Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/vP5uRCtVJRUJyzhFaWsuhTzkTw8.roa
File:                     vP5uRCtVJRUJyzhFaWsuhTzkTw8.roa (raw, json)
Hash identifier:          y1OFWyB3EPXzoJcEAkwbjykFdh6ALTnHBPCo+2KwzSM=
Subject key identifier:   BC:FE:6E:44:2B:55:25:15:09:CB:38:45:69:6B:2E:85:3C:E4:4F:0F
Certificate issuer:       /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial:       01960041BB03B2C0DBE0294E5A1B5548AB0D
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/vP5uRCtVJRUJyzhFaWsuhTzkTw8.roa
Signing time:             Fri 04 Apr 2025 10:03:49 +0000
ROA not before:           Fri 04 Apr 2025 10:03:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     13445
IP address blocks:        2a05:4200:7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:00:41:bb:03:b2:c0:db:e0:29:4e:5a:1b:55:48:ab:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
        Validity
            Not Before: Apr  4 10:03:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bcfe6e442b55251509cb3845696b2e853ce44f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c3:b3:8e:9f:c8:f4:66:19:8c:b9:53:c6:81:
                    0e:58:56:96:c3:dc:28:9b:e8:f3:5c:e9:70:d4:6b:
                    cf:f4:53:10:2d:4f:cf:6a:aa:0a:f1:9b:ca:80:ca:
                    a7:01:be:6a:31:60:0f:35:9c:6f:30:42:f0:f0:72:
                    0e:72:91:34:be:9f:c6:5b:c6:46:73:3c:b3:23:ea:
                    55:b9:75:6b:aa:05:20:73:61:c1:19:28:de:55:0e:
                    e5:d0:df:01:47:a8:70:6c:00:2f:e4:57:88:63:93:
                    ef:8d:ab:a9:4e:85:4c:c5:90:df:c2:c0:dd:d8:9f:
                    d1:1a:9f:28:69:61:42:b7:0e:e6:da:74:04:cb:c9:
                    88:e7:4c:3c:19:0a:b4:40:79:79:86:2b:37:d9:81:
                    db:89:12:83:45:59:08:ee:2e:8f:52:e7:cf:e7:05:
                    a7:0e:75:df:61:b5:7e:84:91:0a:eb:6c:2b:dd:a7:
                    0a:38:4b:4d:d3:01:cd:e1:35:e6:f6:0e:22:6b:7f:
                    36:4f:4a:4d:a7:fe:4c:85:49:d6:bf:35:83:f6:0d:
                    95:1d:4b:2b:eb:ff:f9:b1:2c:53:33:2b:06:88:f8:
                    50:1a:00:39:45:48:06:e0:e1:38:75:87:77:3f:c0:
                    b1:17:06:d7:c7:a3:b2:f2:d5:b0:10:f5:9c:cb:7b:
                    a1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FE:6E:44:2B:55:25:15:09:CB:38:45:69:6B:2E:85:3C:E4:4F:0F
            X509v3 Authority Key Identifier:
                keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/vP5uRCtVJRUJyzhFaWsuhTzkTw8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4200:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:a9:b6:7a:66:a0:d4:6b:d1:b0:df:04:77:f7:c3:6d:42:13:
         96:d5:8f:8f:96:8a:c0:7a:a4:1d:32:0c:4c:10:96:7f:30:c3:
         97:5c:a7:8f:d6:1f:89:a5:b7:b0:de:62:8e:0a:35:ab:3e:76:
         2d:79:17:14:9e:b3:d5:56:33:43:25:a2:66:54:d5:8e:c7:b7:
         5d:e0:75:c4:ef:64:c4:7e:f9:1a:c2:79:26:e1:dc:21:ac:53:
         4d:00:ab:ed:c6:13:5b:29:79:f8:77:3b:7b:ad:36:f0:ad:ce:
         1b:3b:75:65:06:cd:8b:ce:3d:f0:69:49:98:3e:54:80:69:bd:
         2d:36:72:33:e2:ea:33:62:54:ae:f5:ee:6d:b0:8b:2a:3b:e2:
         5c:e8:9a:0d:61:69:30:38:0b:ff:5c:49:e2:93:cc:64:51:83:
         15:0a:44:1d:a6:4d:12:d7:50:8a:c9:97:e5:4c:88:0a:6a:74:
         d7:25:78:aa:57:1a:92:15:7e:96:5a:44:14:a4:48:79:34:c9:
         27:e0:79:20:47:82:93:27:6d:7b:3f:36:e3:7d:4b:cc:8c:ac:
         db:08:fc:8c:0a:6a:50:52:68:fd:ae:8a:3c:ed:d9:74:29:68:
         6d:ea:98:79:65:53:d7:f9:be:a0:cb:19:83:b1:6f:19:de:ee:
         31:92:bf:ad
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZYAQbsDssDb4ClOWhtVSKsNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MDU2ZGFiYjlhNDcwMTBjZDFiNGVmMjc0YmMzZDJmNGE1
OWU5M2EwHhcNMjUwNDA0MTAwMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2ZlNmU0NDJiNTUyNTE1MDljYjM4NDU2OTZiMmU4NTNjZTQ0ZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsOzjp/I9GYZjLlTxoEOWFaWw9wo
m+jzXOlw1GvP9FMQLU/PaqoK8ZvKgMqnAb5qMWAPNZxvMELw8HIOcpE0vp/GW8ZG
czyzI+pVuXVrqgUgc2HBGSjeVQ7l0N8BR6hwbAAv5FeIY5PvjaupToVMxZDfwsDd
2J/RGp8oaWFCtw7m2nQEy8mI50w8GQq0QHl5his32YHbiRKDRVkI7i6PUufP5wWn
DnXfYbV+hJEK62wr3acKOEtN0wHN4TXm9g4ia382T0pNp/5MhUnWvzWD9g2VHUsr
6//5sSxTMysGiPhQGgA5RUgG4OE4dYd3P8CxFwbXx6Oy8tWwEPWcy3uhiwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLz+bkQrVSUVCcs4RWlrLoU85E8PMB8GA1UdIwQY
MBaAFPUFbau5pHAQzRtO8nS8PS9KWek6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYWM0NjMtODY4Yy00MTE1LWI1ODMt
ZGUwZWM3NmE0NjcyLzEvdlA1dVJDdFZKUlVKeXpoRmFXc3VoVHprVHc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wYWM0NjMtODY4Yy00MTE1LWI1ODMtZGUwZWM3NmE0Njcy
LzEvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgVCAAAH
MA0GCSqGSIb3DQEBCwUAA4IBAQB2qbZ6ZqDUa9Gw3wR398NtQhOW1Y+PlorAeqQd
MgxMEJZ/MMOXXKeP1h+Jpbew3mKOCjWrPnYteRcUnrPVVjNDJaJmVNWOx7dd4HXE
72TEfvkawnkm4dwhrFNNAKvtxhNbKXn4dzt7rTbwrc4bO3VlBs2Lzj3waUmYPlSA
ab0tNnIz4uozYlSu9e5tsIsqO+Jc6JoNYWkwOAv/XEnik8xkUYMVCkQdpk0S11CK
yZflTIgKanTXJXiqVxqSFX6WWkQUpEh5NMkn4HkgR4KTJ217PzbjfUvMjKzbCPyM
CmpQUmj9roo87dl0KWht6ph5ZVPX+b6gyxmDsW8Z3u4xkr+t
-----END CERTIFICATE-----