Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa
File:                     ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa (raw, json)
Hash identifier:          g9odyMeFUXbz4KA3It8y0JaaRZFHbE8uEJXFJGKvhPE=
Subject key identifier:   96:31:C4:B6:61:96:DD:C1:1E:B7:B2:AB:14:05:C5:AA:4D:C4:6B:9A
Certificate issuer:       /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial:       0194252152E82525FE70DDF992703E56DC5C
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa
Signing time:             Thu 02 Jan 2025 03:48:48 +0000
ROA not before:           Thu 02 Jan 2025 03:48:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214171
IP address blocks:        2001:39c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:52:e8:25:25:fe:70:dd:f9:92:70:3e:56:dc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
        Validity
            Not Before: Jan  2 03:48:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9631c4b66196ddc11eb7b2ab1405c5aa4dc46b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1b:9f:3f:3e:60:d8:b0:eb:eb:db:30:f1:61:
                    29:15:2e:bd:93:1e:cd:b3:63:1d:a5:f3:1a:9c:4a:
                    8a:b7:f7:26:0e:c9:99:19:91:2e:5f:26:77:2a:ec:
                    11:89:bb:0c:27:ba:44:53:11:91:35:67:d4:cc:37:
                    9f:e3:8b:16:2d:5d:cc:0f:1e:c3:b2:f2:cc:da:10:
                    1f:a8:80:09:4b:e3:1a:4b:49:20:ed:c3:01:22:12:
                    6d:dc:ee:51:0e:59:33:e0:42:3e:85:de:20:b4:bf:
                    2f:30:a3:ed:06:35:03:3d:9c:8a:1f:6a:a7:9b:33:
                    87:25:d8:46:57:e1:10:64:76:78:fb:ef:08:4c:69:
                    be:14:b8:61:d5:e6:a8:02:b4:35:58:a6:ef:f9:8b:
                    e2:c9:b4:35:ee:11:7f:da:bb:e7:45:45:bf:c2:0f:
                    ac:bf:d9:75:18:4b:1c:ab:e0:80:08:f9:31:9b:78:
                    dc:98:f5:b0:7f:96:8d:2f:90:59:82:bd:7f:a9:8a:
                    6a:7b:e4:93:50:d3:61:08:bb:e3:ca:db:75:ed:d6:
                    a4:2f:a9:15:4d:f7:db:44:24:db:a2:73:96:aa:b7:
                    15:e5:d2:75:3b:bd:9e:d9:62:a9:61:df:c0:07:53:
                    7c:0e:5c:3c:5b:40:b6:64:3e:88:1b:80:eb:a0:53:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:31:C4:B6:61:96:DD:C1:1E:B7:B2:AB:14:05:C5:AA:4D:C4:6B:9A
            X509v3 Authority Key Identifier:
                keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:39c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         2d:73:3d:c4:3c:31:0a:54:bd:1b:1e:e2:bf:67:89:11:62:b6:
         11:11:4e:99:24:9e:60:03:f3:88:6f:4c:01:0e:29:9e:56:59:
         77:66:f0:3d:ca:20:b6:17:b6:59:25:2e:6e:55:d5:92:02:77:
         e0:49:02:df:06:aa:31:e5:a7:20:86:99:c8:09:99:58:bf:0d:
         0f:e3:2e:a0:b1:0f:6e:ed:c1:8a:a2:2a:16:3f:e7:d3:3f:6e:
         ad:24:5d:fe:97:1f:ff:7b:30:74:23:2d:36:df:a7:38:f9:ce:
         bc:bb:23:e4:11:5d:77:d2:b2:88:24:77:ea:ca:8c:19:e5:e8:
         35:46:5f:6e:df:37:a0:36:8a:19:70:4c:c1:53:af:28:22:0c:
         f3:15:4a:e4:e6:69:26:25:29:56:4c:d9:80:ea:7f:bb:d6:cb:
         ca:59:df:32:06:7b:21:82:03:68:a1:13:fc:24:ed:2b:bb:16:
         11:18:94:aa:ce:c4:55:4a:6b:2b:8e:f8:47:71:4c:d3:8a:e5:
         2e:f4:f1:5e:92:1d:ef:06:bc:3c:a3:66:63:77:30:39:0d:46:
         4f:a9:2c:ef:30:fb:93:1e:b7:df:ed:9e:fc:ac:34:79:0c:1d:
         55:ff:c5:eb:01:00:c7:73:2f:09:61:1c:91:11:c3:dd:a6:f5:
         56:f5:71:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----