Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/Uw9JbudeiyQ7Eqq4TZWKYitXR5Q.roa
File:                     Uw9JbudeiyQ7Eqq4TZWKYitXR5Q.roa (raw, json)
Hash identifier:          PECjzeRoLCDiJc+fMhDdhpnjzdeMhIqjV/edQ5qJgEw=
Subject key identifier:   53:0F:49:6E:E7:5E:8B:24:3B:12:AA:B8:4D:95:8A:62:2B:57:47:94
Certificate issuer:       /CN=3a839936aeeff288678e772633020fa259bd9cf2
Certificate serial:       01941F8C8D95A2B3DCE646693ADC0CBD6928
Authority key identifier: 3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/Uw9JbudeiyQ7Eqq4TZWKYitXR5Q.roa
Signing time:             Wed 01 Jan 2025 01:48:12 +0000
ROA not before:           Wed 01 Jan 2025 01:48:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215769
IP address blocks:        2a12:ff04:7000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:8d:95:a2:b3:dc:e6:46:69:3a:dc:0c:bd:69:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a839936aeeff288678e772633020fa259bd9cf2
        Validity
            Not Before: Jan  1 01:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=530f496ee75e8b243b12aab84d958a622b574794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:b0:9f:df:bb:6d:2b:d7:c1:57:ee:ae:48:
                    ff:3a:9b:1f:3a:ab:a6:bd:c4:b0:24:56:0c:58:f8:
                    90:c5:cd:56:16:2e:52:a4:11:e4:4d:b9:bd:5c:57:
                    d0:84:37:82:34:39:7a:1b:2a:8d:a0:3e:10:33:ee:
                    06:d0:b8:2d:a3:6b:8b:29:8a:fc:f9:6f:3c:ef:00:
                    7f:8b:b5:92:6a:1d:55:36:37:86:2f:ba:54:43:ab:
                    c0:ee:ce:d5:3e:42:03:66:e6:d4:9d:02:18:34:91:
                    da:ae:df:cd:a6:94:0c:9d:83:aa:14:5e:db:cc:b0:
                    fe:cd:83:37:4c:02:06:b2:28:a5:12:b0:e3:52:b4:
                    36:44:eb:a1:98:22:5e:7d:cf:61:2d:f2:99:88:59:
                    6f:1c:39:d2:c1:c3:20:b6:3f:c7:d5:b1:e5:bb:84:
                    dc:33:50:59:d5:da:aa:02:44:76:7e:60:92:88:17:
                    2d:4b:4f:3a:4f:29:c2:67:98:d0:66:26:b4:13:c1:
                    93:75:08:e9:04:9b:5e:e1:29:c7:44:10:4d:2c:79:
                    9b:05:ee:b1:a6:42:12:89:7a:74:76:73:62:32:34:
                    b7:55:e4:56:58:60:1b:71:5e:b6:3d:1c:58:65:4d:
                    a2:bf:33:11:41:57:f9:96:64:e8:77:61:10:d8:fd:
                    42:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0F:49:6E:E7:5E:8B:24:3B:12:AA:B8:4D:95:8A:62:2B:57:47:94
            X509v3 Authority Key Identifier:
                keyid:3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/Uw9JbudeiyQ7Eqq4TZWKYitXR5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:ff04:7000::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:5d:e8:57:25:05:84:f8:44:5c:e3:c1:94:57:1e:60:a4:7b:
         1c:3f:73:38:fa:09:a0:ac:9d:12:fc:cd:d6:03:21:74:8b:da:
         94:35:4b:53:2a:92:7f:bf:88:17:51:a4:82:8a:c4:9f:21:52:
         4e:a3:74:57:f6:18:22:8b:8d:47:d0:92:d7:0d:af:58:d7:8c:
         e2:10:d1:b3:bf:ee:6a:b7:2b:6b:66:ed:94:59:30:b5:52:95:
         4e:2f:6b:0b:de:1b:3e:48:3d:d1:07:4d:6e:8e:4b:06:25:e9:
         cd:16:b0:33:4b:a1:bd:11:8f:33:5e:9b:98:36:20:d6:94:c2:
         30:b4:16:7a:70:b1:0e:21:03:a7:b9:f7:4e:89:5b:be:89:af:
         4d:df:91:f0:53:9e:e6:cf:fb:3c:1a:5c:8b:c1:75:5a:a2:6a:
         ba:fe:bc:dd:e4:ad:90:06:06:32:d8:8c:0c:0d:5d:e6:fe:b6:
         5b:10:bf:03:6d:2e:8b:0b:ed:46:a7:9b:b7:22:2e:df:2b:89:
         ff:a8:1a:96:40:09:38:fa:4d:0d:32:c5:fe:4e:05:26:c5:33:
         98:8c:1d:a9:ea:4d:c7:3b:5d:a4:ab:3f:15:df:14:a2:3a:e2:
         98:fc:0a:0f:76:63:46:f5:c2:c4:a4:39:99:91:a7:e9:7d:12:
         96:05:39:d3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjI2VorPc5kZpOtwMvWkoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhODM5OTM2YWVlZmYyODg2NzhlNzcyNjMzMDIwZmEyNTli
ZDljZjIwHhcNMjUwMTAxMDE0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzBmNDk2ZWU3NWU4YjI0M2IxMmFhYjg0ZDk1OGE2MjJiNTc0Nzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphKwn9+7bSvXwVfurkj/OpsfOqum
vcSwJFYMWPiQxc1WFi5SpBHkTbm9XFfQhDeCNDl6GyqNoD4QM+4G0Lgto2uLKYr8
+W887wB/i7WSah1VNjeGL7pUQ6vA7s7VPkIDZubUnQIYNJHart/NppQMnYOqFF7b
zLD+zYM3TAIGsiilErDjUrQ2ROuhmCJefc9hLfKZiFlvHDnSwcMgtj/H1bHlu4Tc
M1BZ1dqqAkR2fmCSiBctS086TynCZ5jQZia0E8GTdQjpBJte4SnHRBBNLHmbBe6x
pkISiXp0dnNiMjS3VeRWWGAbcV62PRxYZU2ivzMRQVf5lmTod2EQ2P1CEwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFMPSW7nXoskOxKquE2VimIrV0eUMB8GA1UdIwQY
MBaAFDqDmTau7/KIZ453JjMCD6JZvZzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT29PWk5xN3Y4b2huam5jbU13SVBvbG05blBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81YzY3NDUtNzY4ZS00ZDYxLWI2MDQt
ODM1ZjRlMzcyODNjLzEvVXc5SmJ1ZGVpeVE3RXFxNFRaV0tZaXRYUjVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81YzY3NDUtNzY4ZS00ZDYxLWI2MDQtODM1ZjRlMzcyODNj
LzEvT29PWk5xN3Y4b2huam5jbU13SVBvbG05blBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhL/BHAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAdXehXJQWE+ERc48GUVx5gpHscP3M4+gmgrJ0S
/M3WAyF0i9qUNUtTKpJ/v4gXUaSCisSfIVJOo3RX9hgii41H0JLXDa9Y14ziENGz
v+5qtytrZu2UWTC1UpVOL2sL3hs+SD3RB01ujksGJenNFrAzS6G9EY8zXpuYNiDW
lMIwtBZ6cLEOIQOnufdOiVu+ia9N35HwU57mz/s8GlyLwXVaomq6/rzd5K2QBgYy
2IwMDV3m/rZbEL8DbS6LC+1Gp5u3Ii7fK4n/qBqWQAk4+k0NMsX+TgUmxTOYjB2p
6k3HO12kqz8V3xSiOuKY/AoPdmNG9cLEpDmZkafpfRKWBTnT
-----END CERTIFICATE-----