Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/S5ZKnLfz4DstONEqZm_YmyZ8kvY.roa
File:                     S5ZKnLfz4DstONEqZm_YmyZ8kvY.roa (raw, json)
Hash identifier:          X0rSxal4LbSgFqA0+FsHMQ78+/EIGLIojbhDJzOesXI=
Subject key identifier:   4B:96:4A:9C:B7:F3:E0:3B:2D:38:D1:2A:66:6F:D8:9B:26:7C:92:F6
Certificate issuer:       /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial:       0195C9C2EC197993A1DE176FF85E6ED92794
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/S5ZKnLfz4DstONEqZm_YmyZ8kvY.roa
Signing time:             Mon 24 Mar 2025 20:05:49 +0000
ROA not before:           Mon 24 Mar 2025 20:05:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211615
IP address blocks:        2a12:5840:2410::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c9:c2:ec:19:79:93:a1:de:17:6f:f8:5e:6e:d9:27:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
        Validity
            Not Before: Mar 24 20:05:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4b964a9cb7f3e03b2d38d12a666fd89b267c92f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:60:70:97:9d:f3:8c:c6:3b:d5:95:03:d2:
                    6f:61:94:26:78:1e:90:6d:1e:3c:3c:01:34:53:42:
                    d1:bd:f7:71:eb:83:d6:15:05:50:d4:ae:7c:f8:c6:
                    7a:17:39:d0:03:fe:a4:fb:a1:4c:5e:4c:33:56:2a:
                    8d:e7:fb:dc:41:6b:9c:c9:de:b7:94:47:f9:8b:4f:
                    37:29:49:90:75:43:df:50:d3:b1:e2:49:db:1d:d6:
                    6a:4f:1d:c6:b5:e5:d9:ca:8d:b6:cc:54:fa:2b:e7:
                    12:8a:13:79:60:75:cc:83:18:82:d6:e6:19:d3:d1:
                    63:eb:f4:52:cc:01:18:6e:8b:c8:bb:e2:0c:5d:86:
                    cd:9d:8b:cf:19:9f:9d:c8:44:6b:ad:50:31:42:44:
                    d3:7f:0c:93:47:3c:c1:76:dd:55:c1:40:a0:b1:cb:
                    78:16:03:04:a3:d0:a6:7b:81:b7:34:ce:d7:13:97:
                    aa:6d:0b:d4:0c:fc:f4:6a:c5:96:81:67:2d:0f:d8:
                    b2:85:7f:be:32:99:4c:fe:0c:6b:3b:f6:5f:db:a0:
                    f3:c2:d6:32:39:37:06:ec:6e:93:45:26:24:1f:eb:
                    09:b7:d8:fe:63:98:87:d3:bd:84:c6:6d:d4:97:7e:
                    0e:a5:22:35:5d:7f:8f:62:19:1f:34:e1:d5:5c:a0:
                    95:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:96:4A:9C:B7:F3:E0:3B:2D:38:D1:2A:66:6F:D8:9B:26:7C:92:F6
            X509v3 Authority Key Identifier:
                keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/S5ZKnLfz4DstONEqZm_YmyZ8kvY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:5840:2410::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:a9:60:76:51:9e:f5:a7:a6:8d:89:a5:1e:08:37:be:29:d9:
         04:74:bf:ce:a4:3f:92:82:05:3c:7e:5a:cd:58:01:24:44:ec:
         b3:7e:cd:52:37:14:2f:fc:4d:ac:b7:29:ca:87:61:a8:98:19:
         8b:f6:1a:a0:f2:ce:fd:fd:d8:d7:df:72:6e:0f:c5:21:95:5f:
         9c:7d:b1:8c:d0:88:f1:fe:78:d3:59:2e:db:ee:04:c7:b3:fa:
         40:c8:1d:b6:1f:38:23:2b:97:07:c6:43:81:87:20:1a:2e:37:
         b6:33:56:d7:0a:ed:8d:48:78:fa:8e:3c:a7:e7:a4:ea:10:6b:
         b3:5c:2a:4f:e2:d0:c2:6b:45:45:ea:ce:80:8f:93:82:58:10:
         4b:0c:69:5c:82:3c:d6:4c:2d:5f:29:45:76:d2:09:e7:fc:01:
         77:c5:38:fe:11:15:47:d1:04:20:c6:18:94:27:65:56:e2:f5:
         2c:43:24:7d:b5:65:a2:53:e7:5c:2e:80:23:dc:65:7b:41:f4:
         73:f4:bd:7e:f8:e1:9b:da:4b:80:6a:72:5f:17:c1:76:20:7f:
         8d:f9:c8:3f:fc:39:6d:ce:41:d1:7d:53:ce:1f:0e:a5:72:ad:
         13:a5:c1:5c:02:d7:34:28:90:41:c2:9b:fe:60:28:b7:7f:2d:
         5b:06:0b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----