Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/juolSSzRfeDJo0Kp0hwKugPzAgA.roa
File:                     juolSSzRfeDJo0Kp0hwKugPzAgA.roa (raw, json)
Hash identifier:          G+kdJGG0lMFfjKrEiTBfGY6hBNUgOQA5o/mITsB+pLs=
Subject key identifier:   8E:EA:25:49:2C:D1:7D:E0:C9:A3:42:A9:D2:1C:0A:BA:03:F3:02:00
Certificate issuer:       /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial:       01941F8C53449E6EE2CBFF92298B941FFDD0
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/juolSSzRfeDJo0Kp0hwKugPzAgA.roa
Signing time:             Wed 01 Jan 2025 01:47:57 +0000
ROA not before:           Wed 01 Jan 2025 01:47:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     52042
IP address blocks:        2a13:3fc1::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:53:44:9e:6e:e2:cb:ff:92:29:8b:94:1f:fd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
        Validity
            Not Before: Jan  1 01:47:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8eea25492cd17de0c9a342a9d21c0aba03f30200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:20:cd:6f:06:4f:18:3b:97:29:22:2a:0e:a4:
                    57:2d:31:ce:7d:07:cd:70:be:fa:25:29:50:ad:2a:
                    a8:43:55:fb:59:1c:f3:2e:a6:d2:46:87:db:7a:0c:
                    23:16:13:9a:4e:20:f4:ac:eb:e6:0d:51:1a:79:11:
                    74:d2:db:22:1c:3b:be:0c:0d:8e:8a:72:10:f4:96:
                    7b:87:42:57:31:6f:9b:cc:e9:c4:61:dc:f4:98:ee:
                    91:b2:09:24:05:2e:f0:0d:51:86:6f:a9:eb:59:ef:
                    84:13:bf:1d:8b:f4:c4:90:67:79:fe:97:88:9d:54:
                    76:d3:42:b1:48:75:e8:9f:7b:4c:67:32:af:97:9c:
                    17:4e:05:0d:36:9c:6c:69:b8:9f:53:08:8e:75:5c:
                    f5:2c:4c:a8:4c:49:f0:41:9d:88:79:72:5b:ce:1c:
                    f6:40:b1:c6:54:e6:be:a1:9e:6c:ff:87:ea:c3:eb:
                    31:3c:46:9c:95:ff:86:5a:95:a5:f1:13:76:e9:fe:
                    cf:b5:60:23:3d:e8:c3:41:2b:49:b7:e3:01:1b:b1:
                    0e:a1:1f:33:eb:3e:ba:a2:59:87:21:a4:1b:ae:08:
                    89:9e:e7:e6:2f:9d:73:16:3c:0c:e2:93:c5:c9:b1:
                    e2:32:00:47:26:bb:3d:a4:05:6a:0b:5a:9c:c7:f6:
                    53:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EA:25:49:2C:D1:7D:E0:C9:A3:42:A9:D2:1C:0A:BA:03:F3:02:00
            X509v3 Authority Key Identifier:
                keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/juolSSzRfeDJo0Kp0hwKugPzAgA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:3fc1::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:b2:ab:d3:cf:1d:ea:b6:9a:74:21:48:2f:31:24:48:e4:d7:
         72:3b:f9:da:d9:44:ac:f3:41:7e:a8:82:47:39:4f:af:2f:bf:
         5c:ae:e6:ad:03:9a:82:23:cb:b9:d7:b2:95:88:34:4a:b9:72:
         73:26:96:8b:c6:1e:55:8a:ce:c5:60:cb:62:fe:17:ee:48:0e:
         fa:4f:71:ea:ca:09:0f:5d:00:36:c8:e6:dd:cd:72:b0:ce:49:
         35:8c:e7:d4:40:55:c6:15:48:ae:08:15:97:ad:98:ad:c8:1c:
         a0:90:53:05:f9:b2:ca:83:2c:a1:6b:5d:53:4d:e8:14:56:1a:
         ff:17:e9:08:20:35:15:1d:db:ec:84:bd:1d:f8:cb:66:c3:29:
         27:aa:04:d4:67:45:5c:58:50:47:56:73:70:6b:a5:3c:17:e8:
         8c:47:04:0b:9a:c3:c6:09:1f:a9:2e:a8:70:a1:78:05:5f:ea:
         50:36:f5:86:dd:f3:23:0e:dc:ce:b1:be:c9:c0:c9:a0:59:aa:
         14:0d:0b:b7:cb:d3:a1:26:34:0e:ec:9f:01:63:87:86:f7:1d:
         8d:c0:63:7d:e9:7c:fe:99:fe:2c:ff:11:da:e2:cf:7f:83:3a:
         75:8b:3e:8e:d8:e8:0c:b6:6a:45:aa:80:65:4a:f1:08:6b:ed:
         75:b9:72:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----