Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/0yZKWCGGUu9tMwM214gmYF3wX3s.roa
File:                     0yZKWCGGUu9tMwM214gmYF3wX3s.roa (raw, json)
Hash identifier:          VQTm0EQnDqvlSwhmBCFF5xgtzOlyqQ4UghXNjWtjo+Q=
Subject key identifier:   D3:26:4A:58:21:86:52:EF:6D:33:03:36:D7:88:26:60:5D:F0:5F:7B
Certificate issuer:       /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial:       019609380BBBDF9802618C628DA6AB999485
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/0yZKWCGGUu9tMwM214gmYF3wX3s.roa
Signing time:             Sun 06 Apr 2025 03:49:49 +0000
ROA not before:           Sun 06 Apr 2025 03:49:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44812
IP address blocks:        2a09:6284::/32 maxlen: 32
                          2a09:e5c0::/32 maxlen: 32
                          2a09:e5c1::/32 maxlen: 32
                          2a09:e5c2::/32 maxlen: 32
                          2a09:e5c3::/32 maxlen: 32
                          2a09:e5c4::/32 maxlen: 32
                          2a09:e5c5::/32 maxlen: 32
                          2a09:e5c6::/32 maxlen: 32
                          2a0e:b140::/29 maxlen: 29
                          2a10:4104::/32 maxlen: 32
                          2a11:4b47::/32 maxlen: 32
                          2a12:a343::/32 maxlen: 32
                          2a12:a344::/32 maxlen: 32
                          2a13:93c0::/32 maxlen: 32
                          2a13:93c3::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:09:38:0b:bb:df:98:02:61:8c:62:8d:a6:ab:99:94:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
        Validity
            Not Before: Apr  6 03:49:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d3264a58218652ef6d330336d78826605df05f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:d5:f3:15:61:e6:8d:2c:d6:a1:ce:bc:a5:
                    2b:99:1d:72:ac:63:26:3c:2d:62:d2:83:ce:4b:6e:
                    ab:f3:fb:88:aa:6a:2a:ab:a9:7f:e0:c9:d6:8b:89:
                    1e:9a:22:45:88:af:d9:a9:ac:43:f2:c2:67:1a:03:
                    63:21:36:62:19:5f:0b:76:8b:b0:0a:b5:85:8c:47:
                    9c:2b:7f:8b:58:35:0e:9e:83:b9:5e:95:a7:8b:ce:
                    53:74:7c:60:e9:00:4a:02:03:5b:11:d1:2e:e8:b6:
                    a3:66:1d:9a:36:6d:d6:ff:fa:1d:0d:54:7a:02:e2:
                    88:ab:5f:69:2a:84:7d:c6:db:c8:6a:5e:7f:5c:8b:
                    6e:09:bc:cb:60:28:ce:4e:d4:bf:aa:de:21:45:aa:
                    db:98:0d:65:22:8d:a2:9b:82:b1:8c:e8:76:5e:1e:
                    55:d6:bb:19:fc:fb:86:43:33:86:34:db:b3:33:8b:
                    a4:d8:2e:2d:75:69:3a:6d:c8:1b:ec:11:1f:6c:31:
                    00:a3:c3:0c:04:53:04:74:7e:38:74:50:39:8c:d9:
                    ea:c5:5e:e3:c1:6b:3e:e0:11:1b:97:42:3b:2d:86:
                    27:40:91:75:6b:26:78:b5:dc:81:1a:4c:e2:11:a8:
                    bd:ba:a2:31:81:e2:f6:07:98:41:d6:93:a3:df:6d:
                    79:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:26:4A:58:21:86:52:EF:6D:33:03:36:D7:88:26:60:5D:F0:5F:7B
            X509v3 Authority Key Identifier:
                keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/0yZKWCGGUu9tMwM214gmYF3wX3s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:6284::/32
                  2a09:e5c0::-2a09:e5c6:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:b140::/29
                  2a10:4104::/32
                  2a11:4b47::/32
                  2a12:a343::-2a12:a344:ffff:ffff:ffff:ffff:ffff:ffff
                  2a13:93c0::/32
                  2a13:93c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:9e:fb:f4:4d:c6:c6:56:d7:a3:01:a9:12:cc:52:6b:8e:35:
         7c:0c:b4:63:3b:ac:ec:23:24:00:9c:a8:10:5c:c3:48:c2:75:
         5c:09:e8:93:ae:e9:a3:b1:2e:6d:33:6e:26:4d:b7:0f:ad:56:
         19:f1:65:7d:48:04:35:b9:fb:15:51:94:58:52:e6:ae:69:7d:
         80:c5:86:36:0e:c9:bc:a2:41:0b:4a:7f:d8:ed:56:db:a9:e8:
         1a:11:7d:74:35:4f:4c:80:7a:35:ce:7f:a5:c4:80:de:86:1f:
         90:bc:ce:a1:39:0c:b8:cb:f2:b4:1c:ba:be:9c:a1:53:47:cd:
         95:cb:9f:5b:db:7b:dd:2e:fe:9d:e9:19:df:b8:69:13:0f:90:
         f3:dc:db:a4:b6:d7:ae:e0:d7:ee:40:b7:79:d3:da:2a:6e:38:
         0b:94:46:a7:c5:2c:be:c8:ac:01:9f:58:b1:73:2d:6b:de:b5:
         c6:15:ce:5e:53:24:f6:2b:ee:f2:98:86:f5:67:04:bb:fd:50:
         d7:f2:ed:24:8d:52:08:0e:f3:76:87:d0:27:9a:10:fb:68:c5:
         ba:c7:5a:93:a8:4e:8b:c0:ed:4d:b6:8d:c3:7f:f8:10:c1:27:
         b0:19:39:cd:d4:03:d6:e0:c3:7e:c5:1b:86:c3:41:69:28:a3:
         b4:a0:75:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----