Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/zc9mGlUiEaGVC19iIgN2XDXM0oU.roa
File:                     zc9mGlUiEaGVC19iIgN2XDXM0oU.roa (raw, json)
Hash identifier:          66ZgGfl2+whzT8rLI/yRvTXWc5wR69QdejdBE2RoXcE=
Subject key identifier:   CD:CF:66:1A:55:22:11:A1:95:0B:5F:62:22:03:76:5C:35:CC:D2:85
Certificate issuer:       /CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Certificate serial:       019423698641C9817FDFFECB607F62C0C2A1
Authority key identifier: 82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/zc9mGlUiEaGVC19iIgN2XDXM0oU.roa
Signing time:             Wed 01 Jan 2025 19:48:25 +0000
ROA not before:           Wed 01 Jan 2025 19:48:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212238
IP address blocks:        2a12:8440::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:86:41:c9:81:7f:df:fe:cb:60:7f:62:c0:c2:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
        Validity
            Not Before: Jan  1 19:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cdcf661a552211a1950b5f622203765c35ccd285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f4:4c:0e:84:a4:ca:35:f4:a5:f7:b4:a8:c7:
                    0c:a6:94:cf:ef:f3:6e:14:56:f4:91:bc:45:2a:34:
                    4e:16:1e:45:4a:34:58:a3:d4:00:5c:5a:79:de:00:
                    b0:b9:8f:08:7f:6b:97:6d:d1:f1:cd:5d:cb:93:56:
                    b5:32:c9:be:7c:2a:ec:b5:7c:13:37:42:bc:1b:f7:
                    0a:26:0a:ac:f4:cf:94:6a:d9:c6:b6:2a:84:74:9a:
                    d3:2c:72:27:37:0d:cc:fd:b0:87:9a:5d:3a:24:3b:
                    b6:44:bd:42:3e:34:61:c6:ab:75:c4:ea:7f:f1:f9:
                    9c:12:73:46:7b:ad:a8:03:a9:1d:66:2f:45:b8:7c:
                    60:dc:27:12:28:f0:f3:6f:65:08:dc:3a:1e:db:d6:
                    c5:ba:ce:37:59:35:8e:50:5d:a3:5f:39:e0:37:e6:
                    02:38:75:af:48:58:10:ba:6e:55:ab:a0:55:db:cd:
                    57:f8:33:31:62:9d:b1:29:7c:af:e3:95:2f:8d:9c:
                    ce:29:54:dc:a4:65:c0:14:09:f0:48:52:cc:e4:17:
                    48:ed:45:21:10:25:af:52:8e:7d:bf:3d:b4:7c:9c:
                    3a:62:c6:f9:70:42:c7:63:8d:73:01:6a:15:67:62:
                    32:96:93:17:42:b6:33:35:45:da:cb:e2:e6:5d:a3:
                    51:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CF:66:1A:55:22:11:A1:95:0B:5F:62:22:03:76:5C:35:CC:D2:85
            X509v3 Authority Key Identifier:
                keyid:82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/zc9mGlUiEaGVC19iIgN2XDXM0oU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:8440::/29

    Signature Algorithm: sha256WithRSAEncryption
         6e:ec:8c:e9:f7:0e:49:b4:b3:9c:59:02:88:9a:40:22:99:f8:
         7b:93:58:35:9b:0a:da:61:56:ce:15:f0:9a:10:83:de:9d:4e:
         10:07:d4:40:1b:fb:48:0d:36:23:98:e8:aa:d2:48:c5:0e:ad:
         20:9f:32:9b:9b:6a:47:fc:29:69:cd:0c:d5:2d:5c:4a:0f:c6:
         14:42:eb:a2:30:ee:04:49:68:a5:d7:f1:55:79:fe:1c:6c:82:
         00:5b:e4:6c:7a:4a:dd:57:40:09:93:b4:85:47:df:fd:06:5b:
         4d:7e:dd:61:e6:09:77:81:51:7b:8a:b9:e1:9e:44:e8:ea:cf:
         94:6f:23:65:c1:4b:7f:ac:6d:fa:be:dc:1d:1f:72:cb:31:87:
         47:a2:2d:96:ca:f5:cd:14:e5:ee:5a:50:69:4c:2b:fa:d1:80:
         58:37:ae:46:fa:33:ae:16:c2:20:05:28:82:b3:fc:87:8e:c2:
         35:1a:3c:e6:a3:71:50:28:90:bf:81:74:13:9d:9b:78:2a:8d:
         8f:d4:5d:1d:37:26:ed:6d:1b:f3:c0:b6:b2:9a:67:c5:aa:e5:
         39:82:e3:f4:b4:9f:06:d5:82:fe:7e:32:65:5e:0c:24:da:e4:
         6d:0d:cd:c7:da:00:53:e2:d3:d1:02:e5:27:4d:a2:5a:74:19:
         32:c7:bf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----