Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/b4QTRifih97bgeiTzhcyC2ZKWhU.roa
File:                     b4QTRifih97bgeiTzhcyC2ZKWhU.roa (raw, json)
Hash identifier:          vFAypOAYsL6k+XE4lFPK93MvMEW1Arhh1rS9Kx4U5Yw=
Subject key identifier:   6F:84:13:46:27:E2:87:DE:DB:81:E8:93:CE:17:32:0B:66:4A:5A:15
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       0195D429484C1C1D8E6895B3AF17B88015DB
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/b4QTRifih97bgeiTzhcyC2ZKWhU.roa
Signing time:             Wed 26 Mar 2025 20:33:50 +0000
ROA not before:           Wed 26 Mar 2025 20:33:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48974
IP address blocks:        2a13:be42::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:d4:29:48:4c:1c:1d:8e:68:95:b3:af:17:b8:80:15:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Mar 26 20:33:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6f84134627e287dedb81e893ce17320b664a5a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:57:41:df:50:e0:d7:b2:f6:d7:b4:5c:ff:
                    bc:ab:16:f2:1d:82:8a:27:a5:8d:0a:e5:9d:6d:70:
                    43:71:c3:a8:23:31:05:54:29:93:4f:42:c8:b6:3b:
                    d3:ea:cc:15:13:68:1e:3a:6d:87:05:a1:c8:7b:e6:
                    e9:f6:c5:2b:36:03:0b:6a:a8:7b:da:af:c6:e3:be:
                    b8:16:cf:68:c1:cf:89:94:2b:3b:25:aa:51:24:2e:
                    b4:d8:2b:3d:f6:50:49:b3:6f:58:70:ba:df:6a:8e:
                    da:23:a3:fb:6b:ec:33:37:31:f0:c6:04:3d:46:b1:
                    24:8e:97:64:f3:5d:e5:8b:dc:d3:f3:80:1a:2b:fa:
                    d3:bb:3a:53:af:9e:e1:08:52:b6:c5:e8:09:9b:b3:
                    4a:03:d0:bd:3f:79:c8:d8:49:97:ba:85:e2:31:69:
                    7a:38:b1:cc:3b:ff:8c:15:cc:a4:fd:50:ca:0d:de:
                    0d:eb:00:34:2c:da:3a:e4:e4:c6:0f:67:33:ed:12:
                    59:e1:27:ce:2e:3a:04:55:c2:64:5b:40:1c:39:7a:
                    39:3c:2e:1f:8f:00:f2:de:a6:43:cf:a1:6c:6a:e4:
                    3a:e9:5f:68:48:25:a8:de:35:cf:5d:84:dd:51:71:
                    4c:77:4b:97:e3:3e:76:72:ed:30:6c:83:66:d1:a2:
                    33:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:84:13:46:27:E2:87:DE:DB:81:E8:93:CE:17:32:0B:66:4A:5A:15
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/b4QTRifih97bgeiTzhcyC2ZKWhU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:be42::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:42:b8:08:27:f0:de:f6:35:e3:0f:ce:9c:f9:16:d0:5b:d4:
         7d:89:41:36:71:1f:b3:b8:47:35:6d:2f:a3:d9:ae:83:7e:83:
         c5:40:33:a9:11:3c:e4:e2:60:f0:be:d5:c5:ba:d3:44:c9:9f:
         fa:c6:34:1f:f1:6b:d0:b7:a2:48:48:14:41:f0:97:03:57:9f:
         c3:73:70:08:ad:3e:ef:dd:d8:f3:d7:16:e0:37:a2:5e:41:c1:
         e5:7f:90:7e:4e:cb:88:39:05:d4:98:00:97:ae:c1:18:7a:b6:
         90:02:4a:b2:3d:1e:69:ee:7c:c8:5b:2f:92:c3:63:48:6b:4a:
         44:3a:b9:ec:38:bd:be:89:42:78:27:38:d9:9f:9f:e7:89:42:
         0f:ee:f0:63:9b:6f:f9:b2:1b:10:88:01:4a:ec:5e:23:ee:4c:
         ec:92:15:73:ec:61:cb:f8:47:97:cd:db:a7:5d:22:f0:3f:10:
         15:b9:00:a8:82:df:e3:2d:ec:a0:0e:a9:05:82:de:ff:f9:33:
         46:42:3f:47:2e:20:0f:0b:7e:90:ea:c9:86:2b:18:93:3a:23:
         5b:0c:7a:b4:e8:58:33:73:59:a5:83:88:48:72:32:e5:71:76:
         ad:fa:96:4f:e3:4e:66:a5:6d:b0:f2:40:0b:45:d5:ae:68:28:
         2c:62:46:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----