Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/BYjgxdL3ddXOTmm0stHvKsFPd4k.roa
File:                     BYjgxdL3ddXOTmm0stHvKsFPd4k.roa (raw, json)
Hash identifier:          4MJkG6H0wdaazlb0EpHV2G+H4iKJ78151mJpo0/ddyA=
Subject key identifier:   05:88:E0:C5:D2:F7:75:D5:CE:4E:69:B4:B2:D1:EF:2A:C1:4F:77:89
Certificate issuer:       /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial:       01962946103F12ABF24415460FB8F2FB2BDB
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/BYjgxdL3ddXOTmm0stHvKsFPd4k.roa
Signing time:             Sat 12 Apr 2025 09:12:59 +0000
ROA not before:           Sat 12 Apr 2025 09:12:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205771
IP address blocks:        2a13:740::/32 maxlen: 32
                          2a13:741::/32 maxlen: 32
                          2a13:742::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:29:46:10:3f:12:ab:f2:44:15:46:0f:b8:f2:fb:2b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
        Validity
            Not Before: Apr 12 09:12:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0588e0c5d2f775d5ce4e69b4b2d1ef2ac14f7789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:11:22:11:34:cc:d1:1a:3c:74:8b:35:14:50:
                    31:13:57:de:66:59:42:a1:91:4c:3a:5d:72:d5:46:
                    f8:f6:b9:cc:bb:75:14:3e:f8:7c:f1:e2:b6:2d:36:
                    db:6a:f1:10:d2:04:6c:42:31:1e:a9:de:d4:6f:2d:
                    4e:03:dd:4c:ce:8d:de:ca:47:b3:0c:0b:3e:c9:8e:
                    9b:d0:08:9c:33:67:6f:96:5b:f4:67:be:ec:ef:a8:
                    71:a6:73:41:bc:c6:b6:cc:44:0d:ed:34:b2:35:e8:
                    0e:af:83:25:9a:7a:70:c4:6b:d6:61:09:1f:6a:20:
                    29:33:79:01:e5:09:61:c8:ad:13:8d:ad:25:0b:af:
                    9d:b9:fb:c4:92:3a:0e:89:c9:3b:77:85:e3:5b:cf:
                    69:1d:d9:c1:3a:83:ff:21:a9:04:1f:6f:95:d1:a9:
                    2c:03:2a:5e:b0:dd:82:d6:e1:de:93:4a:03:27:f1:
                    24:2d:44:34:fa:a2:f5:e1:a9:3f:d0:50:8d:93:af:
                    15:d2:55:70:61:87:ae:88:bf:89:e6:b7:e0:43:a7:
                    57:b5:45:15:03:4f:35:ac:90:bb:b0:56:2a:e9:36:
                    e1:40:2b:93:78:bf:88:ad:92:e0:28:ce:9d:66:d7:
                    21:56:b0:d0:19:71:18:27:7c:12:f8:5b:36:fc:f1:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:88:E0:C5:D2:F7:75:D5:CE:4E:69:B4:B2:D1:EF:2A:C1:4F:77:89
            X509v3 Authority Key Identifier:
                keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/BYjgxdL3ddXOTmm0stHvKsFPd4k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:740::-2a13:742:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         30:34:63:3e:78:1d:68:2c:7c:67:79:7d:3b:3b:02:99:55:f7:
         f3:ac:6d:59:61:2b:d0:1e:1b:84:58:98:27:24:ac:88:98:0b:
         30:95:b3:42:f5:9f:6b:68:b2:a3:53:63:88:7f:d1:61:6d:e8:
         18:70:72:ef:a5:45:b4:1c:79:04:2e:37:08:75:ed:bf:72:a1:
         d0:da:39:cd:54:80:f6:be:c7:5a:32:f8:e8:1b:d6:d8:10:bd:
         98:7c:cd:8a:03:ad:de:66:b7:80:f5:20:bf:43:3c:08:5e:47:
         68:03:14:65:fa:f2:1a:da:9a:ba:e2:e6:c3:89:30:fe:95:09:
         d0:e2:50:24:12:70:3b:62:08:24:eb:16:23:7e:e3:97:3e:f8:
         2e:9e:fd:7d:3c:cd:cd:5e:f9:a5:b2:26:ae:35:92:de:ac:2f:
         18:23:ab:5b:a2:dc:39:23:fc:36:4b:12:1b:3a:6f:5f:38:eb:
         71:e1:da:9b:1f:64:28:a8:77:e7:22:eb:ff:d2:c4:00:ba:ed:
         94:e8:84:22:28:0c:b6:80:4b:fe:a0:68:47:12:70:c2:23:f8:
         33:0a:fc:8d:77:e0:67:f5:a1:31:73:62:e1:89:6e:60:eb:76:
         6e:23:85:d9:5c:32:7c:a3:75:39:9d:49:0e:4f:0b:90:1c:03:
         0a:05:aa:cc
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAZYpRhA/EqvyRBVGD7jy+yvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxOWVkZGIzNjY5MTllZDc1ZjQ2NjBjZmIwZTBiNmU1ZmM0
MDE2MTMwHhcNMjUwNDEyMDkxMjU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTg4ZTBjNWQyZjc3NWQ1Y2U0ZTY5YjRiMmQxZWYyYWMxNGY3Nzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xEiETTM0Ro8dIs1FFAxE1feZllC
oZFMOl1y1Ub49rnMu3UUPvh88eK2LTbbavEQ0gRsQjEeqd7Uby1OA91Mzo3eykez
DAs+yY6b0AicM2dvllv0Z77s76hxpnNBvMa2zEQN7TSyNegOr4MlmnpwxGvWYQkf
aiApM3kB5QlhyK0Tja0lC6+dufvEkjoOick7d4XjW89pHdnBOoP/IakEH2+V0aks
AypesN2C1uHek0oDJ/EkLUQ0+qL14ak/0FCNk68V0lVwYYeuiL+J5rfgQ6dXtUUV
A081rJC7sFYq6TbhQCuTeL+IrZLgKM6dZtchVrDQGXEYJ3wS+Fs2/PGusQIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFAWI4MXS93XVzk5ptLLR7yrBT3eJMB8GA1UdIwQY
MBaAFDGe3bNmkZ7XX0Zgz7DgtuX8QBYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYt
ZDQ3YmQ3ZDAxOTJmLzEvQllqZ3hkTDNkZFhPVG1tMHN0SHZLc0ZQZDRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYtZDQ3YmQ3ZDAxOTJm
LzEvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQYqEwdA
AwUAKhMHQjANBgkqhkiG9w0BAQsFAAOCAQEAMDRjPngdaCx8Z3l9OzsCmVX386xt
WWEr0B4bhFiYJySsiJgLMJWzQvWfa2iyo1NjiH/RYW3oGHBy76VFtBx5BC43CHXt
v3Kh0No5zVSA9r7HWjL46BvW2BC9mHzNigOt3ma3gPUgv0M8CF5HaAMUZfryGtqa
uuLmw4kw/pUJ0OJQJBJwO2IIJOsWI37jlz74Lp79fTzNzV75pbImrjWS3qwvGCOr
W6LcOSP8NksSGzpvXzjrceHamx9kKKh35yLr/9LEALrtlOiEIigMtoBL/qBoRxJw
wiP4Mwr8jXfgZ/WhMXNi4YluYOt2biOF2VwyfKN1OZ1JDk8LkBwDCgWqzA==
-----END CERTIFICATE-----