Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/IrlLce6XkH--pTnc_MnLwiTSa3o.roa
File:                     IrlLce6XkH--pTnc_MnLwiTSa3o.roa (raw, json)
Hash identifier:          n1zblr/alw6QsrO3EvotrgmA0FBPyfOqM5WtAzxc5Uc=
Subject key identifier:   22:B9:4B:71:EE:97:90:7F:BE:A5:39:DC:FC:C9:CB:C2:24:D2:6B:7A
Certificate issuer:       /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial:       01961A0316F01478632B7A7CFCE76C56CB5E
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/IrlLce6XkH--pTnc_MnLwiTSa3o.roa
Signing time:             Wed 09 Apr 2025 10:05:32 +0000
ROA not before:           Wed 09 Apr 2025 10:05:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215955
IP address blocks:        2a12:5340:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1a:03:16:f0:14:78:63:2b:7a:7c:fc:e7:6c:56:cb:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
        Validity
            Not Before: Apr  9 10:05:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=22b94b71ee97907fbea539dcfcc9cbc224d26b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e2:08:db:5f:d2:d8:ce:1e:a8:a8:58:7d:b8:
                    90:9f:14:5c:55:7e:ba:b3:78:66:68:95:16:6c:65:
                    a9:89:0e:ad:93:ac:d7:a6:e7:44:12:88:0b:4f:ce:
                    21:30:a8:75:e6:c5:3f:28:bf:5f:26:6c:44:15:2b:
                    e6:98:c5:fa:fe:c5:34:c1:c4:ef:79:90:5e:13:72:
                    26:8c:e7:d9:bc:ce:24:d1:57:d5:ab:d9:3f:ac:df:
                    8a:09:1c:43:a0:64:e8:fb:b9:f9:c8:7c:d3:1b:9d:
                    88:ba:71:d0:c4:13:a3:f2:17:e2:af:35:6a:30:85:
                    ac:f0:13:60:d7:03:2e:be:47:36:e0:8f:d0:06:6c:
                    c0:68:83:51:69:fc:e2:91:4c:e1:1c:e6:b5:84:56:
                    c0:21:24:61:82:09:e6:7b:9c:31:ce:43:13:c5:7e:
                    ad:98:1e:a4:78:8f:10:41:76:d9:ca:bb:81:75:13:
                    d0:95:d2:74:74:53:60:76:67:58:1e:02:a3:7f:e2:
                    eb:a5:59:8a:d5:0d:3c:86:9a:73:d3:84:0e:f9:78:
                    39:3c:7d:a4:36:8f:6f:85:8f:ed:07:25:92:20:ca:
                    87:72:24:2f:bd:77:8f:08:12:7d:e5:0c:bb:3b:01:
                    28:98:1f:e7:cf:c0:b6:21:d5:ea:a5:ca:62:9e:da:
                    38:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B9:4B:71:EE:97:90:7F:BE:A5:39:DC:FC:C9:CB:C2:24:D2:6B:7A
            X509v3 Authority Key Identifier:
                keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/IrlLce6XkH--pTnc_MnLwiTSa3o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:5340:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:c6:b6:3a:46:57:8a:1c:fc:e2:06:6d:8c:1a:af:2f:e9:65:
         07:09:bd:58:e2:17:38:08:93:82:74:00:35:da:7e:2b:88:10:
         ee:57:5f:a6:95:31:a4:8c:7c:ec:d8:da:1d:88:69:17:7f:9e:
         1c:5d:87:23:e1:21:fe:8e:f7:e3:0f:4b:8f:2d:00:c5:6d:99:
         2f:49:3e:db:1b:41:99:29:aa:44:8d:7f:56:56:ee:d4:45:6a:
         b2:32:54:8b:73:2f:c0:f0:42:55:2d:0e:28:d0:1f:bf:41:42:
         85:8f:40:72:f3:46:d0:22:60:53:34:cd:6d:8f:2f:29:c4:92:
         9d:83:81:43:99:74:cf:7f:1f:6f:92:3e:29:45:38:ac:31:a9:
         9a:84:a1:0d:79:e3:ea:51:9c:5b:9e:b9:64:28:12:cc:7a:3f:
         47:f3:21:20:44:0c:81:03:c6:fb:04:75:b9:ac:4f:1c:f7:8a:
         9e:f6:d6:fd:af:af:3c:7e:47:5d:e2:55:91:e4:78:64:f6:e8:
         cf:fa:92:0d:b3:00:f9:5a:fc:57:07:9c:52:c8:44:26:43:c7:
         32:4d:8f:33:72:48:e4:f3:15:1a:35:33:5a:aa:cb:fb:0e:de:
         31:65:2c:67:87:08:6a:10:ac:f4:f4:b5:8d:a2:00:e3:43:ea:
         34:2d:6a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----