Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/pTfgjw72gQb1KU5LFVg2dslTLZE.roa
File:                     pTfgjw72gQb1KU5LFVg2dslTLZE.roa (raw, json)
Hash identifier:          MUEYHe0OUZ4/qxz+h+PGHmIUdQjzg2Ugg7s8SLtROzs=
Subject key identifier:   A5:37:E0:8F:0E:F6:81:06:F5:29:4E:4B:15:58:36:76:C9:53:2D:91
Certificate issuer:       /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial:       0194C762289267D3F793130C5F4CFF8B8A1D
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/pTfgjw72gQb1KU5LFVg2dslTLZE.roa
Signing time:             Sun 02 Feb 2025 15:58:06 +0000
ROA not before:           Sun 02 Feb 2025 15:58:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        46.29.36.0/24 maxlen: 24
                          2a13:d040:1::/48 maxlen: 48
                          2a13:d040:2::/48 maxlen: 48
                          2a13:d040:3::/48 maxlen: 48
                          2a13:d040:10::/48 maxlen: 48
                          2a13:d040:11::/48 maxlen: 48
                          2a13:d040:12::/48 maxlen: 48
                          2a13:d040:13::/48 maxlen: 48
                          2a13:d040:14::/48 maxlen: 48
                          2a13:d040:15::/48 maxlen: 48
                          2a13:d040:16::/48 maxlen: 48
                          2a13:d040:17::/48 maxlen: 48
                          2a13:d040:18::/48 maxlen: 48
                          2a13:d040:19::/48 maxlen: 48
                          2a13:d040:1a::/48 maxlen: 48
                          2a13:d040:1b::/48 maxlen: 48
                          2a13:d040:1c::/48 maxlen: 48
                          2a13:d040:1d::/48 maxlen: 48
                          2a13:d040:1e::/48 maxlen: 48
                          2a13:d040:1f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c7:62:28:92:67:d3:f7:93:13:0c:5f:4c:ff:8b:8a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
        Validity
            Not Before: Feb  2 15:58:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a537e08f0ef68106f5294e4b15583676c9532d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a1:63:29:b4:b3:ac:be:2b:95:6a:9c:72:55:
                    74:e8:92:d4:71:78:89:95:1e:43:d0:15:be:48:8a:
                    6f:cb:81:a5:fc:ad:9e:54:71:d6:d3:a0:76:a3:84:
                    3a:97:16:b1:c0:cc:89:20:77:7a:cf:ba:18:6d:ee:
                    61:28:8c:3f:e0:d3:bf:fc:ed:6b:27:a1:70:d3:08:
                    a5:d9:2f:af:fe:1a:5a:2f:1a:b5:87:67:b2:43:01:
                    4a:be:f1:eb:cf:8a:1d:db:a2:16:19:90:67:b0:8a:
                    7b:3a:a6:20:49:5a:7d:d3:ec:30:df:ae:04:1b:bf:
                    dc:2d:f3:05:8c:73:d4:27:d9:6c:50:5f:5d:be:eb:
                    46:b5:37:22:52:b3:b6:b1:47:58:b6:99:d1:17:fa:
                    0b:a5:a7:2e:47:4d:41:7f:2f:12:2a:8e:cd:7e:ad:
                    00:66:25:55:ba:ea:ac:4d:f5:1c:47:10:b0:b1:ba:
                    42:d8:16:53:8a:b8:1a:af:bd:01:e8:1d:02:88:79:
                    95:4f:df:fb:4b:f6:df:f3:db:be:9c:b6:01:1b:14:
                    c4:ef:60:c5:3f:5b:a1:fa:fb:d7:52:a8:1f:02:ea:
                    95:47:c7:de:30:b9:bd:1c:f4:0c:0d:2a:9d:0b:ea:
                    2d:49:62:ba:26:63:eb:c3:0a:29:2b:fe:f7:9f:97:
                    6a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:37:E0:8F:0E:F6:81:06:F5:29:4E:4B:15:58:36:76:C9:53:2D:91
            X509v3 Authority Key Identifier:
                keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/pTfgjw72gQb1KU5LFVg2dslTLZE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.29.36.0/24
                IPv6:
                  2a13:d040:1::-2a13:d040:3:ffff:ffff:ffff:ffff:ffff
                  2a13:d040:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         7f:87:37:ad:9e:b4:dd:d4:27:ae:73:be:04:d2:44:0a:88:43:
         59:b7:2c:27:f6:f5:84:9b:c9:bf:cd:f5:d0:eb:d4:7e:e3:7b:
         4d:f2:4c:7a:c2:9e:65:b1:2b:a3:82:38:22:21:49:f2:8b:e8:
         9a:85:37:46:61:cf:5d:a9:d0:27:80:e0:ac:53:39:f9:8a:c9:
         d3:9f:8e:b8:e4:fe:14:bc:b7:a7:d9:b4:bd:6e:e2:22:b6:1a:
         c8:29:cd:7c:83:b8:df:27:aa:0c:1d:36:d3:87:ea:8f:0e:22:
         67:73:b9:bb:76:d1:75:25:73:1a:bb:d6:1b:93:5e:41:fb:1b:
         c5:0d:b1:9d:2f:8e:b0:41:49:2f:f3:0e:95:63:e3:7e:d8:4d:
         fd:58:2b:a8:da:3b:76:60:7c:db:b0:aa:b8:eb:c2:1d:27:c9:
         4c:ec:01:56:cb:e8:cb:f5:cb:07:65:e9:8d:7c:d6:7f:38:1d:
         08:3b:2a:93:5e:c2:94:3a:35:4e:b5:d5:d7:56:cc:7e:4e:75:
         e6:7c:0e:ae:9d:a8:67:ea:a4:1c:e4:51:87:40:a6:02:a3:09:
         21:51:fc:d0:4a:03:bd:9a:d2:da:71:01:5c:61:ff:b4:de:ea:
         ed:f6:ec:cd:b8:5b:95:61:1d:ff:e7:bd:48:45:82:f3:54:66:
         51:7b:ce:07
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAZTHYiiSZ9P3kxMMX0z/i4odMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYThmYTc1YzUwMjBjZDYyMThjZjdmMTA5ZGU0MjAyNjUy
MDRiYWMwHhcNMjUwMjAyMTU1ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTM3ZTA4ZjBlZjY4MTA2ZjUyOTRlNGIxNTU4MzY3NmM5NTMyZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qFjKbSzrL4rlWqcclV06JLUcXiJ
lR5D0BW+SIpvy4Gl/K2eVHHW06B2o4Q6lxaxwMyJIHd6z7oYbe5hKIw/4NO//O1r
J6Fw0wil2S+v/hpaLxq1h2eyQwFKvvHrz4od26IWGZBnsIp7OqYgSVp90+ww364E
G7/cLfMFjHPUJ9lsUF9dvutGtTciUrO2sUdYtpnRF/oLpacuR01Bfy8SKo7Nfq0A
ZiVVuuqsTfUcRxCwsbpC2BZTirgar70B6B0CiHmVT9/7S/bf89u+nLYBGxTE72DF
P1uh+vvXUqgfAuqVR8feMLm9HPQMDSqdC+otSWK6JmPrwwopK/73n5dqkwIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFKU34I8O9oEG9SlOSxVYNnbJUy2RMB8GA1UdIwQY
MBaAFGqo+nXFAgzWIYz38QneQgJlIEusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAt
MzVjNjNmYTc2NWEyLzEvcFRmZ2p3NzJnUWIxS1U1TEZWZzJkc2xUTFpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAtMzVjNjNmYTc2NWEy
LzEvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAMBAIAATAGAwQALh0kMCME
AgACMB0wEgMHACoT0EAAAQMHAioT0EAAAAMHBCoT0EAAEDANBgkqhkiG9w0BAQsF
AAOCAQEAf4c3rZ603dQnrnO+BNJECohDWbcsJ/b1hJvJv8310OvUfuN7TfJMesKe
ZbEro4I4IiFJ8ovomoU3RmHPXanQJ4DgrFM5+YrJ05+OuOT+FLy3p9m0vW7iIrYa
yCnNfIO43yeqDB0204fqjw4iZ3O5u3bRdSVzGrvWG5NeQfsbxQ2xnS+OsEFJL/MO
lWPjfthN/VgrqNo7dmB827CquOvCHSfJTOwBVsvoy/XLB2XpjXzWfzgdCDsqk17C
lDo1TrXV11bMfk515nwOrp2oZ+qkHORRh0CmAqMJIVH80EoDvZrS2nEBXGH/tN7q
7fbszbhblWEd/+e9SEWC81RmUXvOBw==
-----END CERTIFICATE-----