Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa
File:                     Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa (raw, json)
Hash identifier:          cAmAOJsrcg5h/lolypAUDsWdoBjnFRvupRZVbDEj0XI=
Subject key identifier:   27:2B:EA:EE:B7:02:B3:A4:25:7B:0F:05:7F:88:84:32:F5:47:A5:7A
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       0194228E00EE7F3152C553E4CFC5FF985C76
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa
Signing time:             Wed 01 Jan 2025 15:48:39 +0000
ROA not before:           Wed 01 Jan 2025 15:48:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215568
IP address blocks:        2a10:6e44::/30 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:00:ee:7f:31:52:c5:53:e4:cf:c5:ff:98:5c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: Jan  1 15:48:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=272beaeeb702b3a4257b0f057f888432f547a57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:84:3e:1c:7a:8e:fb:86:67:85:c4:6e:0d:08:
                    d5:ab:8c:61:cb:13:46:bf:ed:01:48:f2:5b:5f:60:
                    3b:3a:40:03:2f:a9:fc:0c:32:1e:8d:49:4f:5e:0a:
                    46:e3:2b:fa:b9:4c:85:d0:f3:17:63:4a:b4:56:c1:
                    ee:9f:44:9f:31:6e:57:8f:2b:00:70:84:6a:90:3d:
                    e5:fa:86:75:57:58:73:cd:26:e4:39:a4:06:5f:fa:
                    cc:02:c8:d8:3e:d2:0a:89:8e:74:f7:c1:6b:b8:aa:
                    d2:a7:24:21:71:22:45:f9:7b:1c:24:8d:6c:08:2d:
                    f2:03:0f:a8:cc:c3:4d:6e:a9:4d:9d:10:31:a2:04:
                    e8:34:ba:34:db:8a:22:b2:39:7d:9b:15:32:e9:00:
                    4a:c9:b4:cd:9e:54:b4:56:1d:5a:03:23:d3:63:45:
                    b1:87:45:d0:7b:a1:53:be:09:71:44:15:2e:c7:ed:
                    1b:6a:de:7e:af:48:2f:a5:c8:c7:ae:77:b1:92:68:
                    f1:45:4d:fd:7f:11:e8:db:16:89:e5:d0:8d:09:1b:
                    e9:6a:eb:bd:35:64:7c:3f:f4:7c:06:1a:4c:7d:0e:
                    e1:ce:3d:8d:75:f8:6b:dc:49:a0:9e:45:d9:0a:58:
                    5b:e3:05:47:78:98:3b:00:eb:ac:b3:86:24:6b:ae:
                    46:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2B:EA:EE:B7:02:B3:A4:25:7B:0F:05:7F:88:84:32:F5:47:A5:7A
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:6e44::/30

    Signature Algorithm: sha256WithRSAEncryption
         52:af:e8:1d:d2:2b:3f:ec:f7:8f:17:21:6a:43:b0:b5:37:44:
         46:d6:c1:51:89:58:5c:6f:90:e0:f3:dd:99:95:26:12:bf:b6:
         1c:aa:ff:0a:f0:c1:fc:d4:ed:56:97:08:7f:e7:02:8d:75:2c:
         09:48:cb:9e:c7:0c:1f:1f:e2:95:06:61:3c:58:3d:3a:14:2a:
         48:68:a8:13:9a:0d:6e:af:7f:aa:bc:8d:50:2c:2a:40:64:5c:
         b4:56:c4:07:b7:aa:b0:e4:48:40:4b:b7:5f:39:07:cd:f7:7f:
         b0:ca:d8:08:35:a2:f0:24:ab:bd:3f:c8:31:ab:95:8f:71:b4:
         61:9d:26:a7:0c:b6:aa:2e:9e:72:c2:b7:26:ef:17:cf:66:a2:
         26:c8:ee:6a:f2:70:0a:e2:65:ff:66:17:ac:56:a3:25:03:84:
         98:fb:a2:16:bd:aa:84:83:39:d1:24:e1:22:11:9c:10:a7:6d:
         b3:db:66:03:b7:07:04:7f:6b:70:c2:47:24:f5:ba:f1:3e:f7:
         f5:1f:58:8d:92:cd:7b:14:1f:1d:04:cf:dc:fb:bb:44:6f:da:
         07:4b:f0:cf:4d:66:39:4b:06:cf:d8:a6:37:8b:f7:28:93:7c:
         04:e6:56:ba:0f:85:89:f3:d7:ea:b4:0e:e5:c6:57:f0:cb:f8:
         44:85:6b:75
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQijgDufzFSxVPkz8X/mFx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZDFkYzRkMmViN2JmMmEzZjA4ZDU0NTc1NTQ3NzA1NTE0
M2YxNzQwHhcNMjUwMTAxMTU0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzJiZWFlZWI3MDJiM2E0MjU3YjBmMDU3Zjg4ODQzMmY1NDdhNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IQ+HHqO+4ZnhcRuDQjVq4xhyxNG
v+0BSPJbX2A7OkADL6n8DDIejUlPXgpG4yv6uUyF0PMXY0q0VsHun0SfMW5XjysA
cIRqkD3l+oZ1V1hzzSbkOaQGX/rMAsjYPtIKiY5098FruKrSpyQhcSJF+XscJI1s
CC3yAw+ozMNNbqlNnRAxogToNLo024oisjl9mxUy6QBKybTNnlS0Vh1aAyPTY0Wx
h0XQe6FTvglxRBUux+0bat5+r0gvpcjHrnexkmjxRU39fxHo2xaJ5dCNCRvpauu9
NWR8P/R8BhpMfQ7hzj2Ndfhr3EmgnkXZClhb4wVHeJg7AOuss4Yka65GgwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCcr6u63ArOkJXsPBX+IhDL1R6V6MB8GA1UdIwQY
MBaAFG3R3E0ut78qPwjVRXVUdwVRQ/F0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYt
ZmI0YzU0YjY3MzNhLzEvSnl2cTdyY0NzNlFsZXc4RmY0aUVNdlZIcFhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYtZmI0YzU0YjY3MzNh
LzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKhBuRDAN
BgkqhkiG9w0BAQsFAAOCAQEAUq/oHdIrP+z3jxchakOwtTdERtbBUYlYXG+Q4PPd
mZUmEr+2HKr/CvDB/NTtVpcIf+cCjXUsCUjLnscMHx/ilQZhPFg9OhQqSGioE5oN
bq9/qryNUCwqQGRctFbEB7eqsORIQEu3XzkHzfd/sMrYCDWi8CSrvT/IMauVj3G0
YZ0mpwy2qi6ecsK3Ju8Xz2aiJsjuavJwCuJl/2YXrFajJQOEmPuiFr2qhIM50STh
IhGcEKdts9tmA7cHBH9rcMJHJPW68T739R9YjZLNexQfHQTP3Pu7RG/aB0vwz01m
OUsGz9imN4v3KJN8BOZWug+FifPX6rQO5cZX8Mv4RIVrdQ==
-----END CERTIFICATE-----