Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/gZGGAJn4KD99W2PWWIsURvOoimQ.roa
File:                     gZGGAJn4KD99W2PWWIsURvOoimQ.roa (raw, json)
Hash identifier:          vMmXSgbyVxEUVACS5btztN2cHUzgJFBf3PgLKKDGxyA=
Subject key identifier:   81:91:86:00:99:F8:28:3F:7D:5B:63:D6:58:8B:14:46:F3:A8:8A:64
Certificate issuer:       /CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Certificate serial:       01961B932BD80A07E3EBBBF07AB9B24CE6D4
Authority key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/gZGGAJn4KD99W2PWWIsURvOoimQ.roa
Signing time:             Wed 09 Apr 2025 17:22:31 +0000
ROA not before:           Wed 09 Apr 2025 17:22:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209641
IP address blocks:        2a0a:c382::/32 maxlen: 32
                          2a11:2080::/32 maxlen: 32
                          2a11:c101::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1b:93:2b:d8:0a:07:e3:eb:bb:f0:7a:b9:b2:4c:e6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
        Validity
            Not Before: Apr  9 17:22:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8191860099f8283f7d5b63d6588b1446f3a88a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:12:08:78:8b:3a:78:cc:8d:6e:5d:ae:de:79:
                    d9:4c:e5:41:97:24:4b:fd:87:ac:e7:13:ab:ca:12:
                    e9:be:f8:0d:40:d7:9e:7c:47:16:0f:80:64:5d:0c:
                    94:ba:b2:8a:cc:f6:c7:7a:ff:fc:58:7c:42:db:18:
                    43:cb:64:e0:a3:bf:9d:c2:af:22:da:af:dc:70:40:
                    46:77:b7:47:31:f9:76:bb:5d:d1:ca:3a:38:63:e8:
                    1c:87:b1:98:6c:b4:a1:1a:41:c8:bd:d2:ff:28:0a:
                    92:e3:04:d3:38:81:fe:d9:da:4b:0a:d6:ec:1b:68:
                    f0:75:a2:f7:b1:3e:c9:24:4e:dd:4d:84:98:33:e1:
                    6e:59:25:6b:f1:8e:ba:37:93:8d:7c:16:41:7f:f2:
                    0d:b6:6d:97:1a:26:84:2c:1b:9d:c9:27:e9:be:79:
                    41:b3:30:3d:d8:d5:6a:08:92:d1:45:ca:2c:d4:e3:
                    88:e1:39:97:69:a6:61:cd:4a:05:0d:5f:40:99:cf:
                    7a:6a:bd:93:59:3d:54:62:2c:6a:12:68:79:89:f0:
                    a9:c3:18:be:05:7f:ab:78:63:ab:4c:b7:b5:2c:82:
                    3a:25:7e:98:ec:5f:19:4c:6f:00:a1:a8:6d:67:26:
                    64:ab:2f:04:b3:da:a6:eb:4c:1e:b7:53:28:1e:b4:
                    8d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:91:86:00:99:F8:28:3F:7D:5B:63:D6:58:8B:14:46:F3:A8:8A:64
            X509v3 Authority Key Identifier:
                keyid:CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/gZGGAJn4KD99W2PWWIsURvOoimQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:c382::/32
                  2a11:2080::/32
                  2a11:c101::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:a3:1d:ea:0c:97:c2:07:15:74:9b:c5:c2:79:4e:3a:10:7d:
         47:27:c3:a6:04:8f:29:ff:d3:d8:97:dd:71:8d:46:dd:85:6f:
         39:05:71:5a:9b:11:ba:59:b0:0b:9a:ba:bb:d4:d4:25:91:ec:
         29:a0:2e:8d:35:08:86:88:ec:64:a1:26:78:4b:81:d3:f1:27:
         8d:97:90:20:23:4f:e2:cc:d5:9c:24:d1:0e:57:63:06:93:d1:
         c6:6d:70:9a:d8:6f:34:49:9c:c4:c2:73:0f:0b:a0:d9:47:d8:
         d4:7a:66:31:c7:5f:0a:b2:7f:88:c8:b5:c5:0f:e0:fa:20:17:
         21:4b:0e:23:21:12:51:9f:08:0a:07:cd:74:d9:b7:27:cf:4b:
         be:23:9d:0f:2d:19:0e:e7:41:88:d8:b0:59:87:9b:3c:97:78:
         28:24:7e:70:22:f6:cd:ea:b2:12:88:ea:cc:f1:fe:6d:e6:d9:
         b0:8d:31:ae:a3:5e:b9:7e:49:e8:7e:d9:7f:7d:c3:d7:25:5e:
         f9:ca:8f:76:7e:af:69:fe:1c:66:be:57:21:4b:09:db:78:bc:
         2c:ef:bd:95:26:d5:02:23:40:af:59:fb:ef:03:e3:85:5e:ca:
         2d:34:c9:22:e6:19:af:46:b0:81:dd:e3:20:c4:f4:1a:c7:f2:
         10:0f:17:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----