Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/tVrmml97nO3I_M_vpfVlDNtpefw.roa
File:                     tVrmml97nO3I_M_vpfVlDNtpefw.roa (raw, json)
Hash identifier:          XwdA+oPOHnP8cCR7EXMoD3J6qxQFfZeFE8zvSfQ7V9Q=
Subject key identifier:   B5:5A:E6:9A:5F:7B:9C:ED:C8:FC:CF:EF:A5:F5:65:0C:DB:69:79:FC
Certificate issuer:       /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial:       019524794753261308808287353AD81BD546
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/tVrmml97nO3I_M_vpfVlDNtpefw.roa
Signing time:             Thu 20 Feb 2025 17:48:02 +0000
ROA not before:           Thu 20 Feb 2025 17:48:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209641
IP address blocks:        2a0e:4342::/32 maxlen: 32
                          2a11:b686::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:24:79:47:53:26:13:08:80:82:87:35:3a:d8:1b:d5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
        Validity
            Not Before: Feb 20 17:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b55ae69a5f7b9cedc8fccfefa5f5650cdb6979fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:0a:61:23:9f:a2:2a:db:d6:3c:ba:bd:01:
                    22:c2:6b:2a:65:79:8c:f5:7f:9f:03:2b:cf:bb:23:
                    4f:48:9c:1a:11:84:e4:95:36:f8:42:e3:1b:7d:88:
                    47:d0:e8:0a:ab:42:1c:75:35:6a:58:37:d7:13:f7:
                    97:9c:c9:07:ff:29:70:ea:e1:d9:80:e1:34:8c:8a:
                    3c:74:7e:8e:00:b7:2b:2a:11:1d:bc:ad:6d:0c:bf:
                    77:d2:a9:9f:08:0c:59:21:24:11:83:ce:fa:ea:b4:
                    a4:b6:1b:04:a7:6a:d5:4f:55:6a:99:13:8c:99:2f:
                    88:81:0f:eb:0b:18:76:15:e3:74:80:c3:e9:1a:cd:
                    1a:98:e3:b9:eb:1a:40:f8:1b:cc:92:fe:72:14:5d:
                    0c:47:5a:79:f5:00:ae:1b:23:47:7f:77:59:14:51:
                    69:cc:fe:c9:17:6b:fd:2a:42:cd:8d:de:dd:4f:57:
                    4f:5b:75:17:a2:92:eb:ba:66:3e:65:5b:7a:75:e7:
                    77:56:99:73:cd:b6:b9:a0:43:66:e1:ec:ec:e0:91:
                    50:9a:4d:84:68:22:8f:9c:45:b6:46:a8:8e:5f:fa:
                    d9:2e:2c:99:8c:57:86:d8:a5:b7:86:6c:9d:f4:b1:
                    a5:e8:15:f2:8b:05:47:f5:51:24:be:3e:0a:01:a8:
                    b1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5A:E6:9A:5F:7B:9C:ED:C8:FC:CF:EF:A5:F5:65:0C:DB:69:79:FC
            X509v3 Authority Key Identifier:
                keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/tVrmml97nO3I_M_vpfVlDNtpefw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:4342::/32
                  2a11:b686::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:c8:e4:42:c6:ca:12:80:b2:dd:4d:e7:c6:f5:79:61:84:db:
         6a:d9:2d:f8:7c:df:2f:c0:5a:ee:54:49:ea:73:a5:b8:a8:62:
         83:db:e0:28:c9:f4:2a:0f:e8:98:89:f9:20:39:1c:dd:b3:5c:
         9c:7e:38:53:1d:27:2d:55:68:2c:45:ef:c5:aa:9d:2d:10:c4:
         55:3a:ad:52:9a:43:f8:13:d5:b7:cf:bc:a5:8b:84:c7:cd:b8:
         10:ed:f4:71:eb:75:bd:60:fb:95:50:ec:ab:a2:21:f5:f9:6c:
         ed:eb:62:ed:9f:ef:ff:1c:90:36:83:22:94:78:02:46:b0:c5:
         a8:a1:43:4d:88:0b:fb:8c:25:c5:c7:2e:d3:dd:21:31:94:d0:
         45:78:3e:93:c6:68:31:7b:23:30:3d:da:f4:df:0a:c8:34:84:
         ec:4c:a4:bc:f9:25:50:08:10:28:58:41:2e:d5:8e:61:74:4b:
         1c:c4:3d:42:a6:9a:fa:30:21:f9:15:f4:30:29:2c:a6:4f:75:
         94:36:45:89:1f:5a:d1:8b:05:5c:29:6e:fb:e5:b3:f2:cd:eb:
         1f:c4:0c:88:fb:3f:14:fd:0f:f1:d3:d7:a7:54:77:27:62:f7:
         03:ae:12:7a:8d:60:0a:d4:5c:b5:7d:b0:c5:08:b2:0c:58:66:
         1e:03:2b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----