Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/j3OqePmNlU-jrkVRR4lJQ8-KaH8.roa
File:                     j3OqePmNlU-jrkVRR4lJQ8-KaH8.roa (raw, json)
Hash identifier:          M8f2Rme/cZWz0SsevRP3HI8gJ+MBsuwO694gFGmko3s=
Subject key identifier:   8F:73:AA:78:F9:8D:95:4F:A3:AE:45:51:47:89:49:43:CF:8A:68:7F
Certificate issuer:       /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial:       0195432E000EE2291E74D1C21F4468571973
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/j3OqePmNlU-jrkVRR4lJQ8-KaH8.roa
Signing time:             Wed 26 Feb 2025 16:54:02 +0000
ROA not before:           Wed 26 Feb 2025 16:54:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209641
IP address blocks:        2a09:c706::/32 maxlen: 32
                          2a0a:b385::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:43:2e:00:0e:e2:29:1e:74:d1:c2:1f:44:68:57:19:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
        Validity
            Not Before: Feb 26 16:54:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8f73aa78f98d954fa3ae455147894943cf8a687f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:43:58:d8:a9:fd:36:c8:6c:b7:7f:87:5b:04:
                    ed:81:0a:71:0b:eb:99:e5:41:98:37:cb:69:fb:a8:
                    b5:dc:9b:bd:b2:d3:f2:1b:e8:94:47:04:84:83:81:
                    02:93:a3:4d:92:a7:47:e6:82:58:9c:98:8a:a3:3c:
                    d8:7b:3e:75:f6:a3:0a:77:6c:88:80:b0:0c:49:23:
                    bc:de:bf:76:f3:13:8f:2d:ed:f1:b5:14:23:fa:76:
                    8b:01:14:5a:ce:5b:7e:3e:07:46:d0:88:d7:49:6b:
                    00:1a:d1:96:df:28:af:04:1d:a0:26:20:ee:5c:9a:
                    17:8a:33:00:25:42:a2:b6:df:d3:b1:47:28:0f:46:
                    91:fb:65:10:df:16:ea:9e:39:ba:8b:8d:db:2e:1c:
                    09:aa:e0:83:ac:a1:3c:c2:19:21:b8:63:b0:79:84:
                    79:cd:59:4f:c7:c4:25:34:90:e1:f0:8b:ff:f0:5a:
                    0e:3e:06:fa:55:1e:49:f0:95:5a:81:e7:b7:d5:f9:
                    11:42:cf:1c:3b:78:00:a2:f8:5b:82:68:70:1c:4f:
                    75:d9:be:6d:f1:a0:80:90:47:ee:45:28:ae:fb:85:
                    5c:77:8c:8c:9c:6f:51:d7:a1:cf:e1:49:6a:c4:c6:
                    c7:ca:5d:14:3d:4e:2f:b0:be:e9:a4:8d:dc:6c:29:
                    3f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:73:AA:78:F9:8D:95:4F:A3:AE:45:51:47:89:49:43:CF:8A:68:7F
            X509v3 Authority Key Identifier:
                keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/j3OqePmNlU-jrkVRR4lJQ8-KaH8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:c706::/32
                  2a0a:b385::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:52:f9:06:55:4a:2c:18:56:65:93:81:84:7a:15:1f:7e:01:
         35:90:52:29:70:2e:4b:c9:8a:40:fa:30:d4:f7:15:51:57:8d:
         19:c4:fb:59:7b:a1:75:97:c2:c5:8f:b3:ee:1c:e1:02:d3:2b:
         c8:a2:82:2a:88:70:fe:f0:7d:46:4d:00:92:65:3c:c3:80:18:
         e2:b6:5c:bc:32:0d:45:7d:74:9d:20:24:c4:ae:ac:fa:89:a9:
         23:f7:e1:12:a9:f0:99:cf:8b:74:30:01:97:c0:4d:fe:de:f7:
         48:7c:1c:6c:c8:40:f6:56:d6:11:e3:d4:e8:a4:c2:77:cb:c6:
         6d:85:1f:67:40:f2:90:51:5a:c9:00:86:99:e1:ca:b7:56:34:
         ec:21:45:1b:dc:1d:31:73:dc:76:ef:03:26:a4:29:a7:99:4f:
         8a:19:56:47:6b:d3:d1:3e:89:06:34:d1:75:79:11:ea:dc:23:
         b9:55:a6:92:9b:c1:fc:ff:6d:be:67:5e:60:88:97:1c:a0:15:
         d2:6d:cf:5e:e9:da:37:bf:76:b6:e4:fc:4c:69:23:36:58:e9:
         ea:09:25:6e:22:40:be:27:3d:fa:b6:d2:98:60:92:4b:a8:c9:
         4d:52:ec:11:4b:ca:45:22:33:eb:7d:1c:84:da:85:6f:c9:5d:
         ee:b4:90:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----