Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/grXRQpT1aZeaC-n0N849AfZZ_V4.roa
File:                     grXRQpT1aZeaC-n0N849AfZZ_V4.roa (raw, json)
Hash identifier:          x7JYnVR7QlEIld9EwbA1Mq0qnt4Qvkq7/cYHdkassRc=
Subject key identifier:   82:B5:D1:42:94:F5:69:97:9A:0B:E9:F4:37:CE:3D:01:F6:59:FD:5E
Certificate issuer:       /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial:       01942143BD52CC7399FA52D86168E4CDB079
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/grXRQpT1aZeaC-n0N849AfZZ_V4.roa
Signing time:             Wed 01 Jan 2025 09:47:54 +0000
ROA not before:           Wed 01 Jan 2025 09:47:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207563
IP address blocks:        2001:678:be8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:bd:52:cc:73:99:fa:52:d8:61:68:e4:cd:b0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
        Validity
            Not Before: Jan  1 09:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=82b5d14294f569979a0be9f437ce3d01f659fd5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:87:10:bd:88:af:12:63:a1:e2:05:ee:8f:
                    10:b9:e3:72:1d:8d:49:f2:d3:e3:14:7c:27:68:db:
                    ed:44:81:7d:0e:df:5b:ce:f9:b1:56:7f:e4:ea:b6:
                    e9:15:72:78:fa:a5:80:68:b2:09:72:89:36:90:c9:
                    d5:d0:65:f7:a4:85:8d:a7:1b:24:b5:32:fc:73:3d:
                    76:5e:ff:97:94:6f:9e:45:ce:d9:41:76:bc:a2:8f:
                    49:67:fe:27:88:75:b4:01:21:24:07:fd:67:a3:c9:
                    44:b8:58:a5:61:b2:79:ce:87:90:b2:55:0b:e8:ca:
                    59:48:6a:09:b8:5a:f3:18:76:dd:08:b7:da:51:9d:
                    8c:f3:a7:ea:80:e8:65:35:44:c5:f3:60:c2:f1:df:
                    16:87:a8:c4:d4:6e:e9:0a:c8:03:01:8b:c9:36:55:
                    bb:99:58:0f:8a:40:5a:d0:65:25:4e:b6:33:f8:f9:
                    7a:f5:e7:d3:f8:ec:36:a6:80:01:4a:c4:ce:be:29:
                    49:00:c6:eb:d6:c0:d5:57:24:cf:48:47:7b:17:df:
                    3c:47:d7:ab:3a:4e:ef:5e:64:f5:cf:cb:d4:48:33:
                    41:fb:a2:5a:a4:8b:c6:4d:0d:4c:b1:07:2f:43:7e:
                    4b:c5:47:42:59:2f:1d:53:ba:20:71:d9:06:92:c8:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B5:D1:42:94:F5:69:97:9A:0B:E9:F4:37:CE:3D:01:F6:59:FD:5E
            X509v3 Authority Key Identifier:
                keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/grXRQpT1aZeaC-n0N849AfZZ_V4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:be8::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:97:51:47:04:33:9c:56:e8:94:a4:13:cf:49:b9:c4:d5:ad:
         1b:0a:2e:fe:a8:27:67:4c:2a:32:78:b6:71:79:80:16:94:f8:
         c3:03:49:dc:32:c4:d6:7e:52:36:fb:6d:55:75:9b:9a:0f:af:
         84:ed:62:df:47:06:1c:c4:6a:47:31:21:a3:ed:fe:87:b9:33:
         99:34:7b:d0:5d:80:6c:20:20:e2:72:cb:dc:da:e1:aa:9a:39:
         36:b8:cd:e1:79:c5:fe:05:df:bb:0a:a4:5e:6d:95:b7:6e:9c:
         59:15:07:d7:f0:c7:0d:f2:1e:41:e3:69:ee:a2:b6:77:6b:06:
         80:ba:d8:9d:42:dc:75:07:fb:7f:a3:d2:65:f8:c6:cf:19:c4:
         0e:f4:8e:e4:fb:1d:00:88:81:5b:0c:82:ab:0f:4b:ae:1f:a2:
         1a:e8:01:57:e8:30:b7:78:a8:d0:cc:3f:65:85:07:da:4f:37:
         1a:f4:ce:71:80:13:69:5b:85:d2:0f:3b:6b:25:90:cc:86:a6:
         5a:e6:36:dc:f0:62:f7:39:63:bc:e5:48:28:30:c7:8b:d3:2f:
         cd:4a:2e:4c:cc:b0:cc:af:44:5b:8c:53:1e:a7:30:60:74:6a:
         0b:52:1a:62:d6:f2:04:56:ae:57:cb:59:57:8d:1d:55:ee:fa:
         79:f8:35:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----