Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/eUaNjbQ13AL_bdj9OsodbJhievk.roa
File:                     eUaNjbQ13AL_bdj9OsodbJhievk.roa (raw, json)
Hash identifier:          vqTtUX/Z4j6GrRJo/zNXECftqpV9YIa2rqV3Ge4NXvs=
Subject key identifier:   79:46:8D:8D:B4:35:DC:02:FF:6D:D8:FD:3A:CA:1D:6C:98:62:7A:F9
Certificate issuer:       /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial:       0194228D4863AFCFFAA60665A8674A017029
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/eUaNjbQ13AL_bdj9OsodbJhievk.roa
Signing time:             Wed 01 Jan 2025 15:47:51 +0000
ROA not before:           Wed 01 Jan 2025 15:47:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212461
IP address blocks:        2a0b:6900:1ad::/48 maxlen: 48
                          2a0b:6903:1ad::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:48:63:af:cf:fa:a6:06:65:a8:67:4a:01:70:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
        Validity
            Not Before: Jan  1 15:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=79468d8db435dc02ff6dd8fd3aca1d6c98627af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:3e:11:12:cf:b7:6c:ab:e4:08:98:dc:c0:
                    2b:00:16:45:05:fb:c8:c5:58:5d:56:8a:5c:25:13:
                    70:10:41:19:2a:2b:38:39:24:c3:a5:ab:80:59:68:
                    56:96:ea:2e:ef:56:71:3c:78:40:0e:2b:c1:a1:ce:
                    d9:f0:38:1d:bd:a7:3e:35:2a:80:78:8b:28:e2:58:
                    36:ef:12:26:16:96:e5:ed:d9:e7:c3:a2:14:f5:cf:
                    36:ec:2e:35:4a:54:d0:85:71:b4:2a:59:ec:c1:61:
                    03:9c:03:34:8d:85:9c:a8:0d:e7:f3:e6:2b:28:f6:
                    fb:ea:c6:68:1e:c7:0f:24:9e:2a:38:cc:14:96:73:
                    9a:0d:80:ed:f0:0f:2e:50:3c:a8:0a:4b:82:18:30:
                    c1:83:6d:2a:3e:90:71:aa:0e:3b:e5:04:20:71:b9:
                    ce:ff:a2:1a:cb:90:76:3c:ad:58:f0:a7:34:a3:78:
                    46:f1:9b:c4:83:5d:36:b1:0f:8f:52:23:1a:7b:bb:
                    f4:2c:ca:c0:50:63:c8:5c:bf:55:cb:4c:5d:fe:76:
                    51:8b:88:76:fa:56:5d:79:db:bb:b9:2e:75:c3:a2:
                    48:0e:f9:17:76:0c:e1:ca:6c:9a:c1:78:eb:7e:c3:
                    87:10:fd:c3:32:6f:ac:6c:b1:d4:d1:6a:d1:2a:ab:
                    12:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:46:8D:8D:B4:35:DC:02:FF:6D:D8:FD:3A:CA:1D:6C:98:62:7A:F9
            X509v3 Authority Key Identifier:
                keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/eUaNjbQ13AL_bdj9OsodbJhievk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:6900:1ad::/48
                  2a0b:6903:1ad::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:b4:2e:e0:09:3d:05:6c:07:16:93:d1:9a:5e:cb:9a:05:1b:
         ca:3e:dc:c8:f0:bd:f0:b7:36:29:47:a6:dd:96:8a:08:3a:cc:
         dd:35:46:25:12:0f:cb:b6:f0:2e:42:a6:91:5a:75:c2:47:71:
         07:e9:1b:f9:e4:a4:41:d9:3c:bd:04:35:f0:80:b8:31:fb:35:
         f6:99:5e:f5:69:81:fc:12:f4:66:21:42:72:73:17:99:b1:25:
         5b:b5:2e:29:aa:c7:79:74:bf:0d:60:b2:20:c2:61:bc:18:9b:
         32:ca:ab:87:40:48:60:06:f5:34:48:4e:eb:9c:5c:1e:43:06:
         ae:ec:0f:4d:44:da:95:51:92:06:99:be:4b:47:13:1a:9f:bc:
         5d:9f:6e:8e:9e:d0:89:e7:31:15:c1:f9:71:b6:30:6d:30:c2:
         67:c1:5f:e1:08:b6:1e:a1:a1:36:64:44:7b:6c:1a:9b:8e:d3:
         2f:04:35:76:80:0b:9a:47:7d:b2:ea:55:20:56:9a:a8:a6:9a:
         6f:6c:68:65:85:08:47:aa:f6:b1:a4:2b:09:ec:7f:23:60:49:
         82:8f:8b:3e:63:38:64:7b:01:9f:71:02:ae:0b:e5:98:3c:40:
         9a:5e:86:0a:83:7f:6e:b4:37:39:05:54:33:18:93:06:c8:0b:
         a4:55:76:0d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQijUhjr8/6pgZlqGdKAXApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWY2YWFlNmZiYTVjNjFhNjE3MzlhZmNhYjU1YTYyMjY2
ZTg5ZWUwHhcNMjUwMTAxMTU0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTQ2OGQ4ZGI0MzVkYzAyZmY2ZGQ4ZmQzYWNhMWQ2Yzk4NjI3YWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02U+ERLPt2yr5AiY3MArABZFBfvI
xVhdVopcJRNwEEEZKis4OSTDpauAWWhWluou71ZxPHhADivBoc7Z8Dgdvac+NSqA
eIso4lg27xImFpbl7dnnw6IU9c827C41SlTQhXG0KlnswWEDnAM0jYWcqA3n8+Yr
KPb76sZoHscPJJ4qOMwUlnOaDYDt8A8uUDyoCkuCGDDBg20qPpBxqg475QQgcbnO
/6Iay5B2PK1Y8Kc0o3hG8ZvEg102sQ+PUiMae7v0LMrAUGPIXL9Vy0xd/nZRi4h2
+lZdedu7uS51w6JIDvkXdgzhymyawXjrfsOHEP3DMm+sbLHU0WrRKqsS7QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHlGjY20NdwC/23Y/TrKHWyYYnr5MB8GA1UdIwQY
MBaAFE7vaq5vulxhphc5r8q1WmImbonuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iOGU1YzQtMzhlYi00NDVmLWIwMzYt
YzM3NzkwZTZkNDgyLzEvZVVhTmpiUTEzQUxfYmRqOU9zb2RiSmhpZXZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iOGU1YzQtMzhlYi00NDVmLWIwMzYtYzM3NzkwZTZkNDgy
LzEvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgtpAAGt
AwcAKgtpAwGtMA0GCSqGSIb3DQEBCwUAA4IBAQBhtC7gCT0FbAcWk9GaXsuaBRvK
PtzI8L3wtzYpR6bdlooIOszdNUYlEg/LtvAuQqaRWnXCR3EH6Rv55KRB2Ty9BDXw
gLgx+zX2mV71aYH8EvRmIUJycxeZsSVbtS4pqsd5dL8NYLIgwmG8GJsyyquHQEhg
BvU0SE7rnFweQwau7A9NRNqVUZIGmb5LRxMan7xdn26OntCJ5zEVwflxtjBtMMJn
wV/hCLYeoaE2ZER7bBqbjtMvBDV2gAuaR32y6lUgVpqopppvbGhlhQhHqvaxpCsJ
7H8jYEmCj4s+YzhkewGfcQKuC+WYPECaXoYKg39utDc5BVQzGJMGyAukVXYN
-----END CERTIFICATE-----