Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/y6i-tAs710JU3OPP1HFORxr_Jiw.roa
File:                     y6i-tAs710JU3OPP1HFORxr_Jiw.roa (raw, json)
Hash identifier:          CVxy94IGu0ygQZ+HNm6h6Qx4sxvXtiP38hrFG8fWoyY=
Subject key identifier:   CB:A8:BE:B4:0B:3B:D7:42:54:DC:E3:CF:D4:71:4E:47:1A:FF:26:2C
Certificate issuer:       /CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Certificate serial:       01941FFA4871600688C5569BEB002E8B8514
Authority key identifier: 6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/y6i-tAs710JU3OPP1HFORxr_Jiw.roa
Signing time:             Wed 01 Jan 2025 03:48:03 +0000
ROA not before:           Wed 01 Jan 2025 03:48:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15435
IP address blocks:        193.177.166.0/24 maxlen: 24
                          2001:67c:45c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:48:71:60:06:88:c5:56:9b:eb:00:2e:8b:85:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
        Validity
            Not Before: Jan  1 03:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cba8beb40b3bd74254dce3cfd4714e471aff262c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:61:98:e0:7f:8c:0a:df:2d:03:78:4a:18:
                    17:f4:78:d7:3c:b3:fd:e4:6b:2d:cc:aa:3a:60:01:
                    56:b2:dd:8b:47:4f:33:4c:86:33:c6:84:bd:e8:88:
                    04:f4:06:1e:6c:55:37:bd:0f:77:33:b4:b7:3c:ac:
                    5b:3c:ef:95:05:2f:22:84:cf:3d:83:24:e9:75:14:
                    be:5b:95:21:b6:8a:70:a9:43:52:63:a1:d3:ef:ab:
                    24:2b:f7:9c:e9:65:2e:61:df:2d:02:99:67:a2:d7:
                    8a:a8:e4:bb:56:cc:51:16:91:d3:4c:57:fe:73:ef:
                    33:16:6e:6c:20:38:33:e7:2d:8a:d1:74:22:e7:ed:
                    2f:3b:45:0c:db:58:3d:0d:d3:ef:f0:d4:f5:75:da:
                    be:fd:a1:3f:62:ec:c7:d5:07:78:c8:87:a9:00:6e:
                    72:2b:f3:28:54:ae:f0:19:25:79:3b:ed:7c:7e:97:
                    16:d3:58:58:d8:17:c5:75:eb:05:e0:91:d5:94:35:
                    b4:cf:c8:a9:a3:5f:7c:22:5a:44:1a:85:e2:a4:36:
                    6a:e8:18:d8:3f:a4:6f:4d:b0:17:bf:5c:0f:59:94:
                    d6:b9:79:5b:69:f2:43:b4:6e:a1:11:66:81:3c:23:
                    ea:65:ba:fc:bf:93:f4:26:24:b4:cf:48:30:99:d1:
                    27:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A8:BE:B4:0B:3B:D7:42:54:DC:E3:CF:D4:71:4E:47:1A:FF:26:2C
            X509v3 Authority Key Identifier:
                keyid:6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/y6i-tAs710JU3OPP1HFORxr_Jiw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.177.166.0/24
                IPv6:
                  2001:67c:45c::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:58:0c:e5:f9:7c:8c:a5:cc:da:df:14:50:43:b5:da:c4:53:
         d0:79:04:b5:42:ef:7e:aa:ab:2b:45:65:c5:07:91:1b:eb:3a:
         f4:0b:c5:b7:0c:8a:52:eb:1e:76:a4:17:2d:dd:98:bb:8d:c2:
         35:91:68:64:e6:fe:1b:76:65:ac:f3:a8:bd:d4:88:3e:d1:e8:
         80:97:30:0d:6f:5e:71:c6:ac:f5:6b:e2:65:42:84:85:b8:8a:
         a7:7b:66:25:6d:00:ec:10:29:30:ab:31:f3:f1:a7:0a:b0:f5:
         eb:74:fa:ed:a8:43:9c:5a:de:d3:6e:db:3d:6b:e3:03:67:62:
         0b:26:d7:59:3b:da:a8:a4:25:1a:f7:4f:7b:97:d2:b8:ab:86:
         48:55:04:d3:4b:09:e8:bb:b6:44:fe:99:0a:f2:7e:06:7f:f6:
         37:9f:64:a4:cc:b3:b1:54:19:8c:b6:94:8c:37:12:c8:2f:57:
         94:34:b2:07:12:af:54:84:bf:a7:f6:89:61:6c:5a:cc:e4:a3:
         46:24:75:05:dd:53:2f:76:7f:58:2e:d4:6a:71:62:cd:25:eb:
         2a:ec:c1:e2:4e:5c:e6:35:bd:17:16:03:35:71:d0:cb:12:a1:
         42:6c:69:4b:32:e4:c6:98:f8:ee:74:ec:e7:98:a9:d1:5b:ea:
         7e:cf:35:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----