Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/L4_tSMK5k5kqqbJMWxeueMUP_mA.roa
File:                     L4_tSMK5k5kqqbJMWxeueMUP_mA.roa (raw, json)
Hash identifier:          9KNzXq4Jj1Ie5L/sgRkqWPLj6rBqACEfWOxUaBMMoF8=
Subject key identifier:   2F:8F:ED:48:C2:B9:93:99:2A:A9:B2:4C:5B:17:AE:78:C5:0F:FE:60
Certificate issuer:       /CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Certificate serial:       01942067D01B82281B14766E58825CD8D2E9
Authority key identifier: 50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/L4_tSMK5k5kqqbJMWxeueMUP_mA.roa
Signing time:             Wed 01 Jan 2025 05:47:41 +0000
ROA not before:           Wed 01 Jan 2025 05:47:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214334
IP address blocks:        2001:678:14c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:d0:1b:82:28:1b:14:76:6e:58:82:5c:d8:d2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
        Validity
            Not Before: Jan  1 05:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2f8fed48c2b993992aa9b24c5b17ae78c50ffe60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:d7:c4:2b:a9:ac:57:8e:50:2d:d3:62:09:
                    31:10:9a:be:99:88:72:ce:0d:f4:1f:ea:c3:d2:b2:
                    55:3d:e2:7f:63:25:55:0f:df:a3:cb:5d:49:2b:f3:
                    c5:e5:35:a0:4b:92:68:71:e3:2d:53:5c:40:bb:af:
                    34:87:58:f8:96:f3:63:93:87:d6:bb:e3:59:e6:50:
                    00:50:ac:d1:08:d3:81:b0:3a:fa:a8:c1:cd:3a:55:
                    7c:cd:1c:45:4d:ba:ab:f6:c9:f2:2d:6d:06:62:5e:
                    3f:30:31:25:d9:eb:64:ca:41:d9:61:83:91:90:c3:
                    6c:21:88:68:ce:0b:15:73:66:19:4d:37:ec:85:a8:
                    5e:3f:e7:26:01:36:25:2c:29:a8:08:7d:a5:d6:34:
                    d4:34:21:69:68:47:b1:fa:36:23:12:4e:5e:3b:5e:
                    fb:7f:25:ef:c7:5b:ef:67:f8:9d:f0:99:b0:b9:dc:
                    7b:41:53:08:6e:3f:66:26:4a:7d:43:a5:13:46:d5:
                    b5:36:91:3c:16:c6:61:bf:92:e3:36:2f:f5:cc:a5:
                    37:72:83:2b:71:7c:90:33:44:69:ab:72:a3:45:96:
                    b9:1a:ff:7b:42:41:e2:ae:87:6f:c1:94:87:9b:0e:
                    44:7a:6e:85:56:c6:e8:1e:e4:60:40:e4:9f:ae:cc:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8F:ED:48:C2:B9:93:99:2A:A9:B2:4C:5B:17:AE:78:C5:0F:FE:60
            X509v3 Authority Key Identifier:
                keyid:50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/L4_tSMK5k5kqqbJMWxeueMUP_mA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:14c::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:8a:e9:19:55:24:28:71:48:0a:84:4b:5b:4d:00:ee:61:49:
         36:ca:1f:cb:bd:30:a5:f6:ba:25:76:11:ab:cc:79:df:f7:8b:
         54:9f:d0:7d:50:96:f1:35:81:16:8c:21:08:51:73:bc:a3:18:
         2b:82:80:99:84:ad:12:18:9e:ea:87:68:cf:8e:a1:27:c8:e4:
         80:fc:ce:dc:af:9c:8f:67:b5:5a:92:e0:24:ff:fc:c5:09:58:
         88:48:74:07:55:b0:84:45:dd:07:dd:a6:57:8c:d9:01:0a:a2:
         0a:d9:67:21:89:49:e3:eb:a3:e4:aa:47:6c:6e:45:8e:37:ad:
         a7:6f:69:74:aa:dd:a6:6d:df:b8:ed:76:c0:bc:0c:7a:7f:81:
         25:cf:e4:ea:97:be:d4:3e:fa:27:2a:d3:75:b6:06:66:82:87:
         b6:79:c4:cc:a9:0e:04:90:c3:7f:c6:30:48:10:68:e2:f9:01:
         28:28:52:5e:9f:c5:58:a9:a8:52:87:53:77:a1:7c:43:c4:c7:
         78:f3:d3:63:ce:86:58:b3:28:ea:34:ea:9f:3b:09:ab:6a:55:
         2d:9f:ff:99:7a:7d:59:a8:38:8c:d5:aa:c8:b4:88:13:51:b7:
         36:7c:89:a9:6c:76:0d:10:43:b3:1f:7b:20:61:85:37:4a:6e:
         d9:6a:50:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----