Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6BO5XQA26VlL6OpcMZYZPuUnCRQ.roa
File:                     6BO5XQA26VlL6OpcMZYZPuUnCRQ.roa (raw, json)
Hash identifier:          lVKSrBlH34djPFXZppxbWsV6vdoCD17SezBf9u7noH4=
Subject key identifier:   E8:13:B9:5D:00:36:E9:59:4B:E8:EA:5C:31:96:19:3E:E5:27:09:14
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01942522446D4FA6CB223D2472236C6F8A02
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6BO5XQA26VlL6OpcMZYZPuUnCRQ.roa
Signing time:             Thu 02 Jan 2025 03:49:50 +0000
ROA not before:           Thu 02 Jan 2025 03:49:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210738
IP address blocks:        2a0e:b107:1c81::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:44:6d:4f:a6:cb:22:3d:24:72:23:6c:6f:8a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 03:49:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e813b95d0036e9594be8ea5c3196193ee5270914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:f7:a3:a7:bc:50:12:7c:29:88:2b:36:12:
                    b6:35:0c:66:68:e1:2e:32:77:7f:bc:06:20:0c:1a:
                    ec:b8:65:71:d6:e9:75:df:93:aa:0b:ce:b7:8e:6f:
                    56:12:29:a6:dc:a1:8e:11:15:c8:51:33:0a:5d:47:
                    05:1f:46:f5:e4:e2:5a:6b:87:06:f7:e7:80:cc:1d:
                    26:3f:92:fe:41:95:ad:16:77:72:8a:30:74:67:a9:
                    fe:c6:0f:32:df:94:af:f7:26:92:d7:fd:85:d7:5a:
                    5f:3b:80:ef:22:45:c8:cb:94:48:42:a8:e5:7f:6b:
                    bd:1b:fd:25:cd:ec:e4:fe:24:79:7c:21:53:2d:0d:
                    60:22:77:17:14:52:61:05:21:8e:92:57:25:92:ee:
                    d4:55:95:10:26:35:48:92:af:6c:e0:c1:92:6b:5a:
                    4d:3a:1f:d2:ff:01:51:8f:9d:45:bf:e6:b9:02:67:
                    47:e9:26:55:a4:4a:78:6f:4e:99:6a:cf:3e:32:1a:
                    96:67:4a:d3:b3:14:b6:11:24:49:cf:92:cf:f5:5f:
                    c1:75:3c:86:3f:f9:e6:c4:7c:47:16:c3:8d:43:d3:
                    14:ba:87:bb:d6:32:f6:37:93:1c:1b:c7:72:87:c5:
                    c6:19:ce:92:52:7c:8b:f6:95:3a:56:c4:bb:1a:6d:
                    ab:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:13:B9:5D:00:36:E9:59:4B:E8:EA:5C:31:96:19:3E:E5:27:09:14
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6BO5XQA26VlL6OpcMZYZPuUnCRQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1c81::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:35:e8:42:19:4b:6b:b5:13:25:17:77:c5:19:40:ef:6a:9a:
         6e:35:84:24:0f:b4:37:bc:71:f4:9e:32:07:76:de:2b:4a:bf:
         36:04:a2:42:2f:f4:91:2b:92:ce:20:89:35:80:cf:df:d4:bc:
         20:b2:5a:b6:45:c7:6a:f1:3c:f5:4f:68:d0:e5:4b:fe:1b:c7:
         5c:0f:94:90:3b:d9:e3:3d:88:c4:94:59:29:5f:d7:80:23:e7:
         67:c1:34:d4:cf:15:86:13:af:c3:dd:9f:a1:c8:7b:6a:93:83:
         ea:da:3a:ba:69:7e:f4:be:45:87:44:5d:5d:97:b7:de:bd:72:
         27:c1:15:52:fc:92:78:a2:a9:24:5e:f9:30:57:e3:56:c6:39:
         ce:95:60:ae:0e:8f:2c:35:cc:28:56:07:a4:ad:4a:e6:ff:8c:
         ac:dd:44:c1:44:95:77:86:e7:6b:8a:35:4b:54:ce:b2:c2:3f:
         ce:97:90:de:66:e9:af:98:85:6a:ba:87:21:59:c0:2e:f4:16:
         7a:91:fd:6b:42:e0:63:a1:7e:ef:12:87:e9:ca:0b:53:ff:47:
         75:02:02:1c:ab:f6:b6:61:37:92:06:4b:18:51:b9:73:ef:a6:
         ae:fe:7c:89:11:5e:11:7e:c2:7d:51:02:1e:55:63:9c:56:96:
         07:f6:b4:30
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIkRtT6bLIj0kciNsb4oCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODEzYjk1ZDAwMzZlOTU5NGJlOGVhNWMzMTk2MTkzZWU1MjcwOTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux73o6e8UBJ8KYgrNhK2NQxmaOEu
Mnd/vAYgDBrsuGVx1ul135OqC863jm9WEimm3KGOERXIUTMKXUcFH0b15OJaa4cG
9+eAzB0mP5L+QZWtFndyijB0Z6n+xg8y35Sv9yaS1/2F11pfO4DvIkXIy5RIQqjl
f2u9G/0lzezk/iR5fCFTLQ1gIncXFFJhBSGOklclku7UVZUQJjVIkq9s4MGSa1pN
Oh/S/wFRj51Fv+a5AmdH6SZVpEp4b06Zas8+MhqWZ0rTsxS2ESRJz5LP9V/BdTyG
P/nmxHxHFsONQ9MUuoe71jL2N5McG8dyh8XGGc6SUnyL9pU6VsS7Gm2rWwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOgTuV0ANulZS+jqXDGWGT7lJwkUMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNkJPNVhRQTI2VmxMNk9wY01aWVpQdVVuQ1JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxyB
MA0GCSqGSIb3DQEBCwUAA4IBAQADNehCGUtrtRMlF3fFGUDvappuNYQkD7Q3vHH0
njIHdt4rSr82BKJCL/SRK5LOIIk1gM/f1Lwgslq2Rcdq8Tz1T2jQ5Uv+G8dcD5SQ
O9njPYjElFkpX9eAI+dnwTTUzxWGE6/D3Z+hyHtqk4Pq2jq6aX70vkWHRF1dl7fe
vXInwRVS/JJ4oqkkXvkwV+NWxjnOlWCuDo8sNcwoVgekrUrm/4ys3UTBRJV3hudr
ijVLVM6ywj/Ol5DeZumvmIVquochWcAu9BZ6kf1rQuBjoX7vEofpygtT/0d1AgIc
q/a2YTeSBksYUblz76au/nyJEV4RfsJ9UQIeVWOcVpYH9rQw
-----END CERTIFICATE-----