Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/gLnx7gZxz0WAj-K4vzwKgIeet84.roa
File:                     gLnx7gZxz0WAj-K4vzwKgIeet84.roa (raw, json)
Hash identifier:          YbYZtWJrwErlFGA26FKrq1zki7cmTkbU1yt/QbkuJOY=
Subject key identifier:   80:B9:F1:EE:06:71:CF:45:80:8F:E2:B8:BF:3C:0A:80:87:9E:B7:CE
Certificate issuer:       /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial:       019422FC2B6E9735DB29CD4A3C270A096C44
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/gLnx7gZxz0WAj-K4vzwKgIeet84.roa
Signing time:             Wed 01 Jan 2025 17:48:59 +0000
ROA not before:           Wed 01 Jan 2025 17:48:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201380
IP address blocks:        2a10:59c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:2b:6e:97:35:db:29:cd:4a:3c:27:0a:09:6c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
        Validity
            Not Before: Jan  1 17:48:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=80b9f1ee0671cf45808fe2b8bf3c0a80879eb7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:10:d7:86:dc:f5:17:81:53:1b:9f:ed:89:
                    10:d2:9b:07:0c:f1:42:07:e3:01:76:28:bb:45:5f:
                    f2:3f:86:dd:c7:d8:9b:8f:f5:4f:f7:eb:09:38:6e:
                    51:17:e8:f9:92:df:7e:8b:57:c0:09:26:61:47:9e:
                    ce:09:65:5b:a9:52:38:9c:d0:ec:03:16:2b:b0:93:
                    d6:c2:c1:5e:0d:a8:8e:d2:48:88:12:7b:a1:89:b5:
                    5f:b3:92:1b:38:16:81:2b:7e:5f:88:14:c0:15:c9:
                    a9:34:84:51:fa:3f:b0:a0:5f:8e:32:29:a6:07:3d:
                    47:48:d1:44:cf:93:57:52:5b:04:92:c8:24:2f:c9:
                    52:53:3e:3c:b4:33:b2:ad:1c:a9:d5:b9:be:df:c3:
                    cb:68:5a:0b:20:b9:c8:fe:63:bc:50:f9:a3:0d:6f:
                    48:6b:e3:1b:e5:55:92:65:ea:c1:ee:bd:32:a1:6f:
                    0c:27:c4:4e:0f:d9:b5:99:03:1d:6c:c6:a9:78:fb:
                    f3:d1:4b:0b:8e:9d:b3:70:99:eb:ea:3a:c0:51:3f:
                    37:d4:fc:bc:de:c1:91:36:51:f8:26:41:e6:4c:4a:
                    af:9e:38:f7:b6:9b:77:03:5d:4a:8e:1c:85:24:b1:
                    95:7d:e8:21:62:ed:17:db:f9:15:40:e1:80:0f:62:
                    e9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B9:F1:EE:06:71:CF:45:80:8F:E2:B8:BF:3C:0A:80:87:9E:B7:CE
            X509v3 Authority Key Identifier:
                keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/gLnx7gZxz0WAj-K4vzwKgIeet84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:59c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:d7:89:ee:68:b9:91:90:ab:39:1b:f5:59:0e:b5:f0:3b:18:
         73:51:6e:16:67:c5:e5:50:1c:2d:f7:96:b6:c8:d3:dc:23:17:
         c4:a2:ec:2f:b8:85:30:29:7e:25:2e:bf:24:8b:59:a8:3d:7f:
         d8:b6:00:9c:bc:a5:be:09:34:14:9a:ff:e5:23:32:2a:32:14:
         ff:15:84:71:b5:67:10:5e:03:b0:7b:79:99:9b:3d:32:61:9b:
         1f:c7:62:4e:90:83:4c:23:8a:be:a3:f4:b9:a7:ec:09:e2:8e:
         db:d6:a0:2d:20:f2:6e:f8:20:13:a7:e5:64:21:b5:89:bb:b5:
         f5:02:42:24:11:e5:ab:0b:47:43:50:d8:7c:80:e3:e8:f8:04:
         58:8f:e3:5b:5a:80:98:c4:d9:58:11:7b:71:1b:e6:ce:b1:69:
         78:fb:d9:bd:14:77:02:3f:f4:8c:f4:a4:c8:35:6c:3d:47:72:
         f3:c4:a0:40:cf:6e:7f:80:c6:98:d9:18:19:8b:4b:58:d5:e8:
         00:b6:1e:82:1e:d2:df:09:a3:67:b0:82:d8:2a:fd:68:e0:80:
         1d:bf:d2:6a:25:11:e0:d9:57:bd:9a:ff:d7:1a:2d:af:40:27:
         49:36:a6:ea:a8:f0:88:01:49:a3:35:0a:2c:6c:21:d8:5e:19:
         cb:20:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----