Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/E6h98msuHIDDEo3EuNbedKUfRUE.roa
File:                     E6h98msuHIDDEo3EuNbedKUfRUE.roa (raw, json)
Hash identifier:          LlRZmkIkDMo4tzcCd8AIz4o5Zg0OyytYjPKbff5wXqs=
Subject key identifier:   13:A8:7D:F2:6B:2E:1C:80:C3:12:8D:C4:B8:D6:DE:74:A5:1F:45:41
Certificate issuer:       /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial:       0196148D594DC7B949D82AA5D723C14AE3DC
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/E6h98msuHIDDEo3EuNbedKUfRUE.roa
Signing time:             Tue 08 Apr 2025 08:38:49 +0000
ROA not before:           Tue 08 Apr 2025 08:38:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214042
IP address blocks:        2001:3040::/48 maxlen: 48
                          2001:3040:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:14:8d:59:4d:c7:b9:49:d8:2a:a5:d7:23:c1:4a:e3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
        Validity
            Not Before: Apr  8 08:38:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=13a87df26b2e1c80c3128dc4b8d6de74a51f4541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:1b:06:27:41:e2:dc:46:11:9d:3f:d8:16:
                    ba:46:c2:89:ba:66:58:a6:9a:3d:90:8b:15:7b:23:
                    0e:59:0b:f1:47:07:a6:50:5f:36:f8:ca:c6:55:a8:
                    d2:40:96:77:87:97:65:27:31:db:5b:9a:05:f5:15:
                    90:6e:4f:77:4a:6f:1c:42:34:04:98:8e:5e:56:4b:
                    1c:1e:c9:68:0b:ad:3c:31:d3:36:79:89:f3:18:b0:
                    35:61:1b:50:61:b1:2e:06:ea:c8:11:ae:6e:bd:ad:
                    72:f0:20:50:44:cf:4e:21:bf:1d:70:62:92:c6:5d:
                    3c:4b:c3:8d:3a:5a:28:fa:d2:cd:46:f5:4f:2f:eb:
                    58:a3:91:e9:d0:f6:44:90:67:fa:6a:70:7d:a6:02:
                    4c:f9:bd:7f:5c:db:cc:a2:67:04:a6:1a:ee:99:81:
                    11:0e:dd:20:49:4b:0f:55:b8:e2:4f:50:42:32:ec:
                    5a:bb:42:8c:b7:6b:23:cd:b0:b2:a2:d6:d3:60:d6:
                    0a:e9:84:67:17:96:71:f0:6f:ac:2a:69:90:34:e0:
                    46:8c:f0:f2:c4:ae:09:7c:6f:82:60:cc:b2:81:86:
                    c5:a8:2e:c9:be:97:c7:d4:37:1d:d1:44:dc:f4:5b:
                    a7:95:a1:06:45:ca:1e:d3:2e:e5:85:12:17:85:7f:
                    8b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A8:7D:F2:6B:2E:1C:80:C3:12:8D:C4:B8:D6:DE:74:A5:1F:45:41
            X509v3 Authority Key Identifier:
                keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/E6h98msuHIDDEo3EuNbedKUfRUE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3040::/47

    Signature Algorithm: sha256WithRSAEncryption
         59:d8:2e:13:30:eb:27:c0:66:ed:d5:15:5c:53:33:22:d4:6d:
         a5:ac:20:e1:63:03:ae:99:9b:59:b0:0c:c3:b2:6f:0e:e6:2a:
         d0:b4:ce:07:61:b2:25:0c:02:85:f2:44:cc:ee:b2:1c:df:c5:
         c9:2c:fe:43:f4:11:25:55:ed:eb:52:df:a3:74:da:48:8d:5e:
         98:be:dd:e9:57:bf:e8:82:a3:9b:ba:a8:a1:2e:dc:d3:f0:45:
         68:45:87:f3:82:f7:c4:62:40:e6:33:ec:ba:b7:27:2d:41:f8:
         46:91:c3:4f:10:14:a5:81:60:7f:e2:90:55:cd:23:89:60:e5:
         ae:1a:5d:a2:6a:2c:0d:4f:c6:08:4e:0d:0a:d9:a1:ce:f5:5b:
         7c:8a:51:33:9b:c6:cb:99:7d:50:0d:66:9e:c2:c8:41:47:46:
         89:51:c9:5d:ba:e8:31:5c:8f:2b:f9:7f:f1:17:44:84:a2:7a:
         95:49:4a:55:1a:c4:56:07:92:c0:93:20:0b:cc:9c:50:b3:eb:
         00:08:69:b6:6c:a7:d6:ef:b5:f0:99:ad:3a:84:07:b5:ad:58:
         86:c2:c2:73:6c:2b:f6:14:9a:e8:05:55:3e:7d:d2:35:32:c7:
         14:64:1b:fd:cf:8f:4c:a4:ee:3e:53:58:c4:62:15:d2:88:61:
         8a:40:ab:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----