Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/9kpPUCTW6Qn7TUHtyr9YOj6Odr4.roa
File:                     9kpPUCTW6Qn7TUHtyr9YOj6Odr4.roa (raw, json)
Hash identifier:          HpbK15QHkCq2yrHDhDOHMvxiVYVvHPgmBjt3qtyByjQ=
Subject key identifier:   F6:4A:4F:50:24:D6:E9:09:FB:4D:41:ED:CA:BF:58:3A:3E:8E:76:BE
Certificate issuer:       /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial:       0194D21914803B3FC9B14FBBF1C0C4AD2146
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/9kpPUCTW6Qn7TUHtyr9YOj6Odr4.roa
Signing time:             Tue 04 Feb 2025 17:54:06 +0000
ROA not before:           Tue 04 Feb 2025 17:54:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197677
IP address blocks:        2a13:c0::/48 maxlen: 48
                          2a13:c0:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:d2:19:14:80:3b:3f:c9:b1:4f:bb:f1:c0:c4:ad:21:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
        Validity
            Not Before: Feb  4 17:54:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f64a4f5024d6e909fb4d41edcabf583a3e8e76be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:d6:26:7e:69:b5:89:dc:82:2e:0d:82:51:
                    e6:67:9a:da:0b:e1:02:9a:4f:69:f6:95:18:13:7d:
                    a4:e4:5e:fd:1f:40:1c:f0:e8:e7:63:98:3e:51:bd:
                    80:77:69:41:f4:e5:f3:93:3e:70:da:e8:8c:6c:09:
                    83:67:4f:54:9c:1c:3b:e5:0b:eb:47:42:35:36:d2:
                    ca:70:8c:54:e3:d2:3d:99:62:ad:c9:47:8c:a9:4a:
                    65:92:fc:a8:37:70:da:25:a3:83:c3:21:d4:72:ae:
                    2e:84:0e:5f:16:15:65:13:e4:78:ce:60:2a:df:dc:
                    20:9c:60:c6:3c:11:97:98:58:90:bd:cf:94:0a:4d:
                    54:60:10:17:e8:bf:58:b7:6a:24:a4:df:67:50:0a:
                    3e:7a:60:b2:fd:aa:1a:4c:e8:e8:9b:d4:10:26:49:
                    1c:02:1a:62:a0:e4:fa:96:0f:d1:be:2c:12:20:a4:
                    f2:39:50:77:b8:33:5a:a2:10:97:ed:87:09:15:0e:
                    c3:80:7e:5d:97:27:78:00:f1:dc:d8:a9:80:85:bf:
                    c3:e6:63:e3:58:49:3c:e0:65:d1:4d:a8:fc:7f:13:
                    04:5c:48:0b:c9:97:09:f0:43:f8:2c:d2:2b:77:a1:
                    40:d2:b5:1f:86:89:a5:ac:0a:08:c6:dc:6f:63:16:
                    09:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4A:4F:50:24:D6:E9:09:FB:4D:41:ED:CA:BF:58:3A:3E:8E:76:BE
            X509v3 Authority Key Identifier:
                keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/9kpPUCTW6Qn7TUHtyr9YOj6Odr4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c0::/48
                  2a13:c0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:d8:ec:21:6f:5b:93:ba:af:be:97:5a:23:77:9f:51:b5:d5:
         a5:a4:fa:09:99:e6:94:72:64:71:db:e9:7b:b6:09:f0:76:54:
         ac:55:02:23:6a:aa:a2:40:e1:4b:ff:74:a8:7b:cc:c6:c2:eb:
         f6:98:69:66:82:b4:38:28:b1:7e:9f:c0:e2:0e:67:32:cf:36:
         6c:aa:68:a7:22:56:66:08:6f:61:da:01:47:05:f2:a7:4c:da:
         1b:e7:3b:22:65:5d:36:4f:65:52:19:a8:e7:60:70:6e:c8:25:
         20:8d:16:3d:5f:62:c1:4f:29:78:ec:cd:d2:05:8b:64:24:fd:
         40:63:0f:8b:55:72:a6:7c:7b:0e:8c:ce:58:54:9b:69:7e:f0:
         62:f0:18:77:90:a2:c3:72:f5:d7:fb:6e:aa:15:c7:15:8c:2f:
         8e:16:2e:77:ae:25:0d:9a:60:9f:33:6b:51:ea:10:9b:1b:27:
         fc:8a:91:d7:18:fa:48:e5:cb:ff:d5:03:74:72:87:fd:94:12:
         5c:52:d5:40:5a:8f:65:35:33:ae:0d:37:89:da:bf:f5:72:43:
         f2:2e:1a:ec:37:29:91:f4:52:f3:7e:5a:f7:ad:b5:b0:29:55:
         ba:8c:11:17:02:79:a4:61:e3:59:63:21:46:53:f8:c9:db:81:
         2a:2d:00:d0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZTSGRSAOz/JsU+78cDErSFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmE1ZTJiZWMwYTNlYzc5NWY4ZjE5Y2Q0N2ZlY2M2ODA2
NzhiMDgwHhcNMjUwMjA0MTc1NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjRhNGY1MDI0ZDZlOTA5ZmI0ZDQxZWRjYWJmNTgzYTNlOGU3NmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsHWJn5ptYncgi4NglHmZ5raC+EC
mk9p9pUYE32k5F79H0Ac8OjnY5g+Ub2Ad2lB9OXzkz5w2uiMbAmDZ09UnBw75Qvr
R0I1NtLKcIxU49I9mWKtyUeMqUplkvyoN3DaJaODwyHUcq4uhA5fFhVlE+R4zmAq
39wgnGDGPBGXmFiQvc+UCk1UYBAX6L9Yt2okpN9nUAo+emCy/aoaTOjom9QQJkkc
AhpioOT6lg/RviwSIKTyOVB3uDNaohCX7YcJFQ7DgH5dlyd4APHc2KmAhb/D5mPj
WEk84GXRTaj8fxMEXEgLyZcJ8EP4LNIrd6FA0rUfhomlrAoIxtxvYxYJSwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPZKT1Ak1ukJ+01B7cq/WDo+jna+MB8GA1UdIwQY
MBaAFGP6XivsCj7HlfjxnNR/7MaAZ4sIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2Et
ZTRmMmNkYzdhNDExLzEvOWtwUFVDVFc2UW43VFVIdHlyOVlPajZPZHI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2EtZTRmMmNkYzdhNDEx
LzEvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhMAwAAA
AwcAKhMAwAADMA0GCSqGSIb3DQEBCwUAA4IBAQCF2Owhb1uTuq++l1ojd59RtdWl
pPoJmeaUcmRx2+l7tgnwdlSsVQIjaqqiQOFL/3Soe8zGwuv2mGlmgrQ4KLF+n8Di
DmcyzzZsqminIlZmCG9h2gFHBfKnTNob5zsiZV02T2VSGajnYHBuyCUgjRY9X2LB
Tyl47M3SBYtkJP1AYw+LVXKmfHsOjM5YVJtpfvBi8Bh3kKLDcvXX+26qFccVjC+O
Fi53riUNmmCfM2tR6hCbGyf8ipHXGPpI5cv/1QN0cof9lBJcUtVAWo9lNTOuDTeJ
2r/1ckPyLhrsNymR9FLzflr3rbWwKVW6jBEXAnmkYeNZYyFGU/jJ24EqLQDQ
-----END CERTIFICATE-----