Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/6ju2EuNQ-q9l9jWpaCX_yFCWFus.roa
File:                     6ju2EuNQ-q9l9jWpaCX_yFCWFus.roa (raw, json)
Hash identifier:          USfZBKBFKPqpoZ4/RnsmCkjU4lbPXZn+7Zop6eU1524=
Subject key identifier:   EA:3B:B6:12:E3:50:FA:AF:65:F6:35:A9:68:25:FF:C8:50:96:16:EB
Certificate issuer:       /CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Certificate serial:       019422203AF3CF45CB3407E93A9F62184A93
Authority key identifier: C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/6ju2EuNQ-q9l9jWpaCX_yFCWFus.roa
Signing time:             Wed 01 Jan 2025 13:48:44 +0000
ROA not before:           Wed 01 Jan 2025 13:48:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212170
IP address blocks:        2001:678:ba8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:3a:f3:cf:45:cb:34:07:e9:3a:9f:62:18:4a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
        Validity
            Not Before: Jan  1 13:48:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ea3bb612e350faaf65f635a96825ffc8509616eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e5:35:e3:51:e0:44:b9:a9:6e:a6:ae:06:96:
                    c1:74:53:10:ec:e1:b6:c3:f0:66:da:61:38:e4:cd:
                    ee:12:15:d6:af:50:34:72:cf:a5:8e:3a:ab:d5:56:
                    1c:b0:82:ec:74:54:11:23:40:0f:20:66:cf:f5:81:
                    2d:a7:d5:4f:53:ec:5b:a9:9b:df:56:a7:b2:6f:eb:
                    e4:c6:3f:ca:c7:3f:e6:87:f9:13:64:b0:39:e6:a5:
                    03:ae:7e:33:62:b0:80:7f:a0:06:79:76:2a:43:49:
                    be:4c:67:21:f2:b1:47:85:b5:48:ca:1a:f5:e6:ea:
                    6f:1d:8a:b8:ad:e4:9f:cb:e7:5e:75:9e:ae:61:bd:
                    d2:47:6e:35:6b:e6:e3:fe:68:6a:75:de:03:fe:f9:
                    aa:6d:83:95:2d:32:2b:64:ad:3c:4e:3b:2f:46:77:
                    0f:a4:90:0a:d6:4b:68:85:3a:a0:ad:48:c2:f7:2f:
                    be:04:cf:76:ef:75:f4:15:02:81:8c:db:cc:46:b4:
                    71:e0:45:b4:76:a6:67:17:b6:ae:1f:5b:0f:2c:46:
                    57:91:f7:d7:8a:ef:d7:c6:88:03:3c:48:d4:fb:69:
                    97:43:9f:f2:82:21:09:da:9e:ff:0f:e8:ba:60:61:
                    57:60:3c:e7:15:bc:11:a5:8f:f0:7c:af:6c:72:a0:
                    ea:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3B:B6:12:E3:50:FA:AF:65:F6:35:A9:68:25:FF:C8:50:96:16:EB
            X509v3 Authority Key Identifier:
                keyid:C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/6ju2EuNQ-q9l9jWpaCX_yFCWFus.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:ba8::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:7a:b5:e4:a4:e8:43:70:bd:72:b5:9a:0a:5d:54:b3:13:bb:
         24:71:06:c2:c5:3f:7b:fa:4d:ff:d0:16:24:4b:a4:eb:d3:96:
         8c:bd:93:ed:66:d6:32:c8:09:df:2a:f9:94:ed:bf:dc:74:cc:
         78:e2:64:6f:08:30:c8:be:b7:8a:c8:69:d6:63:bb:9b:96:1e:
         cb:53:1d:16:b4:2c:35:dd:c4:9b:db:cb:7e:c7:0b:c3:2d:87:
         97:08:05:b4:0b:3e:e5:60:59:87:a5:47:12:43:01:26:8a:e5:
         2d:85:e0:f8:3a:e2:82:a2:2a:84:e0:6d:8d:fe:df:ec:49:5d:
         8a:29:f6:69:b9:9a:37:68:ba:67:a9:21:d4:5f:ed:8c:03:0f:
         66:1d:0a:db:89:0a:a3:75:40:d7:fa:31:c9:e1:e9:a8:10:24:
         fd:5b:ce:cc:74:59:e1:90:09:62:76:07:ea:68:ed:fe:a2:42:
         99:e8:ad:f4:07:6a:dd:83:41:6e:4c:ae:08:77:e7:45:c9:7a:
         76:73:30:5f:bc:62:43:7f:04:eb:40:35:fc:82:6e:11:19:d9:
         5b:e2:85:8d:f9:08:10:45:08:44:58:0c:51:e8:92:f6:4f:1a:
         3c:aa:96:d7:c6:4e:f5:2f:6d:36:f6:fd:e8:38:02:63:5e:4b:
         d5:2b:3c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----