Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/ESyujln-2nVv5qE0Ocb3rFFYwrc.roa
File:                     ESyujln-2nVv5qE0Ocb3rFFYwrc.roa (raw, json)
Hash identifier:          9N7X4vItU38NZABFQIUssF/ZL+oPI7YggVHGdRqlqfw=
Subject key identifier:   11:2C:AE:8E:59:FE:DA:75:6F:E6:A1:34:39:C6:F7:AC:51:58:C2:B7
Certificate issuer:       /CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
Certificate serial:       019424B3D2AD557FFEF86C3509093E483545
Authority key identifier: BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/ESyujln-2nVv5qE0Ocb3rFFYwrc.roa
Signing time:             Thu 02 Jan 2025 01:49:12 +0000
ROA not before:           Thu 02 Jan 2025 01:49:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213748
IP address blocks:        2001:67c:f70::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:d2:ad:55:7f:fe:f8:6c:35:09:09:3e:48:35:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
        Validity
            Not Before: Jan  2 01:49:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=112cae8e59feda756fe6a13439c6f7ac5158c2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:67:92:7b:1c:ed:a2:b3:cb:9e:8f:69:e3:
                    61:6f:b2:ac:29:db:cd:84:31:36:bd:92:15:27:31:
                    c8:34:d2:b4:f6:47:aa:31:30:42:af:eb:fd:20:d4:
                    78:0e:6a:6c:05:bf:26:0b:0e:3d:9f:87:de:f8:f8:
                    c2:48:b1:04:2f:39:c3:12:5a:fa:ac:03:0d:23:75:
                    78:59:dc:df:0c:71:17:65:8b:d8:2d:47:31:2d:4e:
                    ad:3c:26:28:68:86:1f:88:72:63:ac:cc:ec:65:83:
                    13:8a:10:3f:ad:11:db:51:5d:cf:43:19:2c:9c:9a:
                    19:56:09:28:5f:68:19:1a:2a:8b:64:f3:18:99:e8:
                    4c:98:e0:5c:d8:49:87:4e:63:4e:86:92:9c:ff:81:
                    c3:75:f4:49:4c:7a:cb:55:7f:43:84:62:42:46:3d:
                    33:4b:42:a7:a1:37:49:94:7e:a5:bc:7d:14:6a:f3:
                    48:15:1e:77:40:ce:8b:94:8a:ad:2a:9c:6c:d3:de:
                    c9:8e:ee:23:e5:98:1c:2d:e5:89:18:55:ad:68:99:
                    b5:c4:da:7d:30:50:1b:c2:7e:8c:c4:e9:5f:11:83:
                    74:ad:0f:7a:8e:81:44:44:4f:50:34:50:7e:63:5c:
                    1a:9a:53:97:6f:d6:6c:ce:5f:ec:4c:01:71:d4:f6:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2C:AE:8E:59:FE:DA:75:6F:E6:A1:34:39:C6:F7:AC:51:58:C2:B7
            X509v3 Authority Key Identifier:
                keyid:BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/ESyujln-2nVv5qE0Ocb3rFFYwrc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:f70::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:18:13:83:e8:e1:1e:6f:a4:46:4f:84:97:fd:4d:a8:be:3f:
         64:e3:77:17:4a:d0:e5:ca:ef:e8:5a:a7:22:28:19:4e:02:f0:
         c4:6b:db:98:4f:39:63:5c:cb:46:95:c6:bd:d5:8c:8a:7d:5e:
         a4:d7:1a:4e:01:ac:1a:27:9d:77:ac:44:4f:ad:7a:c1:50:ef:
         33:f5:ae:31:34:9a:3d:60:7b:d0:52:cf:d8:4f:71:78:d2:d3:
         06:8a:de:93:dc:2b:27:17:e9:81:9e:b0:c8:f9:f6:8d:28:54:
         be:84:66:75:67:31:08:5b:f6:6b:b2:19:03:21:af:f8:c3:37:
         19:7e:d5:9a:b0:0e:c1:66:00:a2:e2:be:1c:78:17:78:a8:be:
         0a:0e:59:12:c0:92:e7:a1:f9:14:62:37:0e:a8:91:56:ea:c0:
         d0:89:d7:3b:a9:c9:e4:92:ce:dc:7e:f8:2d:96:b6:52:05:4b:
         bd:1c:46:bc:96:37:78:9a:e2:16:03:15:7a:2c:3b:82:7b:23:
         2e:49:72:15:d2:f1:d5:58:3f:8c:50:3a:3e:53:55:ae:6c:dc:
         c7:49:0f:8e:d8:88:52:cb:ef:a8:3c:0f:1e:68:ac:f4:76:cf:
         b3:9a:ea:49:9a:a2:bb:8e:a0:f2:c0:1b:44:84:56:5d:88:a9:
         2e:ca:d2:13
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQks9KtVX/++Gw1CQk+SDVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlN2M3OWU5YTIxZGIyNmJkNmFlMDc1MDI3NmRiMWIwYWZh
N2VjZGIwHhcNMjUwMTAyMDE0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTJjYWU4ZTU5ZmVkYTc1NmZlNmExMzQzOWM2ZjdhYzUxNThjMmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwpnknsc7aKzy56PaeNhb7KsKdvN
hDE2vZIVJzHINNK09keqMTBCr+v9INR4DmpsBb8mCw49n4fe+PjCSLEELznDElr6
rAMNI3V4WdzfDHEXZYvYLUcxLU6tPCYoaIYfiHJjrMzsZYMTihA/rRHbUV3PQxks
nJoZVgkoX2gZGiqLZPMYmehMmOBc2EmHTmNOhpKc/4HDdfRJTHrLVX9DhGJCRj0z
S0KnoTdJlH6lvH0UavNIFR53QM6LlIqtKpxs097Jju4j5ZgcLeWJGFWtaJm1xNp9
MFAbwn6MxOlfEYN0rQ96joFERE9QNFB+Y1wamlOXb9Zszl/sTAFx1PZX1wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBEsro5Z/tp1b+ahNDnG96xRWMK3MB8GA1UdIwQY
MBaAFL58eemiHbJr1q4HUCdtsbCvp+zbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm54NTZhSWRzbXZXcmdkUUoyMnhzSy1uN05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNjMzOWEtMjYwMy00ZThmLTkwMWMt
Y2ZlMmM3ZmYwMThiLzEvRVN5dWpsbi0yblZ2NXFFME9jYjNyRkZZd3JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xNjMzOWEtMjYwMy00ZThmLTkwMWMtY2ZlMmM3ZmYwMThi
LzEvdm54NTZhSWRzbXZXcmdkUUoyMnhzSy1uN05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA9w
MA0GCSqGSIb3DQEBCwUAA4IBAQCTGBOD6OEeb6RGT4SX/U2ovj9k43cXStDlyu/o
WqciKBlOAvDEa9uYTzljXMtGlca91YyKfV6k1xpOAawaJ513rERPrXrBUO8z9a4x
NJo9YHvQUs/YT3F40tMGit6T3CsnF+mBnrDI+faNKFS+hGZ1ZzEIW/ZrshkDIa/4
wzcZftWasA7BZgCi4r4ceBd4qL4KDlkSwJLnofkUYjcOqJFW6sDQidc7qcnkks7c
fvgtlrZSBUu9HEa8ljd4muIWAxV6LDuCeyMuSXIV0vHVWD+MUDo+U1WubNzHSQ+O
2IhSy++oPA8eaKz0ds+zmupJmqK7jqDywBtEhFZdiKkuytIT
-----END CERTIFICATE-----