Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/CisyPBICFzRGOCGtK3vxthiuGEs.roa
File:                     CisyPBICFzRGOCGtK3vxthiuGEs.roa (raw, json)
Hash identifier:          23mIhFxKDvJAL2KMAVi2LJugT4q2VWIVs7Cdef8DgOI=
Subject key identifier:   0A:2B:32:3C:12:02:17:34:46:38:21:AD:2B:7B:F1:B6:18:AE:18:4B
Certificate issuer:       /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial:       019422FC4DD81794C47EE7DFF78E41DBE42E
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/CisyPBICFzRGOCGtK3vxthiuGEs.roa
Signing time:             Wed 01 Jan 2025 17:49:07 +0000
ROA not before:           Wed 01 Jan 2025 17:49:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207821
IP address blocks:        2a0a:2782::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:4d:d8:17:94:c4:7e:e7:df:f7:8e:41:db:e4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
        Validity
            Not Before: Jan  1 17:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0a2b323c12021734463821ad2b7bf1b618ae184b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:03:e1:b0:05:e7:8e:26:7a:fd:3e:d7:53:
                    37:c4:3c:06:f7:f7:e9:90:c3:b7:11:f7:a3:5b:ad:
                    2c:65:06:2c:ad:83:cd:23:88:ac:87:1e:91:5c:cc:
                    85:4a:8c:bb:4d:2a:01:f6:88:bc:c3:36:a5:f6:d7:
                    cd:c9:74:e2:42:b8:54:25:45:90:7e:b8:f8:15:c4:
                    2f:7b:02:98:a4:5f:5f:f8:bd:c4:f0:0e:29:67:75:
                    0e:14:b5:c6:a3:b8:35:55:6e:90:b3:02:5f:4a:59:
                    5d:a1:f8:7c:fd:6e:6f:1d:f2:c1:4b:e3:cc:84:37:
                    d6:e0:65:fd:5e:6c:5a:fb:27:29:36:28:b6:d6:f1:
                    d1:e2:6f:fd:30:3a:34:75:3f:45:79:3e:e0:0e:21:
                    89:44:c3:9d:e2:4f:2e:f7:d4:13:3d:f6:fd:1f:04:
                    0a:7c:b4:23:e4:a5:0f:28:82:3c:f1:a5:9f:6e:99:
                    35:f2:e3:9e:81:2a:fe:16:4c:b6:24:18:6b:e6:14:
                    cc:fc:c8:b0:da:8b:4b:42:e1:d7:53:b2:fe:48:fc:
                    94:52:cd:e7:a1:86:5f:dc:a0:83:3f:ae:d8:a8:2d:
                    a5:d5:c8:4c:a6:ff:fb:71:c5:b7:f3:47:1c:ba:26:
                    28:ab:37:25:89:d5:e9:fb:4f:e4:e3:e6:e2:92:33:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2B:32:3C:12:02:17:34:46:38:21:AD:2B:7B:F1:B6:18:AE:18:4B
            X509v3 Authority Key Identifier:
                keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/CisyPBICFzRGOCGtK3vxthiuGEs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:2782::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:4a:4d:e2:06:5c:fe:31:0f:76:09:b6:0d:a7:de:6c:6a:cb:
         cd:60:40:14:10:e5:d4:6a:47:e1:17:6f:a4:89:22:6d:ff:14:
         24:42:5b:37:cd:53:31:e6:db:d4:90:71:79:df:a1:e0:bb:c9:
         04:d4:5c:d0:b2:aa:23:de:a0:aa:80:5c:81:f3:f2:7e:c4:e5:
         dd:24:66:fe:e2:d9:00:0e:16:d8:7e:ea:81:0c:c2:8a:7b:6b:
         36:b0:c1:aa:7b:82:4f:2a:96:4f:49:4c:ec:45:18:08:2f:17:
         42:5a:5c:e3:b6:9c:03:5b:02:ac:99:6c:b7:19:00:4c:7f:23:
         7e:df:da:32:58:9d:67:97:29:0e:f7:89:32:76:e7:c9:c9:d7:
         15:4a:fd:19:5a:69:34:38:d9:88:fb:5c:b7:1c:74:5f:04:01:
         40:bd:9f:53:b7:e5:4e:9e:fe:5f:50:e6:c2:67:80:34:53:55:
         43:7b:5f:7c:ba:28:09:f2:c0:4c:26:55:20:4c:ec:b9:1d:84:
         dd:6c:3a:06:49:78:33:91:ba:87:e2:a6:bf:a6:4f:e5:11:f3:
         bd:1e:07:67:9b:a6:83:6c:49:6d:7b:a6:ae:36:c3:8d:89:22:
         c4:80:0e:ca:fd:f7:d9:d5:8c:a9:57:36:73:39:37:9b:eb:84:
         9a:df:90:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----