Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/YBfLAkuYURNDoMTvjD2hLc0uuNc.roa
File:                     YBfLAkuYURNDoMTvjD2hLc0uuNc.roa (raw, json)
Hash identifier:          gM7Y+qrK9OGNkcbA31bQAYiigRBUM5Di4cIR3nOhPM8=
Subject key identifier:   60:17:CB:02:4B:98:51:13:43:A0:C4:EF:8C:3D:A1:2D:CD:2E:B8:D7
Certificate issuer:       /CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Certificate serial:       01942368E72E530386FF00A97EC5660CB911
Authority key identifier: E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/YBfLAkuYURNDoMTvjD2hLc0uuNc.roa
Signing time:             Wed 01 Jan 2025 19:47:44 +0000
ROA not before:           Wed 01 Jan 2025 19:47:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214251
IP address blocks:        2001:67c:271c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:68:e7:2e:53:03:86:ff:00:a9:7e:c5:66:0c:b9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
        Validity
            Not Before: Jan  1 19:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6017cb024b98511343a0c4ef8c3da12dcd2eb8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:a8:3a:09:12:f5:69:4f:7d:54:f9:16:58:
                    a7:e7:39:3b:6c:0b:76:b2:a1:97:4e:ac:06:2e:05:
                    3b:e3:ce:3e:03:36:59:ac:14:6a:a6:ea:01:be:17:
                    76:48:48:ac:d0:df:07:28:11:04:7b:14:f5:2d:21:
                    4b:6e:41:cb:f2:90:bd:71:7a:48:a8:f7:7c:86:c6:
                    28:fc:09:47:56:c1:c9:f6:5e:85:04:4f:3b:e7:46:
                    97:a1:5c:67:06:ae:fb:b6:00:e0:47:e2:b0:38:36:
                    0d:2a:ab:5c:f6:e7:1a:90:67:1a:f2:2a:d0:60:6a:
                    1f:ca:2a:2b:e3:c3:9e:28:cd:62:ea:3c:13:a1:89:
                    2b:38:b5:42:6c:fc:cb:9a:09:20:e3:a1:5e:71:db:
                    e9:4a:89:ff:db:67:83:1e:d4:63:71:6d:4d:6e:3d:
                    e9:7e:1f:1c:5f:e4:2c:ab:e0:a6:94:18:96:ef:a3:
                    07:11:c9:77:78:c0:82:3b:48:ee:78:1d:0d:be:f4:
                    40:8a:ae:4e:2b:a7:8f:a8:2e:b8:ac:cb:74:ea:c6:
                    6b:6a:77:2b:aa:4e:d3:83:03:fb:f7:22:72:c2:6c:
                    86:17:f1:0b:c7:34:fc:7f:a0:89:d7:60:83:28:2b:
                    d5:bb:4f:ef:d7:a5:61:bd:fd:b3:ff:2b:ed:24:15:
                    3d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:17:CB:02:4B:98:51:13:43:A0:C4:EF:8C:3D:A1:2D:CD:2E:B8:D7
            X509v3 Authority Key Identifier:
                keyid:E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/YBfLAkuYURNDoMTvjD2hLc0uuNc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:271c::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:76:3b:ab:fe:65:51:09:24:ee:14:fa:f1:a5:aa:b0:89:07:
         d6:d4:33:ec:fc:fd:27:61:23:97:7a:a0:52:d9:20:24:9d:ff:
         e9:73:74:81:26:e3:dd:14:ae:50:78:f6:b3:3f:7e:cf:3e:5a:
         e2:21:8c:51:f1:58:32:ba:b7:bd:0c:37:37:69:2f:94:32:aa:
         9e:21:57:3a:16:e4:36:50:60:38:ea:48:60:b4:49:d5:21:87:
         c6:f9:70:ed:a8:f7:f5:e0:c4:49:33:2f:62:cb:c9:fd:43:81:
         d0:b5:d1:04:79:89:0f:c3:ef:d0:ac:5c:9e:cd:05:b6:e3:11:
         f7:91:39:03:07:8c:ec:be:99:fb:13:62:a8:5b:4d:75:63:11:
         91:b9:71:37:7d:2b:04:4a:7d:4a:73:a4:0b:ec:ba:8b:3d:ef:
         a8:88:71:6c:da:31:e6:3e:77:03:33:a4:a6:b3:a1:b9:03:24:
         d0:fb:5f:20:27:1d:b1:aa:95:13:8e:9a:96:53:06:7b:a5:36:
         c1:98:d4:20:b6:18:cb:36:74:1f:0e:0f:6c:06:85:60:88:9f:
         b0:11:0d:19:94:64:56:48:80:3c:69:e0:47:cc:5b:b3:d1:83:
         38:3f:76:c7:01:c2:25:26:f3:c5:c5:4f:2a:3b:a1:bc:26:54:
         c2:9a:9d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----