Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/rnAMBNvdJk6nX3AxwpicmUlIk4I.roa
File:                     rnAMBNvdJk6nX3AxwpicmUlIk4I.roa (raw, json)
Hash identifier:          3CR6ieS5zbe1a7wxc2adFdSClMAuXiJukh48kNXSBX8=
Subject key identifier:   AE:70:0C:04:DB:DD:26:4E:A7:5F:70:31:C2:98:9C:99:49:48:93:82
Certificate issuer:       /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial:       019420684186A32A972A948499EFE3272075
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/rnAMBNvdJk6nX3AxwpicmUlIk4I.roa
Signing time:             Wed 01 Jan 2025 05:48:10 +0000
ROA not before:           Wed 01 Jan 2025 05:48:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208168
IP address blocks:        2a0f:2480::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:41:86:a3:2a:97:2a:94:84:99:ef:e3:27:20:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
        Validity
            Not Before: Jan  1 05:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ae700c04dbdd264ea75f7031c2989c9949489382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:c6:05:24:86:95:ed:ee:f4:24:19:5a:72:
                    dd:a4:f2:60:bd:b4:76:8a:f1:f8:c3:3f:23:20:5d:
                    8a:cf:ae:cd:d6:6e:0c:94:67:22:78:97:49:6f:de:
                    29:38:e3:cf:06:74:3c:fe:18:93:53:33:ab:9f:04:
                    55:17:f1:1c:6c:cf:37:43:c1:aa:f7:b3:6a:4a:7a:
                    d5:cc:5d:37:a9:07:2c:af:75:a4:8b:dd:79:1f:fd:
                    98:a6:e5:b7:29:cc:2f:8e:69:9b:ec:ef:78:1e:ea:
                    87:29:bc:ea:ce:5f:bb:e2:8e:3b:d1:ca:ba:89:59:
                    a4:f1:f3:93:95:d1:84:01:4a:35:b2:f5:e6:e3:a2:
                    3b:42:41:55:c7:2d:12:5c:f9:12:1d:6c:dd:e3:5b:
                    19:2f:92:fb:bb:53:ff:43:38:01:21:18:ca:9f:12:
                    ba:af:19:ea:5e:13:ac:ee:ec:37:85:d1:de:7e:d8:
                    6d:c0:25:4a:a6:8c:cc:65:9e:d1:2a:37:70:38:81:
                    6b:d4:52:d8:87:2f:c1:c6:8e:19:09:81:10:4a:ea:
                    35:68:05:ad:43:6d:72:ed:7a:9e:a3:0c:b8:74:de:
                    24:bf:00:80:f7:3c:cd:9a:65:87:ba:52:05:d5:8f:
                    58:25:cb:5e:0a:02:6a:a2:eb:89:6f:06:9c:77:ed:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:70:0C:04:DB:DD:26:4E:A7:5F:70:31:C2:98:9C:99:49:48:93:82
            X509v3 Authority Key Identifier:
                keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/rnAMBNvdJk6nX3AxwpicmUlIk4I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:2480::/29

    Signature Algorithm: sha256WithRSAEncryption
         39:a2:34:2b:69:a4:24:c6:03:dc:dd:ae:45:a9:af:98:77:f6:
         c7:0f:81:f5:e4:88:e4:1d:45:40:9c:39:45:8a:3f:1f:3a:7d:
         79:37:fc:9b:50:97:62:36:45:e8:81:84:87:e0:c3:22:00:89:
         54:d6:0c:b1:38:48:09:71:f8:44:c6:c0:1a:e8:b7:c7:9b:28:
         f4:27:f5:1f:7c:cc:71:2f:ab:ce:7b:a4:f7:31:0a:48:ce:97:
         49:a0:9c:45:cc:0a:e0:39:f4:77:cc:79:32:f4:80:b0:86:54:
         e8:82:fe:20:bf:38:b5:17:23:5a:31:f8:06:43:40:b8:a4:97:
         5a:80:e9:8f:71:38:30:1a:68:c6:68:d0:ed:93:f8:d3:fc:14:
         77:a6:af:3b:70:ce:4d:b6:57:58:0f:1b:90:66:fb:86:12:5f:
         8b:c2:1d:5a:40:6b:ce:58:04:4c:ae:ac:35:1c:81:d0:55:81:
         2d:a3:f5:ad:30:e2:9a:c6:3a:24:b1:48:48:0a:7c:19:3c:d3:
         3d:c9:19:92:f0:7b:e1:54:1a:8a:ca:fe:ca:1e:70:4b:18:53:
         4d:ac:e2:aa:64:fe:62:b2:7b:c5:6b:76:8f:5a:30:4a:d0:5a:
         70:5d:b6:40:c9:0e:d9:f4:0c:d7:2a:29:8f:6c:df:6d:7f:ba:
         8d:3a:70:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----