Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/RDGxg9ez-KelY6qyPKy8FdWOhpg.roa
File:                     RDGxg9ez-KelY6qyPKy8FdWOhpg.roa (raw, json)
Hash identifier:          F3Bf6FtPYu6DCpqc1HUjauqMcFy7T9emvu68vhwcN7M=
Subject key identifier:   44:31:B1:83:D7:B3:F8:A7:A5:63:AA:B2:3C:AC:BC:15:D5:8E:86:98
Certificate issuer:       /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial:       019426D930E97DF9C7B54D2C19EB5F7EF000
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/RDGxg9ez-KelY6qyPKy8FdWOhpg.roa
Signing time:             Thu 02 Jan 2025 11:49:15 +0000
ROA not before:           Thu 02 Jan 2025 11:49:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215329
IP address blocks:        2a13:c2c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:30:e9:7d:f9:c7:b5:4d:2c:19:eb:5f:7e:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
        Validity
            Not Before: Jan  2 11:49:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4431b183d7b3f8a7a563aab23cacbc15d58e8698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:30:b4:d7:64:80:64:98:27:29:24:2b:37:
                    9c:a1:b3:a8:ea:fb:9a:39:4d:c1:e0:67:ae:42:18:
                    1b:e7:64:42:f7:2f:06:c0:38:34:10:95:65:8c:21:
                    8b:ba:eb:c4:f1:3d:aa:fb:c0:45:d1:ac:34:14:1b:
                    d9:94:0a:81:c9:8f:95:3e:7d:b7:1e:3f:c7:3d:e8:
                    e7:2a:58:f4:98:33:79:4f:94:34:e9:5d:13:a6:f5:
                    5d:1e:19:d1:a3:bd:11:56:8d:72:dd:9d:48:28:3e:
                    ab:19:05:1c:cf:d5:f0:50:b1:6c:f9:05:ab:31:5a:
                    cc:68:02:97:bf:af:5a:35:18:9c:49:c1:ec:ca:85:
                    ae:16:c7:27:84:0a:3b:e5:b4:7e:1b:0b:ec:3e:44:
                    56:b8:04:fc:ef:09:6c:12:ef:ca:4f:e7:56:57:35:
                    18:e5:95:4b:0e:cd:da:4f:13:fb:29:84:1f:1f:20:
                    15:81:69:b5:0b:c8:87:6b:02:c0:db:fe:0f:47:4d:
                    f9:53:69:4a:0a:59:55:7d:3f:69:ea:62:70:b8:cf:
                    e7:5b:06:a5:54:36:2b:c8:b4:dc:4c:9d:18:3b:8d:
                    d4:58:44:6b:5d:47:61:48:88:89:4f:a9:81:0b:74:
                    af:a5:87:75:02:97:61:74:e7:e5:12:fa:89:17:5d:
                    44:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:31:B1:83:D7:B3:F8:A7:A5:63:AA:B2:3C:AC:BC:15:D5:8E:86:98
            X509v3 Authority Key Identifier:
                keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/RDGxg9ez-KelY6qyPKy8FdWOhpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:5c:3f:2f:87:76:83:80:be:ef:3c:91:b3:48:c7:09:8d:59:
         3f:f9:dd:03:2f:29:6e:7f:74:0c:5c:c4:ad:a5:da:d9:ae:1f:
         55:4a:af:18:c3:ec:d8:fd:b4:69:60:f7:ac:00:2c:b9:fb:10:
         bf:70:ce:9d:76:8f:e8:22:fe:67:21:a9:e7:23:91:10:71:95:
         bc:93:03:05:ec:20:08:31:fd:fd:11:86:e9:a4:7f:71:8d:c8:
         3f:e5:9e:07:f1:87:c2:23:e9:ac:8e:62:f9:4f:e5:37:1d:d3:
         42:71:c2:24:e3:aa:a9:39:2f:50:0c:58:38:6c:91:39:a0:c4:
         42:2d:19:1c:20:b4:46:de:a7:08:4b:b6:6f:3b:7a:9e:fe:80:
         b2:f3:04:4b:19:9e:c4:a6:92:99:70:0d:e7:b1:31:63:8f:aa:
         a9:66:fc:57:97:c7:c7:68:e1:c6:ed:94:c8:a6:8b:f8:26:9d:
         bb:49:0d:3c:04:c0:44:a0:59:95:c1:a6:47:59:37:2a:56:81:
         9e:55:df:68:11:e2:8b:e5:80:7d:98:74:a4:b3:5e:ee:71:43:
         b2:5b:9f:6f:20:83:48:1f:67:79:0f:06:95:b9:d3:7e:ec:e1:
         9a:a9:aa:88:97:88:e3:79:f2:5b:f7:cd:7f:f9:71:2d:c3:61:
         e0:46:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----