Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/OxTVaYAjOqz1ZySNdgAp2SsF6lg.roa
File:                     OxTVaYAjOqz1ZySNdgAp2SsF6lg.roa (raw, json)
Hash identifier:          ocxC8LjAZpzH4X+m3mjaX2pqNeZY8N7xodvdEgzkP1U=
Subject key identifier:   3B:14:D5:69:80:23:3A:AC:F5:67:24:8D:76:00:29:D9:2B:05:EA:58
Certificate issuer:       /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial:       01960A218063B473878539D017779016B82F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/OxTVaYAjOqz1ZySNdgAp2SsF6lg.roa
Signing time:             Sun 06 Apr 2025 08:04:49 +0000
ROA not before:           Sun 06 Apr 2025 08:04:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:196:a20:e610/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0a:21:80:63:b4:73:87:85:39:d0:17:77:90:16:b8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
        Validity
            Not Before: Apr  6 08:04:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3b14d56980233aacf567248d760029d92b05ea58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:ac:82:28:43:c3:70:46:5d:61:0a:5a:66:
                    d4:0e:c6:07:e0:b3:e3:15:ba:ea:df:af:dd:df:02:
                    72:1b:14:69:06:5d:ac:e0:ab:d5:46:e6:90:34:0a:
                    da:a4:48:a8:48:94:fd:31:f9:6c:fd:57:ba:3b:50:
                    85:ca:23:22:f7:e4:6c:cf:7b:56:5c:fc:59:55:63:
                    1a:a7:85:3c:9b:79:fe:7b:55:cf:03:03:18:21:86:
                    4c:07:0b:3a:41:d3:2c:a5:5f:65:cb:34:de:52:45:
                    d8:5a:74:11:27:a0:4e:47:6a:97:5b:f2:bc:a1:7b:
                    7d:90:df:ed:79:17:58:74:b6:bd:a5:83:4d:9e:7e:
                    8a:02:cb:ee:27:09:46:e1:33:46:af:71:a4:8d:90:
                    96:12:37:a7:fb:0a:83:ff:4c:70:2d:6e:18:6d:db:
                    7c:5b:0e:f9:7f:f8:08:f9:36:87:94:ca:e4:d6:53:
                    7e:6b:7e:24:f8:ff:60:9a:86:5c:b8:0d:61:9e:b7:
                    b4:cf:d9:6a:ee:8b:4e:92:f9:bd:bd:e4:97:cc:20:
                    7d:59:41:03:f7:17:7a:53:bc:ab:8b:c5:5c:7c:f8:
                    89:f6:cd:41:23:02:ac:3a:69:f2:3e:3b:30:28:2c:
                    03:1f:bf:f3:1c:27:48:0c:08:e3:fd:81:b5:10:90:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:14:D5:69:80:23:3A:AC:F5:67:24:8D:76:00:29:D9:2B:05:EA:58
            X509v3 Authority Key Identifier:
                keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/OxTVaYAjOqz1ZySNdgAp2SsF6lg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:196:a20:e610/128

    Signature Algorithm: sha256WithRSAEncryption
         a4:86:da:48:e4:d1:0d:46:9d:4d:e7:01:da:6d:44:4a:b2:4d:
         8e:e6:c7:7a:45:3a:32:6a:15:cc:b1:ee:e1:0d:6b:35:0e:44:
         80:31:31:82:0c:17:9f:4f:aa:bb:df:ba:9f:48:35:6f:20:82:
         20:4d:cb:1c:6a:7f:ad:72:35:92:57:e4:53:e0:6c:08:4e:7f:
         81:ef:9d:04:60:fe:ab:fb:89:54:29:b8:c8:f8:df:e5:98:38:
         a3:d0:7a:3b:e0:08:9f:83:70:bc:ab:4c:11:b8:22:a9:e7:bf:
         02:17:a5:39:36:40:0d:03:ea:eb:16:92:2a:17:59:81:ec:3c:
         5c:f2:7e:a5:24:1a:3d:38:98:4c:ef:9a:0a:8d:b1:d3:87:48:
         15:ae:41:86:17:fc:08:fa:30:81:e7:09:9c:00:5e:3a:81:da:
         b7:88:3d:8b:de:3d:b4:13:69:f3:1d:d7:2f:71:93:af:e7:d3:
         25:df:b9:ac:82:52:71:da:eb:01:46:e7:12:0f:ea:db:2e:2a:
         85:eb:e3:6d:bd:3d:f3:59:25:99:c9:6d:54:9a:e0:2d:98:e2:
         31:c5:56:53:ad:15:ac:d5:9c:b7:b4:ba:b2:4f:c1:4a:ca:25:
         6a:27:0e:59:87:43:c8:f1:8f:c7:42:27:32:e6:8a:94:73:2e:
         fe:83:68:f6
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZYKIYBjtHOHhTnQF3eQFrgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNDA2MDgwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjE0ZDU2OTgwMjMzYWFjZjU2NzI0OGQ3NjAwMjlkOTJiMDVlYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFGsgihDw3BGXWEKWmbUDsYH4LPj
Fbrq36/d3wJyGxRpBl2s4KvVRuaQNArapEioSJT9Mfls/Ve6O1CFyiMi9+Rsz3tW
XPxZVWMap4U8m3n+e1XPAwMYIYZMBws6QdMspV9lyzTeUkXYWnQRJ6BOR2qXW/K8
oXt9kN/teRdYdLa9pYNNnn6KAsvuJwlG4TNGr3GkjZCWEjen+wqD/0xwLW4Ybdt8
Ww75f/gI+TaHlMrk1lN+a34k+P9gmoZcuA1hnre0z9lq7otOkvm9veSXzCB9WUED
9xd6U7yri8VcfPiJ9s1BIwKsOmnyPjswKCwDH7/zHCdIDAjj/YG1EJDInwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFDsU1WmAIzqs9WckjXYAKdkrBepYMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvT3hUVmFZQWpPcXoxWnlTTmRnQXAyU3NGNmxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGWCiDmEDANBgkqhkiG9w0BAQsFAAOCAQEApIbaSOTRDUadTecB2m1ESrJN
jubHekU6MmoVzLHu4Q1rNQ5EgDExggwXn0+qu9+6n0g1byCCIE3LHGp/rXI1klfk
U+BsCE5/ge+dBGD+q/uJVCm4yPjf5Zg4o9B6O+AIn4NwvKtMEbgiqee/AhelOTZA
DQPq6xaSKhdZgew8XPJ+pSQaPTiYTO+aCo2x04dIFa5Bhhf8CPowgecJnABeOoHa
t4g9i949tBNp8x3XL3GTr+fTJd+5rIJScdrrAUbnEg/q2y4qhevjbb0981klmclt
VJrgLZjiMcVWU60VrNWct7S6sk/BSsolaicOWYdDyPGPx0InMuaKlHMu/oNo9g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:12:14 2025 by rpki-client