Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/ZZlHpEh3xq_erGKCvTsR5cenP4M.roa
File:                     ZZlHpEh3xq_erGKCvTsR5cenP4M.roa (raw, json)
Hash identifier:          C4STcediFbKih1AYZM4S/g3j+Dxm18LPv+Tu0224VhI=
Subject key identifier:   65:99:47:A4:48:77:C6:AF:DE:AC:62:82:BD:3B:11:E5:C7:A7:3F:83
Certificate issuer:       /CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Certificate serial:       0194258FB7BAEFD8614E74475C9678D25683
Authority key identifier: 88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/ZZlHpEh3xq_erGKCvTsR5cenP4M.roa
Signing time:             Thu 02 Jan 2025 05:49:23 +0000
ROA not before:           Thu 02 Jan 2025 05:49:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209289
IP address blocks:        2a09:aac0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:b7:ba:ef:d8:61:4e:74:47:5c:96:78:d2:56:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884bf80e72f50f09bf563493ebdb11a34bba312d
        Validity
            Not Before: Jan  2 05:49:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=659947a44877c6afdeac6282bd3b11e5c7a73f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:23:e4:28:92:a0:82:cd:fb:54:f2:b2:8d:c4:
                    5d:10:af:07:d0:69:75:fc:ad:3e:99:48:cb:be:bf:
                    59:15:38:2a:75:40:d7:f6:1d:73:ba:c8:c4:e2:aa:
                    9e:e2:33:21:89:01:1e:9b:1e:b9:ca:bf:ab:cc:11:
                    7f:c2:8b:dd:34:b2:1b:c3:61:a7:62:5d:7b:16:a2:
                    2f:1f:c5:08:c1:99:4a:d9:0d:d7:d9:38:da:cc:b1:
                    75:66:a9:c5:df:af:f2:33:58:e2:6d:69:ef:66:bb:
                    5e:e8:23:46:e4:8a:a6:20:bd:18:1d:5e:73:2f:03:
                    60:35:a2:9a:45:95:74:eb:bd:2a:fb:18:7f:6c:08:
                    21:f1:43:b0:2b:af:3c:56:e8:34:bd:3c:64:93:9f:
                    eb:a9:3a:c4:f4:d5:36:13:49:5d:4d:ea:b9:4f:d6:
                    6a:3a:7c:05:dc:89:c4:d8:41:a5:48:4d:03:70:b5:
                    f3:0e:6c:4d:08:29:b5:88:a5:ba:d7:33:ea:96:38:
                    37:9c:4b:f1:88:bc:8e:0b:4c:68:f3:6d:94:52:2e:
                    b3:69:09:06:10:38:cc:96:42:31:6c:d3:77:02:3a:
                    fd:68:6d:a0:13:98:4b:ad:c8:92:eb:6f:43:2d:9a:
                    d3:ba:ee:9b:54:c9:7e:39:c5:8b:6e:cc:b2:1f:24:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:99:47:A4:48:77:C6:AF:DE:AC:62:82:BD:3B:11:E5:C7:A7:3F:83
            X509v3 Authority Key Identifier:
                keyid:88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/ZZlHpEh3xq_erGKCvTsR5cenP4M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:aac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         09:71:6c:a2:ba:6b:d6:47:5f:5c:7c:ea:96:fc:77:79:59:a5:
         c1:44:d1:b2:ae:a3:f0:d4:70:b7:68:33:3a:56:de:76:ea:ce:
         18:58:c7:24:f7:06:41:c0:6e:ce:2a:a2:45:82:78:56:2f:52:
         72:aa:ee:e7:03:12:e8:87:7b:88:4d:c7:7e:16:d8:26:84:5d:
         c0:e4:78:aa:dc:50:92:25:17:fe:72:9d:6a:a3:7c:65:aa:3a:
         24:b5:f4:3f:49:b7:ea:d7:29:8e:4f:b2:9f:a6:ad:9c:bd:a1:
         97:f9:60:dc:cb:2c:b1:04:a7:28:d4:f0:15:2a:60:84:35:77:
         73:e5:60:2b:e2:d4:f0:bf:ea:c5:b6:d6:58:34:e5:3d:65:24:
         c0:f1:65:4c:3c:e5:68:18:42:a7:bd:98:7f:39:a7:96:31:56:
         52:e6:28:2b:c5:97:fc:2b:70:77:23:a2:23:e1:ee:cd:85:f4:
         40:19:d5:2a:ef:8a:25:a0:59:0d:73:60:cf:ac:36:d4:f2:0b:
         24:91:ec:92:6d:f8:a6:a4:52:e2:d0:8d:9e:a7:70:e1:ee:2f:
         4a:63:5e:8e:78:86:e3:aa:61:6c:e3:58:2e:d4:72:6a:09:4e:
         61:5e:1d:c1:b4:b6:1c:36:4d:cd:6d:26:be:aa:2b:b8:62:8c:
         73:6f:56:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----