Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-JykzO2xdR8a99MrCrcq_r4luYY.roa
File:                     1-JykzO2xdR8a99MrCrcq_r4luYY.roa (raw, json)
Hash identifier:          lRaS78JUUuAmAp4gviBMj7qcMQ++tCBQd/LCjumhfB8=
Subject key identifier:   F8:9C:A4:CC:ED:B1:75:1F:1A:F7:D3:2B:0A:B7:2A:FE:BE:25:B9:86
Certificate issuer:       /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial:       01A1612086B9F5C23142C42A1912825F0A3A
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-JykzO2xdR8a99MrCrcq_r4luYY.roa
Signing time:             Thu 22 Oct 2026 01:01:23 +0000
ROA not before:           Thu 22 Oct 2026 01:01:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     218324
IP address blocks:        2a06:9801:158b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:61:20:86:b9:f5:c2:31:42:c4:2a:19:12:82:5f:0a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
        Validity
            Not Before: Oct 22 01:01:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f89ca4ccedb1751f1af7d32b0ab72afebe25b986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:2d:0b:3b:2a:98:39:46:b2:76:e9:3c:e7:
                    19:b2:ee:72:b9:92:11:6c:1a:eb:29:e8:3b:4a:05:
                    28:60:17:52:3b:f6:b1:e9:4f:ac:71:4e:cf:38:c4:
                    5e:c2:8e:72:6b:e5:5c:19:e8:bf:a1:b5:10:81:ff:
                    6d:b1:95:eb:74:33:2f:22:20:3b:13:13:bd:1b:35:
                    55:7f:57:67:a7:3a:89:b0:d3:e0:3d:12:78:0c:7c:
                    cd:19:02:e0:19:89:18:6c:93:8b:1f:2d:9a:e2:d6:
                    b6:dd:38:d6:3a:36:56:ee:9f:d1:7a:35:05:be:61:
                    dc:67:e3:96:7a:1b:cf:c0:d0:69:e0:8b:c5:98:68:
                    6d:13:05:52:f5:c2:6d:51:7c:af:5e:16:cf:32:d9:
                    dc:76:3d:0a:d9:17:5b:fd:41:16:ae:eb:1d:2d:1d:
                    e6:35:87:d3:5d:0b:9e:1d:86:e7:0e:ee:24:8d:59:
                    0e:9d:cf:ae:82:37:8e:17:fe:57:5f:e8:2b:c1:f6:
                    1f:0a:0f:3f:02:ee:9b:31:e4:08:be:cb:9e:24:60:
                    c1:6f:f3:37:0c:c4:66:e9:96:f2:ac:09:ab:0d:10:
                    2d:1f:56:4d:63:23:72:74:c9:22:ca:e7:50:b0:60:
                    de:38:65:aa:b9:40:e7:ff:32:8d:ad:d0:82:ea:92:
                    0a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9C:A4:CC:ED:B1:75:1F:1A:F7:D3:2B:0A:B7:2A:FE:BE:25:B9:86
            X509v3 Authority Key Identifier:
                keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-JykzO2xdR8a99MrCrcq_r4luYY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9801:158b::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:6b:fb:be:e4:69:33:ff:03:aa:54:60:7f:7e:82:41:f9:ed:
         9a:f4:d0:13:ea:7f:93:22:5a:1d:f5:64:a2:54:e2:93:13:c6:
         72:15:4a:9a:82:94:9f:56:e0:47:ca:19:01:45:ea:22:3d:f5:
         f6:ac:55:00:d8:d2:de:14:66:89:fd:6d:8b:50:5f:1c:fc:ec:
         0f:f9:9e:40:79:9c:fb:0e:e8:84:4b:af:68:3f:a9:d8:5e:4f:
         27:72:59:bf:86:51:48:2f:3b:e9:b1:2a:fb:87:8f:59:85:ad:
         89:8a:5c:cb:75:29:3d:e0:0b:fa:7f:77:2b:96:a0:ba:06:f7:
         12:d7:53:13:53:8c:26:a5:34:dc:07:c6:0c:b8:c9:cf:f8:f0:
         e6:51:2e:c2:b0:c5:42:68:6e:a6:05:08:f9:9e:c5:7d:a1:f6:
         a9:56:ee:a8:6c:8f:93:7a:aa:08:21:72:8b:13:ea:38:11:8c:
         ed:7b:1a:bd:a0:c2:29:79:e6:e8:65:5a:31:9b:2f:36:89:42:
         90:84:16:00:c9:07:a5:b0:29:d0:a3:c7:d4:60:e5:56:a0:05:
         5e:9c:87:1b:d4:bf:a2:81:f8:79:26:73:67:d0:cf:19:84:6a:
         19:28:7f:d8:ce:fe:4c:86:10:6f:a3:ab:53:b3:2e:79:e0:76:
         72:3c:48:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----