Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/ZQvLYup8OHe_oJI54VuyEp5WGRw.roa
File:                     ZQvLYup8OHe_oJI54VuyEp5WGRw.roa (raw, json)
Hash identifier:          p+1Wk/c4dUehu4W1pVV/qIM6o7TtIGJD1wdgYmq/1aA=
Subject key identifier:   65:0B:CB:62:EA:7C:38:77:BF:A0:92:39:E1:5B:B2:12:9E:56:19:1C
Certificate issuer:       /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial:       01942369A10C21A6C3481FEFA3722297DFCB
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/ZQvLYup8OHe_oJI54VuyEp5WGRw.roa
Signing time:             Wed 01 Jan 2025 19:48:32 +0000
ROA not before:           Wed 01 Jan 2025 19:48:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59747
IP address blocks:        2001:148f:fffc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:a1:0c:21:a6:c3:48:1f:ef:a3:72:22:97:df:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
        Validity
            Not Before: Jan  1 19:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=650bcb62ea7c3877bfa09239e15bb2129e56191c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:0a:e9:41:96:3a:d3:70:39:64:62:74:78:
                    6e:d3:e1:69:ff:00:6f:57:6f:a9:25:37:c6:10:f4:
                    26:90:37:a7:28:55:8f:6e:b9:f4:4c:df:c6:23:cf:
                    09:22:49:16:f3:34:49:45:00:29:1c:9b:7b:c6:9a:
                    76:56:76:f7:e2:b2:b9:0c:1e:5b:83:01:64:f0:9f:
                    17:79:ae:9f:2b:33:a2:52:b6:62:a3:4d:56:56:38:
                    34:82:1a:8c:87:e3:1c:4c:22:70:56:ca:75:bf:8f:
                    0d:d4:c0:cf:30:bf:2f:da:9f:cf:80:ae:13:00:ce:
                    bc:56:9d:13:3c:2c:4b:6e:cb:eb:44:e5:b3:31:c3:
                    a6:f6:53:0b:81:cc:6a:53:15:fe:53:78:05:71:03:
                    4b:53:7d:a6:9b:91:93:20:ec:79:48:23:66:ef:dc:
                    7b:0f:eb:bd:95:4b:8d:9e:e7:11:42:da:8d:25:5d:
                    66:27:c9:b0:17:35:b9:92:5b:4c:f6:4a:c0:46:67:
                    2f:eb:fb:3b:33:c9:09:f4:6e:9c:44:fc:85:30:f4:
                    a6:30:e6:52:bf:2d:88:4f:3d:db:1a:f5:ea:da:c4:
                    88:47:51:b4:fe:88:a7:ca:dc:4f:7a:b0:00:a6:9f:
                    b6:23:93:bf:17:52:c6:07:ea:9e:e7:32:6b:26:62:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0B:CB:62:EA:7C:38:77:BF:A0:92:39:E1:5B:B2:12:9E:56:19:1C
            X509v3 Authority Key Identifier:
                keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/ZQvLYup8OHe_oJI54VuyEp5WGRw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:148f:fffc::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:d6:86:13:2f:64:9e:94:30:fb:a0:10:f4:7c:b1:c7:f3:b1:
         4c:c7:f2:95:88:61:54:51:84:72:b9:29:8d:62:00:df:0e:b3:
         f9:16:63:ec:a0:6e:f7:5c:1c:54:8f:b9:35:90:aa:a8:d5:f8:
         e6:b0:dd:4d:31:d4:4a:70:5a:1c:b1:20:a6:57:98:6d:13:41:
         2f:20:63:92:2a:d4:12:62:2b:05:ad:cc:e4:6d:b0:97:e3:46:
         ff:d7:c7:af:d4:96:26:1d:14:f7:cb:fa:70:48:c2:c7:5d:58:
         51:ad:3f:f8:71:bc:94:e9:c0:67:17:52:43:b8:ae:a0:c9:fe:
         92:af:fd:14:02:f6:ce:e8:5a:2d:15:3f:e7:5f:9c:00:56:75:
         98:0f:71:a9:f9:ab:38:48:fe:cf:f8:0c:f8:5d:e6:ef:19:a2:
         c7:0d:72:81:29:2f:1c:5b:d1:27:67:08:6b:50:f0:41:9f:fc:
         c7:73:5d:a9:2d:6c:06:8c:a3:49:1f:29:c4:cb:0b:e5:f8:52:
         bb:e8:de:b3:74:d4:1a:b6:5a:57:1a:53:0b:db:de:2b:96:c1:
         b8:4a:19:95:45:b6:a8:c3:15:78:8a:2e:df:65:cf:3e:4c:fb:
         4f:e4:c7:f2:4b:96:84:d4:be:30:c9:9d:77:96:1e:12:5d:97:
         0a:80:99:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----