Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/oD9YcCZpBYp_-FhwLDbxFC74kW4.roa
File:                     oD9YcCZpBYp_-FhwLDbxFC74kW4.roa (raw, json)
Hash identifier:          0hjvwgEefQo/mH7kLhfXI0F3J9LkGi+eLSZSoPVImwM=
Subject key identifier:   A0:3F:58:70:26:69:05:8A:7F:F8:58:70:2C:36:F1:14:2E:F8:91:6E
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       01939304DE5633B9FE6C78F45F9D8E05F9D1
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/oD9YcCZpBYp_-FhwLDbxFC74kW4.roa
Signing time:             Wed 04 Dec 2024 18:53:10 +0000
ROA not before:           Wed 04 Dec 2024 18:53:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209641
IP address blocks:        2a0e:5385::/32 maxlen: 32
                          2a0e:5387::/32 maxlen: 32
                          2a0e:5641::/32 maxlen: 32
                          2a0e:5643::/32 maxlen: 32
                          2a0e:5645::/32 maxlen: 32
                          2a0e:5647::/32 maxlen: 32
                          2a0e:5900::/32 maxlen: 32
                          2a0e:5905::/32 maxlen: 32
                          2a0e:5906::/32 maxlen: 32
                          2a0e:8082::/32 maxlen: 32
                          2a0e:8084::/32 maxlen: 32
                          2a0e:8087::/32 maxlen: 32
                          2a0e:ccc0::/32 maxlen: 32
                          2a0e:ccc4::/32 maxlen: 32
                          2a0f:6fc1::/32 maxlen: 32
                          2a0f:6fc3::/32 maxlen: 32
                          2a0f:6fc7::/32 maxlen: 32
                          2a0f:b4c1::/32 maxlen: 32
                          2a0f:b4c2::/32 maxlen: 32
                          2a0f:b4c6::/32 maxlen: 32
                          2a0f:c081::/32 maxlen: 32
                          2a0f:c085::/32 maxlen: 32
                          2a0f:c087::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:93:04:de:56:33:b9:fe:6c:78:f4:5f:9d:8e:05:f9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Dec  4 18:53:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a03f58702669058a7ff858702c36f1142ef8916e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:96:4a:56:ca:a6:ff:0f:1d:98:95:78:ac:1c:
                    85:53:8e:cb:1b:96:e1:37:68:ff:32:03:79:da:00:
                    1a:f8:97:ab:f3:e2:af:a9:29:81:97:c3:29:4d:50:
                    b9:a4:8a:8e:74:dd:e1:f8:e5:8b:6b:da:60:c1:0c:
                    af:de:d5:e3:f4:97:e6:fd:34:df:99:7b:5d:e7:f1:
                    63:eb:fc:9b:37:7c:0d:88:b4:44:41:d7:36:0d:27:
                    6e:20:c8:eb:61:55:97:d7:a8:df:35:bc:a5:1c:87:
                    39:11:54:91:ef:8f:6d:c5:b3:89:84:c4:81:55:8c:
                    4b:60:12:77:c7:e3:1e:64:f7:9c:74:d4:27:2b:23:
                    d7:b8:e7:da:d9:90:ae:65:7e:2b:53:13:f7:cd:c1:
                    3f:02:ba:68:29:dd:e5:ec:fb:13:78:a4:aa:45:cd:
                    56:26:2a:11:ab:ab:22:9a:78:e9:7a:46:c5:af:fb:
                    35:72:22:3d:5d:0b:d4:f9:99:d3:aa:27:75:c9:64:
                    08:9e:82:37:7e:d9:5d:5c:4e:95:59:d3:03:c2:2b:
                    4a:8e:d2:e8:e9:3f:bf:1c:80:42:19:18:ca:a1:a6:
                    5a:51:8b:7e:47:02:28:85:2a:aa:0b:63:ba:51:32:
                    62:eb:b2:3d:8d:30:12:14:a9:89:3b:10:59:67:2b:
                    25:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3F:58:70:26:69:05:8A:7F:F8:58:70:2C:36:F1:14:2E:F8:91:6E
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/oD9YcCZpBYp_-FhwLDbxFC74kW4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:5385::/32
                  2a0e:5387::/32
                  2a0e:5641::/32
                  2a0e:5643::/32
                  2a0e:5645::/32
                  2a0e:5647::/32
                  2a0e:5900::/32
                  2a0e:5905::-2a0e:5906:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:8082::/32
                  2a0e:8084::/32
                  2a0e:8087::/32
                  2a0e:ccc0::/32
                  2a0e:ccc4::/32
                  2a0f:6fc1::/32
                  2a0f:6fc3::/32
                  2a0f:6fc7::/32
                  2a0f:b4c1::-2a0f:b4c2:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:b4c6::/32
                  2a0f:c081::/32
                  2a0f:c085::/32
                  2a0f:c087::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:aa:24:da:de:80:ff:ff:7d:39:ff:66:4a:e8:28:6e:8f:0f:
         1e:8a:b8:34:ee:a0:48:e1:1f:3d:22:26:87:4b:5c:b7:c0:73:
         fd:f5:ec:a3:66:1a:38:29:11:ed:0c:3e:a5:bc:be:0a:0c:6c:
         17:33:ff:2f:38:32:26:06:28:7e:5d:bf:2a:73:92:b7:f0:5d:
         8e:99:50:90:17:c2:09:a2:70:63:5e:e5:46:e9:b2:ca:55:10:
         c3:35:9a:f2:1e:d2:b9:4f:6e:e6:8c:79:ec:56:0f:1e:da:27:
         c1:a2:53:94:91:cf:42:a2:de:12:c7:61:54:b6:4e:28:30:cc:
         df:09:dd:d5:e3:82:2a:e5:8c:2d:2e:26:43:24:07:b7:01:2d:
         66:40:4e:a6:01:1b:92:0f:72:06:a3:91:99:ed:49:f6:1c:30:
         a2:e3:46:0e:0c:d2:fa:f0:d1:85:1e:75:0f:00:a6:8d:f0:1f:
         74:68:3d:9e:66:5e:91:bf:ef:ed:3f:5f:eb:c3:ae:bb:6d:cf:
         37:f1:e2:1e:d0:3d:46:6c:5e:8d:bf:a4:91:03:1e:a5:52:50:
         c9:3f:48:02:1b:2e:d6:4c:af:8b:10:3b:73:1c:1e:77:d2:7e:
         b3:87:a6:aa:a8:e7:4e:ac:05:5e:49:78:f8:ee:92:23:9a:c8:
         16:2d:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----