Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/GNInbe5OSIrJ1Wpx4HMt5W6UvlA.roa
File:                     GNInbe5OSIrJ1Wpx4HMt5W6UvlA.roa (raw, json)
Hash identifier:          7o7t+3sHq0IsDsawTCuSFcEgzPTo8Le0g7TI4BhIkxM=
Subject key identifier:   18:D2:27:6D:EE:4E:48:8A:C9:D5:6A:71:E0:73:2D:E5:6E:94:BE:50
Certificate issuer:       /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial:       01A14582FCDBCB505BE2976B6C25AF77E493
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/GNInbe5OSIrJ1Wpx4HMt5W6UvlA.roa
Signing time:             Fri 16 Oct 2026 16:19:34 +0000
ROA not before:           Fri 16 Oct 2026 16:19:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     218373
IP address blocks:        2a06:9801:15bc::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:45:82:fc:db:cb:50:5b:e2:97:6b:6c:25:af:77:e4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
        Validity
            Not Before: Oct 16 16:19:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18d2276dee4e488ac9d56a71e0732de56e94be50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:0f:b2:dc:2d:ad:cd:84:c6:bb:82:5a:53:
                    42:32:c7:31:1d:c0:15:75:5b:25:54:69:0d:c4:4d:
                    45:bc:90:27:ec:45:f5:8d:6e:d6:f5:5b:99:33:35:
                    ed:ea:aa:03:a3:aa:44:bc:09:39:77:f4:87:21:f0:
                    f5:50:29:38:f4:cf:0f:32:eb:51:9c:25:f0:2a:e7:
                    b3:e6:66:7c:a2:50:c5:79:0b:94:3f:c8:cd:76:9c:
                    e9:00:4b:e0:ba:dd:af:22:da:1a:db:a0:1f:4c:3c:
                    53:01:ac:33:e5:0e:86:05:c0:19:e7:16:83:39:c7:
                    dd:ec:71:ab:53:63:d8:ce:56:54:f8:bd:ad:a9:6d:
                    d6:46:49:9c:0a:41:68:53:67:ab:9e:62:4b:df:da:
                    b4:f1:4b:f6:8a:d3:24:a9:24:15:2e:dc:a0:1f:48:
                    68:88:d3:b4:c9:80:99:15:5b:86:05:ca:63:87:6f:
                    ba:42:d0:eb:53:b5:6c:83:47:f3:2d:38:91:51:e3:
                    da:39:4e:6d:ab:46:27:43:cc:90:dd:7f:e0:6f:c2:
                    7c:c4:55:cb:b9:75:b3:c4:5c:c9:ab:c6:5f:ce:00:
                    d9:83:42:b0:f4:bc:7a:a6:75:08:c8:14:b3:9e:f6:
                    28:3a:91:7e:ff:80:b6:76:85:2b:c8:25:66:3b:81:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D2:27:6D:EE:4E:48:8A:C9:D5:6A:71:E0:73:2D:E5:6E:94:BE:50
            X509v3 Authority Key Identifier:
                keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/GNInbe5OSIrJ1Wpx4HMt5W6UvlA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9801:15bc::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:97:fa:23:94:1d:33:1e:55:cb:9c:ae:0a:d3:67:2b:bd:f1:
         02:be:02:fd:e7:e1:a5:8c:7c:2c:70:bf:85:c0:36:9d:e9:53:
         60:18:cf:96:58:aa:25:2f:8f:58:d5:d4:11:6b:a6:3d:a7:81:
         4e:af:fa:8e:8b:82:97:e7:4f:02:6f:6e:36:2f:02:17:c7:10:
         3b:cb:e9:79:2e:f1:6a:ce:b8:50:c5:ad:e5:39:12:1d:7b:e3:
         24:98:b6:ec:de:ca:c6:cd:19:f0:f9:dc:bf:3a:e0:e4:e9:86:
         04:91:3d:c4:04:7f:f3:c9:79:f4:3b:6d:ec:20:32:b6:69:ae:
         6a:8b:8b:02:81:87:db:d3:17:eb:a1:b2:32:ab:58:47:f6:69:
         cd:8e:59:01:88:bb:2c:43:90:41:87:92:10:f8:64:9a:a0:4a:
         b8:22:11:71:34:93:e2:14:9a:fc:bc:66:75:22:15:69:17:7d:
         d8:69:37:82:99:82:82:8f:d6:3d:4c:c6:60:ec:d2:45:f0:d0:
         e6:78:85:98:c7:86:e7:33:cc:93:14:53:fa:38:a1:fb:d8:6f:
         e3:90:ea:ee:bb:f3:dd:0c:89:13:34:47:cc:17:67:90:13:fe:
         93:c0:0e:2e:94:cb:c2:45:aa:20:c5:b5:86:85:6f:57:5e:d2:
         c9:74:f8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----