Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7Bhx-lQthNX4JMGen5UCBbrJ-Ng.roa
File:                     7Bhx-lQthNX4JMGen5UCBbrJ-Ng.roa (raw, json)
Hash identifier:          D21yAVw4T+qMxxKu20fVE6shLSX8nHSlroZmzo1fpF8=
Subject key identifier:   EC:18:71:FA:54:2D:84:D5:F8:24:C1:9E:9F:95:02:05:BA:C9:F8:D8
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0194252226856EE8F937BCDB4D6612500042
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7Bhx-lQthNX4JMGen5UCBbrJ-Ng.roa
Signing time:             Thu 02 Jan 2025 03:49:42 +0000
ROA not before:           Thu 02 Jan 2025 03:49:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207445
IP address blocks:        2a0e:b107:440::/44 maxlen: 48
                          2a0e:b107:444::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:26:85:6e:e8:f9:37:bc:db:4d:66:12:50:00:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 03:49:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ec1871fa542d84d5f824c19e9f950205bac9f8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:39:7a:0e:e3:34:66:49:77:27:b3:4d:f8:
                    2a:76:a7:dc:45:32:8b:fd:26:3f:bf:f3:d3:f6:79:
                    fb:ad:8d:48:51:c1:a5:b7:78:f6:b4:7e:5b:13:69:
                    4b:0d:45:4d:65:ee:e1:91:86:0f:98:ca:e2:aa:bc:
                    d6:55:bb:3d:8a:89:c6:16:bc:21:f6:24:88:22:a6:
                    45:2c:71:49:b9:8e:70:e3:b2:aa:3a:07:3b:1a:fd:
                    23:4f:6b:50:f4:79:53:75:98:17:9b:bc:b8:54:3f:
                    a7:2a:42:ac:1e:4b:86:75:06:bd:2d:ad:7f:54:80:
                    ce:0e:92:be:65:08:72:a8:b9:a8:10:ae:54:a7:47:
                    2f:14:77:34:9d:db:92:70:3e:c1:b9:7c:62:23:b6:
                    2b:c8:13:86:71:e3:2d:b1:25:c6:0b:94:3a:9d:14:
                    8c:34:6b:f7:1e:1c:fb:20:ce:c8:7d:d8:9f:86:b3:
                    f0:90:4c:16:33:c8:bb:01:d2:64:c5:2b:bc:f0:74:
                    29:f2:c5:3c:f9:86:61:95:9a:fd:5e:d7:73:02:7f:
                    b8:ea:24:2c:ce:32:0e:6e:39:0a:62:4a:30:2f:b6:
                    ff:12:fd:42:2a:4c:8c:1b:8c:e6:50:b3:cf:7c:35:
                    fa:55:f9:a6:cd:59:d9:3b:aa:94:3c:79:c1:5c:c8:
                    b7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:18:71:FA:54:2D:84:D5:F8:24:C1:9E:9F:95:02:05:BA:C9:F8:D8
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7Bhx-lQthNX4JMGen5UCBbrJ-Ng.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:440::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:5e:17:a8:70:f6:48:be:d5:f5:d8:aa:67:fa:e0:e3:19:47:
         57:4c:ca:9d:0a:1b:ce:af:a1:44:b4:52:be:f1:39:75:c1:4f:
         e4:70:f6:d9:44:9f:38:0b:7c:de:8d:8e:58:f5:b7:1c:95:6f:
         22:9a:46:97:c4:93:69:da:42:1a:fc:7b:3d:67:95:cc:e6:24:
         93:13:eb:9d:3c:dd:70:ba:e0:69:9b:45:24:9b:66:7c:df:86:
         93:c8:af:c5:09:12:64:28:7d:79:86:69:57:13:2e:ef:00:25:
         64:94:ab:2e:9d:af:46:39:27:32:84:04:a0:31:59:79:7e:bf:
         7b:ef:6a:34:0b:cf:e6:0b:83:5d:00:5b:7e:43:35:73:3d:0b:
         bb:79:2c:42:9e:0f:96:bd:b7:d5:51:49:fa:b0:73:11:a8:fe:
         60:c4:4f:92:c9:49:4a:70:df:b5:3c:9f:84:8b:37:7c:16:5d:
         4b:d2:a9:b7:c6:ad:ea:12:8f:f5:27:c5:24:65:c9:34:1c:42:
         f0:47:64:f8:f6:1f:0a:52:4e:df:3a:2f:41:dd:ea:3f:b6:a1:
         12:e0:9b:e8:0d:16:84:1a:10:6b:9d:0f:5b:ac:ca:f5:b4:f3:
         f6:47:4d:ab:7f:54:6d:7d:78:21:f7:b2:6b:9f:70:08:c3:a6:
         58:b3:48:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----