Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/3VrPGjUQ3Y-l-f7OeEozbIvcsLg.roa
File:                     3VrPGjUQ3Y-l-f7OeEozbIvcsLg.roa (raw, json)
Hash identifier:          bLeP0OV6qVbEnqwfvFZWrAEprQe0NgLJqVsqQYDqQEk=
Subject key identifier:   DD:5A:CF:1A:35:10:DD:8F:A5:F9:FE:CE:78:4A:33:6C:8B:DC:B0:B8
Certificate issuer:       /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial:       0194464A8F846426243F260F777B0368D421
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/3VrPGjUQ3Y-l-f7OeEozbIvcsLg.roa
Signing time:             Wed 08 Jan 2025 14:21:19 +0000
ROA not before:           Wed 08 Jan 2025 14:21:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12257
IP address blocks:        2a01:6f40:f100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:46:4a:8f:84:64:26:24:3f:26:0f:77:7b:03:68:d4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
        Validity
            Not Before: Jan  8 14:21:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dd5acf1a3510dd8fa5f9fece784a336c8bdcb0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:a9:80:8a:4f:28:d1:13:79:ff:f0:e0:c6:
                    04:d6:0c:93:31:10:99:de:ea:9b:c1:ea:cf:2b:38:
                    68:34:12:b1:84:33:db:11:e9:48:34:23:61:6d:cd:
                    93:0c:b7:fe:0e:cc:97:e7:f8:8a:fb:54:a5:2c:d0:
                    34:03:13:58:22:5b:75:26:b7:16:aa:34:5c:84:d1:
                    61:5b:dd:49:c7:ff:2d:1f:1a:5f:ee:51:6c:ed:b0:
                    bb:72:a0:d5:01:7d:88:fe:bb:f3:ea:a0:4f:de:5a:
                    85:fa:c4:32:99:9a:4d:db:d4:2a:64:ea:b0:44:2e:
                    14:bf:a4:a2:ef:83:1d:2b:dd:dc:62:c2:96:ed:c4:
                    a9:66:0e:f1:ac:f0:73:e7:68:e2:28:14:6d:0d:6e:
                    29:5f:96:41:7a:0d:db:50:94:61:aa:63:31:0a:a9:
                    82:8d:f3:be:e8:7b:ac:43:e1:d9:13:3d:c2:1c:86:
                    9d:77:62:ae:fe:ab:d4:1b:af:d9:db:16:77:32:cf:
                    f2:48:4c:6e:87:5d:89:16:e0:31:1b:d1:ef:6f:a0:
                    ce:79:35:86:45:13:a4:f5:d7:c7:31:ca:f8:03:62:
                    99:3e:da:05:18:1e:f7:54:f4:43:0f:d6:f7:75:22:
                    73:66:a4:c0:9b:47:22:0d:55:0d:66:b4:ea:f3:5a:
                    f5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5A:CF:1A:35:10:DD:8F:A5:F9:FE:CE:78:4A:33:6C:8B:DC:B0:B8
            X509v3 Authority Key Identifier:
                keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/3VrPGjUQ3Y-l-f7OeEozbIvcsLg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:6f40:f100::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:60:13:3b:2e:99:85:b1:3e:13:1a:98:06:19:57:8e:aa:5b:
         7a:a8:b5:99:8e:a8:90:17:c7:8f:c4:cd:57:ba:f7:b3:da:b4:
         b8:db:a5:9a:83:f4:5c:a9:70:fd:8a:e5:4b:09:5d:9c:81:10:
         69:dc:b9:7b:a4:e5:d6:c7:66:fe:f1:71:92:96:58:e7:26:b5:
         54:d5:ea:a0:b2:7c:f0:55:49:9d:dd:6d:6a:7a:62:6c:f3:c2:
         f9:c7:b4:02:e3:d5:bb:a1:a1:62:23:29:74:de:6b:18:cd:6a:
         30:af:67:3a:07:b7:a1:99:08:3a:4f:f4:f7:bc:b5:64:e6:bf:
         f1:cc:ee:f3:8d:cb:85:f8:9f:54:cd:e4:37:d8:99:f0:11:3a:
         d6:ed:4c:9d:91:a3:f6:82:05:27:f2:19:c8:11:32:87:ce:a7:
         c0:42:f7:bc:c2:db:7d:a0:a8:b0:88:85:27:c7:b4:fc:fb:7c:
         53:c4:42:50:a3:dd:33:92:c5:1f:c3:61:ca:3c:e7:bc:02:a4:
         35:a2:60:84:be:70:7b:a6:76:67:54:15:57:bb:08:cc:5f:c3:
         0e:7c:af:9a:b0:56:c1:92:f5:12:40:6e:21:fe:25:55:70:4b:
         11:af:75:77:17:5d:c0:6f:92:c6:b5:87:71:1f:f0:de:7d:22:
         31:82:e8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----