba:bc:45:91:0e:8c:82:d2:2e:
                    8a:ea:a9:11:c2:ca:7e:c5:32:09:01:9c:9e:78:aa:
                    6f:68:53:7a:87:2d:28:e6:3a:f5:cd:84:5c:0c:90:
                    1e:0b:be:3b:e9:28:ea:79:2a:3b:35:04:3f:78:4c:
                    00:62:50:fc:18:cb:2d:cd:e6:2f:97:53:35:19:4e:
                    0d:45:70:8b:17:52:00:ec:c2:5f:c6:06:94:14:99:
                    b7:b7:3c:c5:91:af:ac:f9:77:aa:5e:b9:6b:d1:11:
                    ee:9c:2e:1a:8d:8c:77:e4:ed:83:c9:c0:d3:9f:c3:
                    e1:8b:27:e3:67:dc:59:ce:f0:3c:52:fa:86:5c:95:
                    f4:3f:0c:8d:cf:0a:f8:f6:1a:1a:09:b9:dd:6f:03:
                    2c:fb:32:02:52:f3:fb:5b:a4:46:eb:5e:6b:b7:01:
                    c6:e1:93:79:9d:3e:fc:08:72:40:a3:e4:d1:b3:9e:
                    b1:90:21:d9:6d:b6:92:9c:1a:96:d3:e8:04:14:ec:
                    a0:9a:f0:a4:dc:6a:82:07:3a:6c:04:8f:c5:8d:55:
                    d0:b5:80:16:1d:56:b8:a1:6a:13:74:75:09:74:8d:
                    9c:a6:48:83:a1:72:53:fa:a2:b0:d2:56:36:b2:3a:
                    bb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D5:2E:40:4E:C8:C4:78:86:8B:0F:D3:A7:C3:F2:49:F9:34:5E:90
            X509v3 Authority Key Identifier:
                keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/p9UuQE7IxHiGiw_Tp8PySfk0XpA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:a5c7:3100::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:b8:3f:79:ca:f1:74:7d:8f:32:65:db:13:02:54:b2:93:26:
         d3:47:d3:8e:45:4b:10:e6:60:0f:10:fe:bc:0c:e2:1c:e6:50:
         b2:6a:cc:20:8b:1c:fc:3b:65:bf:37:56:d4:5d:51:9e:7f:00:
         7e:02:0e:a7:3d:bf:27:27:0b:98:27:77:fb:cc:55:5c:b3:95:
         2e:8e:ee:54:e2:6d:c5:b2:4e:a3:62:47:2b:92:44:00:0b:fe:
         f8:a3:df:49:d0:99:74:d7:d0:8b:9f:7b:4e:d0:fa:9a:47:5b:
         a7:49:68:44:ce:37:ae:84:ad:4d:de:f6:d0:ef:b3:e6:0c:4a:
         36:f3:51:6b:e0:da:75:46:60:6e:22:8d:ec:26:6e:a4:02:a4:
         2c:58:a9:e3:88:29:ec:4a:7c:0d:4e:d0:00:43:24:d7:94:c1:
         b1:d8:af:21:37:64:73:de:21:97:87:74:72:80:03:e7:97:58:
         e8:6b:d9:7c:46:4e:0e:77:ed:dc:ca:7a:2c:1d:69:ad:6e:d9:
         76:ac:f6:ec:2a:56:3b:44:01:26:cf:38:40:50:bc:ba:fc:f1:
         7c:45:c6:ee:40:2a:ab:9b:d0:0c:a6:a2:7a:d8:41:7f:cb:fc:
         c7:6e:6a:51:cf:84:6a:96:c6:d9:3f:ac:8d:38:24:a5:91:f4:
         c5:50:2a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----