Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/pU_eB5rSsUS6EVPfiP0TBGNtCcY.roa
File:                     pU_eB5rSsUS6EVPfiP0TBGNtCcY.roa (raw, json)
Hash identifier:          rx92LY3LSKSOciZBDpqfQO1j0HB6jcKddcqiSbdXBt8=
Subject key identifier:   A5:4F:DE:07:9A:D2:B1:44:BA:11:53:DF:88:FD:13:04:63:6D:09:C6
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       01942826318436CA529BDE48CB8ED631AFE8
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/pU_eB5rSsUS6EVPfiP0TBGNtCcY.roa
Signing time:             Thu 02 Jan 2025 17:52:59 +0000
ROA not before:           Thu 02 Jan 2025 17:52:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6890
IP address blocks:        2001:67c:2ed4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:26:31:84:36:ca:52:9b:de:48:cb:8e:d6:31:af:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Jan  2 17:52:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a54fde079ad2b144ba1153df88fd1304636d09c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:10:8c:b0:37:71:f9:6a:73:2c:a1:a9:c0:f1:
                    c4:f8:f0:e7:4d:13:a4:e2:ba:9f:5a:ba:10:6c:57:
                    c2:39:01:ae:30:2f:13:80:a9:ba:81:dd:68:02:b7:
                    33:1d:a6:00:15:ac:db:4b:cc:27:59:f9:37:8b:7e:
                    a5:66:ed:66:c4:b3:75:4e:14:9d:52:55:aa:51:59:
                    c4:6c:d5:33:6d:e3:5c:68:ac:35:50:a5:1a:93:9e:
                    66:7b:93:6c:7b:05:2e:a7:f5:89:52:0d:3a:42:ae:
                    26:71:c6:20:b2:cb:cd:e3:12:30:d8:76:4f:28:6b:
                    8e:e7:24:ab:2c:00:35:70:89:0f:cd:21:f0:30:18:
                    5e:8a:2b:17:9d:28:a4:20:ae:66:c6:00:eb:60:e6:
                    5b:71:fa:d3:d5:8b:a2:87:ec:67:5c:03:ce:cb:74:
                    ef:7e:98:86:85:bc:3d:08:80:78:84:a2:26:ac:bb:
                    bb:6e:b7:23:cd:da:91:85:a1:db:65:0c:84:e8:74:
                    71:6d:2a:f9:1a:e2:9e:59:ff:3d:0f:32:6d:88:88:
                    6a:03:c8:46:94:77:0a:b2:b4:ae:bc:c6:4e:e8:8d:
                    89:c6:15:13:cb:e2:a0:f3:33:e4:38:93:6f:63:94:
                    41:a2:ac:64:62:29:59:c0:1a:51:64:52:c3:8e:54:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4F:DE:07:9A:D2:B1:44:BA:11:53:DF:88:FD:13:04:63:6D:09:C6
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/pU_eB5rSsUS6EVPfiP0TBGNtCcY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2ed4::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:6f:6b:c6:9c:f5:ce:ec:02:9b:78:ee:d0:ef:72:8e:d9:8b:
         fc:a9:b1:83:a6:f4:11:78:47:1c:62:43:1f:a3:61:ce:03:3b:
         53:de:4a:ad:67:d0:29:bf:1d:f5:4f:00:5e:3d:0e:16:48:e0:
         1e:6b:63:c8:02:be:d7:32:e0:c7:30:1d:43:73:d1:46:2b:63:
         e6:87:23:b9:f1:f9:24:20:fd:13:91:85:f9:d2:b9:63:1e:1c:
         8e:86:62:ea:0c:3b:70:93:50:62:9c:7d:4b:dc:ff:34:8a:0c:
         61:92:16:ae:c4:a2:c0:d1:bb:7b:88:83:3c:63:7a:d6:42:92:
         9e:06:55:c8:e4:20:cc:64:07:1c:21:8b:72:d5:6a:2c:f5:74:
         52:5e:a0:0c:ea:17:04:03:e6:48:47:c3:94:4d:62:f7:d8:ea:
         71:5e:32:91:89:cc:b9:50:fd:96:fe:95:a9:82:5e:d8:9f:c9:
         c1:a7:2a:f8:e1:8d:ce:15:79:89:e9:e2:9d:18:19:44:88:6b:
         68:36:14:a8:e3:0c:cb:d7:68:dc:e1:3b:5a:e3:0d:8f:b9:f8:
         9c:0b:0f:d1:00:3d:e4:88:d3:51:a2:03:18:08:93:99:ff:06:
         b1:aa:ec:86:79:b8:c7:a2:3a:f2:5b:56:ec:a9:90:ed:31:0b:
         55:70:ec:a4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQoJjGENspSm95Iy47WMa/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNGRiNzYyMzI0MWQ3ZTY2NzhmYzI1NzUxZmE0ZTBiNjY2
NTE4NmIwHhcNMjUwMTAyMTc1MjU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTRmZGUwNzlhZDJiMTQ0YmExMTUzZGY4OGZkMTMwNDYzNmQwOWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xCMsDdx+WpzLKGpwPHE+PDnTROk
4rqfWroQbFfCOQGuMC8TgKm6gd1oArczHaYAFazbS8wnWfk3i36lZu1mxLN1ThSd
UlWqUVnEbNUzbeNcaKw1UKUak55me5NsewUup/WJUg06Qq4mccYgssvN4xIw2HZP
KGuO5ySrLAA1cIkPzSHwMBheiisXnSikIK5mxgDrYOZbcfrT1Yuih+xnXAPOy3Tv
fpiGhbw9CIB4hKImrLu7brcjzdqRhaHbZQyE6HRxbSr5GuKeWf89DzJtiIhqA8hG
lHcKsrSuvMZO6I2JxhUTy+Kg8zPkOJNvY5RBoqxkYilZwBpRZFLDjlSZ8wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKVP3gea0rFEuhFT34j9EwRjbQnGMB8GA1UdIwQY
MBaAFMBNt2IyQdfmZ4/CV1H6TgtmZRhrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMt
MDQyM2YyNjNmMmNiLzEvcFVfZUI1clNzVVM2RVZQZmlQMFRCR050Q2NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMtMDQyM2YyNjNmMmNi
LzEvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC7U
MA0GCSqGSIb3DQEBCwUAA4IBAQCbb2vGnPXO7AKbeO7Q73KO2Yv8qbGDpvQReEcc
YkMfo2HOAztT3kqtZ9Apvx31TwBePQ4WSOAea2PIAr7XMuDHMB1Dc9FGK2PmhyO5
8fkkIP0TkYX50rljHhyOhmLqDDtwk1BinH1L3P80igxhkhauxKLA0bt7iIM8Y3rW
QpKeBlXI5CDMZAccIYty1Wos9XRSXqAM6hcEA+ZIR8OUTWL32OpxXjKRicy5UP2W
/pWpgl7Yn8nBpyr44Y3OFXmJ6eKdGBlEiGtoNhSo4wzL12jc4Tta4w2PuficCw/R
AD3kiNNRogMYCJOZ/waxquyGebjHojryW1bsqZDtMQtVcOyk
-----END CERTIFICATE-----