Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ZCZN07XAGVPmmqkx72Z7HiCk04I.roa
File:                     ZCZN07XAGVPmmqkx72Z7HiCk04I.roa (raw, json)
Hash identifier:          xSeIbJX9BBWH/KK/chZET6n1OpNWJiyCQdQyC1Rxl6o=
Subject key identifier:   64:26:4D:D3:B5:C0:19:53:E6:9A:A9:31:EF:66:7B:1E:20:A4:D3:82
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       0195D42A33490A8AB705FB0D7A9680ACD7D3
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ZCZN07XAGVPmmqkx72Z7HiCk04I.roa
Signing time:             Wed 26 Mar 2025 20:34:50 +0000
ROA not before:           Wed 26 Mar 2025 20:34:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202511
IP address blocks:        2a13:be47::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:d4:2a:33:49:0a:8a:b7:05:fb:0d:7a:96:80:ac:d7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Mar 26 20:34:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=64264dd3b5c01953e69aa931ef667b1e20a4d382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:64:6d:f9:d8:8a:6f:9e:eb:ae:00:b7:90:b4:
                    ca:5e:73:91:c5:41:59:aa:29:ea:8d:b2:30:ac:08:
                    36:2c:ad:32:fa:fd:e9:ad:c1:32:13:84:62:91:98:
                    6b:7c:9a:ad:91:d0:47:df:af:33:79:ce:a7:b2:8a:
                    f3:58:db:59:59:20:5c:9f:01:b1:14:77:52:a9:1e:
                    be:90:21:c2:b6:37:a0:ac:31:f3:36:f5:05:fa:83:
                    58:5d:a4:a3:f7:75:e3:24:8f:16:f1:9b:b1:7f:dc:
                    aa:b3:fa:df:b1:67:a8:0b:4b:5f:f1:17:e2:47:e5:
                    46:5f:09:1d:e6:50:78:6a:06:df:8c:1c:21:da:58:
                    bf:f0:92:93:eb:78:ce:d1:59:3c:75:4d:c9:a7:e3:
                    d8:6a:26:82:7f:17:69:ef:c5:b0:59:00:de:31:65:
                    00:14:c4:87:4e:05:f1:28:f2:5b:83:f8:9f:64:c1:
                    fc:6b:0a:cd:10:fc:7c:5b:d8:3d:c9:57:8a:56:9e:
                    ad:e9:90:90:13:76:76:25:41:0c:a8:f1:5d:5c:8f:
                    38:41:51:09:44:fa:fa:f1:74:57:df:ec:97:1d:df:
                    5e:9b:66:73:58:bc:c6:a2:90:4d:46:7d:08:af:db:
                    15:a4:f5:b6:a7:d4:05:c5:7c:7f:7c:a5:87:b4:cb:
                    9f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:26:4D:D3:B5:C0:19:53:E6:9A:A9:31:EF:66:7B:1E:20:A4:D3:82
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ZCZN07XAGVPmmqkx72Z7HiCk04I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:be47::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:6a:eb:48:56:8d:63:1b:87:19:ff:1a:54:91:bc:65:2b:a9:
         b7:92:bb:fe:4c:c4:6a:2c:b9:25:a3:16:70:e4:8a:b9:ee:c5:
         89:ab:34:36:4a:a3:b6:10:94:c0:34:af:37:a4:ba:07:2e:d3:
         d9:24:67:d0:ed:e1:d8:b5:cd:6a:bb:9a:ed:f7:6a:84:b3:d1:
         03:a3:f6:86:7f:c1:d9:d8:65:ea:cc:6d:2b:72:89:63:e3:50:
         47:17:fc:b0:71:d7:f8:14:05:32:10:ea:ef:03:a3:65:01:c9:
         31:a8:67:6d:1d:18:28:bf:70:18:12:3e:e1:eb:3f:b7:8a:82:
         47:03:0e:d2:fd:d2:f7:9b:2a:d0:47:3c:ec:56:e7:da:aa:9f:
         5d:7b:41:1e:c7:5a:23:6f:9d:89:e9:01:45:19:79:e6:d5:10:
         3a:6f:2b:5b:a9:bb:a4:71:bc:b6:de:e6:8f:2c:52:80:33:5f:
         2f:e9:f8:a1:6c:b9:28:ed:09:21:bb:88:27:ae:f8:af:14:23:
         96:59:a7:9e:83:8d:a9:b1:ea:00:bb:5b:42:87:8f:d6:17:c2:
         17:e2:a0:2f:b4:0f:58:e1:16:21:02:33:f4:ae:36:12:8e:e6:
         1a:37:20:75:4d:3d:24:c6:e8:8e:4d:ea:8c:f0:1c:e2:5b:d4:
         9f:06:c0:cf
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZXUKjNJCoq3BfsNepaArNfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjUwMzI2MjAzNDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDI2NGRkM2I1YzAxOTUzZTY5YWE5MzFlZjY2N2IxZTIwYTRkMzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GRt+diKb57rrgC3kLTKXnORxUFZ
qinqjbIwrAg2LK0y+v3prcEyE4RikZhrfJqtkdBH368zec6nsorzWNtZWSBcnwGx
FHdSqR6+kCHCtjegrDHzNvUF+oNYXaSj93XjJI8W8Zuxf9yqs/rfsWeoC0tf8Rfi
R+VGXwkd5lB4agbfjBwh2li/8JKT63jO0Vk8dU3Jp+PYaiaCfxdp78WwWQDeMWUA
FMSHTgXxKPJbg/ifZMH8awrNEPx8W9g9yVeKVp6t6ZCQE3Z2JUEMqPFdXI84QVEJ
RPr68XRX3+yXHd9em2ZzWLzGopBNRn0Ir9sVpPW2p9QFxXx/fKWHtMufIQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGQmTdO1wBlT5pqpMe9mex4gpNOCMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvWkNaTjA3WEFHVlBtbXFreDcyWjdIaUNrMDRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhO+RzAN
BgkqhkiG9w0BAQsFAAOCAQEAxWrrSFaNYxuHGf8aVJG8ZSupt5K7/kzEaiy5JaMW
cOSKue7Fias0NkqjthCUwDSvN6S6By7T2SRn0O3h2LXNarua7fdqhLPRA6P2hn/B
2dhl6sxtK3KJY+NQRxf8sHHX+BQFMhDq7wOjZQHJMahnbR0YKL9wGBI+4es/t4qC
RwMO0v3S95sq0Ec87Fbn2qqfXXtBHsdaI2+diekBRRl55tUQOm8rW6m7pHG8tt7m
jyxSgDNfL+n4oWy5KO0JIbuIJ674rxQjllmnnoONqbHqALtbQoeP1hfCF+KgL7QP
WOEWIQIz9K42Eo7mGjcgdU09JMbojk3qjPAc4lvUnwbAzw==
-----END CERTIFICATE-----