Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/etZrMX1a4ijFCpjueGjWdY_PXRM.roa
File:                     etZrMX1a4ijFCpjueGjWdY_PXRM.roa (raw, json)
Hash identifier:          WZQEq3STvcKZBUxfYdbsziqCcSrwNKEQLlh4k7C0xt0=
Subject key identifier:   7A:D6:6B:31:7D:5A:E2:28:C5:0A:98:EE:78:68:D6:75:8F:CF:5D:13
Certificate issuer:       /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial:       0193BB3301A0BA9901407BBCDE23E372B4B4
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/etZrMX1a4ijFCpjueGjWdY_PXRM.roa
Signing time:             Thu 12 Dec 2024 14:08:22 +0000
ROA not before:           Thu 12 Dec 2024 14:08:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     21416
IP address blocks:        2a0e:eac0:1000::/48 maxlen: 48
                          2a0e:eac0:1001::/48 maxlen: 48
                          2a0e:eac0:1002::/48 maxlen: 48
                          2a0e:eac0:1104::/48 maxlen: 48
                          2a0e:eac0:1105::/48 maxlen: 48
                          2a0e:eac0:1106::/48 maxlen: 48
                          2a0e:eac0:1107::/48 maxlen: 48
                          2a0e:eac0:1108::/48 maxlen: 48
                          2a0e:eac0:1109::/48 maxlen: 48
                          2a0e:eac0:1110::/48 maxlen: 48
                          2a0e:eac0:1111::/48 maxlen: 48
                          2a0e:eac0:1112::/48 maxlen: 48
                          2a0e:eac0:1113::/48 maxlen: 48
                          2a0e:eac0:1115::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:bb:33:01:a0:ba:99:01:40:7b:bc:de:23:e3:72:b4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
        Validity
            Not Before: Dec 12 14:08:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7ad66b317d5ae228c50a98ee7868d6758fcf5d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:56:3f:78:7a:51:a1:c4:92:3d:e6:4b:87:56:
                    b5:63:c8:e3:8c:3f:bb:d3:59:d6:01:71:10:93:d9:
                    fb:9f:03:83:52:b8:22:49:3a:4e:cc:1c:5e:b9:58:
                    d5:ac:cf:ba:79:5d:5e:72:fa:99:ef:9f:df:6c:48:
                    ef:17:fb:53:0b:23:ca:6b:f4:59:83:66:ea:51:19:
                    e0:d0:dd:08:63:56:1f:f1:c8:4e:14:8b:0e:d0:e4:
                    f3:e5:98:a1:db:78:63:d3:25:36:66:c3:16:9b:95:
                    1a:72:50:09:b9:01:55:b6:0d:97:32:30:7f:9e:ac:
                    cc:93:38:ec:c6:7d:3e:94:f8:10:42:9e:d1:10:59:
                    62:ee:4b:c3:43:24:e8:43:7a:10:0e:bc:68:9e:26:
                    d9:00:79:25:a9:11:eb:13:47:49:ea:66:a8:b4:62:
                    c9:51:d1:2e:72:c3:ec:00:ad:6d:f1:06:cb:5d:ef:
                    60:39:2f:2d:62:a8:6d:89:78:33:65:b3:71:94:6f:
                    c7:bd:c7:ec:06:86:ac:17:1c:d4:b7:bc:f1:3f:43:
                    5b:0f:77:c8:5f:18:62:e8:8b:06:ea:de:de:82:ec:
                    2f:64:03:04:a1:d7:32:bd:38:29:fa:f1:4e:95:56:
                    76:e5:31:1a:98:19:11:cd:19:6b:29:2e:57:26:d7:
                    c5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D6:6B:31:7D:5A:E2:28:C5:0A:98:EE:78:68:D6:75:8F:CF:5D:13
            X509v3 Authority Key Identifier:
                keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/etZrMX1a4ijFCpjueGjWdY_PXRM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:eac0:1000::-2a0e:eac0:1002:ffff:ffff:ffff:ffff:ffff
                  2a0e:eac0:1104::-2a0e:eac0:1109:ffff:ffff:ffff:ffff:ffff
                  2a0e:eac0:1110::/46
                  2a0e:eac0:1115::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:da:ae:1d:21:66:59:9a:c6:ac:a4:d3:03:80:6c:5d:04:d4:
         5c:93:b9:68:89:ac:d2:e6:75:5f:fc:61:1a:56:52:be:7b:c1:
         12:a5:ce:b5:2d:64:f0:f1:f6:08:db:ad:19:f0:1e:0f:5f:0b:
         4f:07:97:77:4e:f3:3f:f3:26:34:d4:19:d6:96:f1:15:e4:b4:
         5b:44:8f:d6:e9:91:8d:8c:1c:69:b8:18:5d:ae:8e:32:8d:36:
         d7:6d:3f:54:8a:b7:ea:77:e4:d5:0b:f1:85:4e:8a:b1:87:9f:
         9b:d0:40:e8:4b:48:58:40:24:56:6d:f4:27:50:ef:1e:06:07:
         61:9d:7e:e1:b4:9e:4e:83:83:a9:6d:43:77:f2:32:1c:17:6d:
         75:bd:44:23:da:33:1c:ea:3f:f8:29:cb:34:82:66:95:a5:10:
         90:74:b2:9b:74:43:a8:c2:f9:98:a7:49:87:35:4c:3a:eb:8e:
         42:eb:25:ad:38:39:87:b0:2a:16:6a:78:8d:5d:fe:60:d1:ed:
         66:f5:fe:dc:0b:ff:5a:57:36:63:bb:8e:5c:74:3d:0d:3d:4d:
         fc:81:1f:ca:37:fb:b7:95:8c:9c:58:89:66:20:64:23:63:4d:
         b2:ad:1b:8d:07:53:7f:cb:92:b2:b1:b5:0f:10:f7:c4:ed:c0:
         99:fa:80:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----