Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/mToK7O7t52pvY5jAx8Z0JoUDFIM.roa
File:                     mToK7O7t52pvY5jAx8Z0JoUDFIM.roa (raw, json)
Hash identifier:          Xs8G0qX2ZJs522/1L68wTzEgBOm79/mlDz8OPsPAHlA=
Subject key identifier:   99:3A:0A:EC:EE:ED:E7:6A:6F:63:98:C0:C7:C6:74:26:85:03:14:83
Certificate issuer:       /CN=1ba6f5d32474be86f63058944537629344d4f01a
Certificate serial:       019424B3C2A1555319E1ABC9C1580810DA07
Authority key identifier: 1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/mToK7O7t52pvY5jAx8Z0JoUDFIM.roa
Signing time:             Thu 02 Jan 2025 01:49:07 +0000
ROA not before:           Thu 02 Jan 2025 01:49:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207522
IP address blocks:        2001:67c:ec4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:c2:a1:55:53:19:e1:ab:c9:c1:58:08:10:da:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba6f5d32474be86f63058944537629344d4f01a
        Validity
            Not Before: Jan  2 01:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=993a0aeceeede76a6f6398c0c7c6742685031483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0e:ab:9f:66:30:02:1a:18:29:ca:c1:8f:55:
                    cc:fe:02:93:a6:33:85:42:ee:ae:1e:80:2b:9c:be:
                    f3:40:8c:14:87:f6:ab:04:e8:6b:7b:b9:f0:ac:15:
                    e8:2c:27:a6:d0:14:1d:be:16:25:14:b1:27:ff:8b:
                    0a:be:be:38:c9:3d:c1:96:b7:07:8f:e3:4f:1f:72:
                    c2:2c:d3:05:c6:bd:07:57:5a:73:94:71:f8:11:6f:
                    98:b0:0e:a4:54:5d:6d:e0:24:72:7c:8e:54:29:9d:
                    c4:5d:0d:59:d9:89:a0:31:2b:bb:27:6b:62:cf:5f:
                    d9:75:0f:18:ad:01:dc:89:17:3e:41:5a:23:71:2a:
                    ff:d4:4d:fa:f1:05:65:9e:4d:f9:52:c5:ea:48:ad:
                    62:f6:da:89:f6:49:a6:2e:5d:ce:dc:e0:92:e8:4c:
                    5a:79:0f:d4:fe:c6:dd:c9:ef:4d:08:d5:09:07:fb:
                    68:b8:fe:c5:58:f1:61:d5:bf:be:0b:57:a8:16:f4:
                    49:16:f0:d9:ef:32:9e:3b:02:24:3a:53:18:0c:44:
                    bd:c4:32:56:f3:8b:29:31:55:9a:7b:14:eb:36:a2:
                    d2:97:ab:d9:96:dc:63:dc:f6:3a:4f:46:2a:e0:88:
                    1e:4c:18:ce:92:f4:62:e6:26:a0:e8:4d:a2:e3:5a:
                    53:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3A:0A:EC:EE:ED:E7:6A:6F:63:98:C0:C7:C6:74:26:85:03:14:83
            X509v3 Authority Key Identifier:
                keyid:1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/mToK7O7t52pvY5jAx8Z0JoUDFIM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:ec4::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:1e:59:27:22:bf:4b:48:b1:ad:c1:05:2b:cf:6b:2d:bb:2f:
         0c:18:3f:eb:5a:74:0b:ee:03:6a:09:68:bb:e7:d8:56:eb:70:
         48:43:83:87:c6:af:42:c7:08:cb:42:f5:50:0e:b9:d3:15:10:
         51:68:15:a3:be:61:34:6a:cf:5e:cc:c8:62:de:43:49:54:45:
         e2:75:cf:20:a8:59:d5:c6:50:a9:dc:ca:c1:ed:ea:a3:0e:18:
         26:6b:71:62:cc:7b:1d:02:e2:a3:50:54:f2:61:cf:37:01:a4:
         b8:38:8e:dc:c1:d1:36:7a:4d:2e:a0:5f:19:9c:01:07:b7:6d:
         17:da:75:5c:5d:10:2e:24:a6:88:95:4c:fd:17:73:51:31:0a:
         c5:1a:b5:f0:d3:46:de:03:30:b2:0a:47:6e:5e:6c:da:2c:2c:
         a9:d9:a4:18:60:e0:7e:30:63:95:7a:2c:bd:f3:a0:ba:63:b2:
         d1:b5:b0:3f:7f:f6:5c:d7:a8:f1:ef:63:59:dc:cf:8a:aa:59:
         54:4d:88:8e:7b:2b:43:ef:9a:d8:34:f2:05:11:8c:c2:dc:14:
         9d:ea:c1:84:f6:c5:a7:3e:9e:3a:29:4b:62:87:49:bb:4f:b5:
         6c:cf:0d:5b:59:c5:de:b7:d9:ce:e9:29:8b:77:f8:12:d0:8a:
         f8:e5:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----