Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/TnsP3c8ljtDfwNyWoGa8UfiAr04.roa
File:                     TnsP3c8ljtDfwNyWoGa8UfiAr04.roa (raw, json)
Hash identifier:          BFEKTG/BJ8TYYcLpMrevk8B4J5OsYLzQSOr+EgTvqyM=
Subject key identifier:   4E:7B:0F:DD:CF:25:8E:D0:DF:C0:DC:96:A0:66:BC:51:F8:80:AF:4E
Certificate issuer:       /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial:       019422FAFD2B2C090BD0C86A3952C3E39C6A
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/TnsP3c8ljtDfwNyWoGa8UfiAr04.roa
Signing time:             Wed 01 Jan 2025 17:47:41 +0000
ROA not before:           Wed 01 Jan 2025 17:47:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212057
IP address blocks:        2a0f:607:1056::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fa:fd:2b:2c:09:0b:d0:c8:6a:39:52:c3:e3:9c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
        Validity
            Not Before: Jan  1 17:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4e7b0fddcf258ed0dfc0dc96a066bc51f880af4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:58:61:01:b2:de:ed:3e:82:2b:2c:f2:a4:
                    10:be:bc:15:1a:07:b7:a3:2c:a5:22:77:4f:94:52:
                    a8:23:52:e6:a8:8c:4b:22:cb:0b:cd:cc:f0:75:14:
                    65:f9:5c:3b:03:18:c7:50:53:66:e6:5e:34:f8:0a:
                    87:b8:de:58:6e:36:bd:4c:3e:6b:e9:e1:de:9f:08:
                    75:3b:d0:f4:31:48:45:e9:ee:27:e6:e4:78:70:19:
                    64:f7:6e:5d:8b:ab:74:b4:1a:49:50:87:24:a2:dd:
                    14:66:9c:d7:6c:5c:c6:1e:18:01:9b:cb:39:a5:93:
                    87:f5:11:15:82:8f:c2:18:1c:76:7f:e8:c0:b3:54:
                    94:44:9f:3d:84:e1:84:e6:07:0a:60:1a:4a:95:5a:
                    0b:48:57:cc:3e:b0:3b:62:24:53:1c:1a:93:27:6a:
                    d9:cc:13:5e:b0:9d:7b:1c:6d:62:e1:ee:58:e5:f7:
                    3e:e6:ee:b6:49:e7:24:68:2c:26:b2:ff:a2:e4:27:
                    7c:5c:6b:94:30:ba:36:d3:66:d8:1b:da:c8:69:96:
                    fd:25:64:9f:89:92:81:dc:15:ac:e2:71:37:6f:57:
                    6d:01:61:1c:d4:85:f6:71:db:09:b3:d2:5d:81:0a:
                    84:25:c1:45:e2:45:f4:40:78:3d:54:71:73:6d:69:
                    82:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7B:0F:DD:CF:25:8E:D0:DF:C0:DC:96:A0:66:BC:51:F8:80:AF:4E
            X509v3 Authority Key Identifier:
                keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/TnsP3c8ljtDfwNyWoGa8UfiAr04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:607:1056::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:aa:6f:31:2d:b1:09:ca:32:98:33:3a:17:a5:11:aa:6d:7e:
         28:c5:d9:12:d9:9d:7b:6d:f3:8b:73:db:cb:f5:b4:d3:94:93:
         bb:09:db:4c:3a:f0:0a:28:c7:00:61:fe:32:19:ee:b7:74:af:
         a5:e8:d7:40:96:11:91:e9:11:e1:97:7c:46:82:aa:30:b2:08:
         67:ed:f0:d5:b5:f4:44:55:5e:30:bb:d1:5d:c9:e9:63:59:54:
         d6:f3:c8:04:52:d5:80:c3:ba:40:aa:18:ea:a0:bf:98:be:0e:
         4d:37:48:20:d0:bf:9b:c3:27:25:53:5d:25:74:12:d3:79:1b:
         63:62:fc:dc:8b:73:c4:0a:ed:7b:ab:45:e5:5e:93:55:b0:b1:
         be:26:0d:99:e2:0c:9e:9d:6e:f9:63:ea:c3:54:f2:3c:e1:08:
         c4:10:e2:7c:91:4c:8c:10:09:0e:b6:39:e2:f3:9a:d4:11:e7:
         2a:c6:fc:79:be:f2:4c:ac:98:67:7f:a1:74:08:8e:25:43:53:
         90:76:92:19:25:b6:08:18:d7:33:c1:15:df:f5:4f:0a:88:15:
         65:29:f3:84:2d:be:79:70:6d:17:6f:cb:99:50:2f:41:1a:89:
         d0:75:07:d7:a8:89:53:89:42:da:76:b7:32:05:8c:91:d2:a0:
         00:b0:d6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----