Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/6-RVtNPNNONWR2Pwkwrsl7uvc6A.roa
File:                     6-RVtNPNNONWR2Pwkwrsl7uvc6A.roa (raw, json)
Hash identifier:          Y1J0uSScN9GjBevjQmfi8GqOiJ81DUKBDIIaumyaHQE=
Subject key identifier:   EB:E4:55:B4:D3:CD:34:E3:56:47:63:F0:93:0A:EC:97:BB:AF:73:A0
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       01856D53D6C5CF60C735C0A30B86A4217854
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/6-RVtNPNNONWR2Pwkwrsl7uvc6A.roa
Signing time:             Sun 01 Jan 2023 12:34:48 +0000
ROA not before:           Sun 01 Jan 2023 12:34:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207359
IP address blocks:        2a11:29c0:3dfe::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:d6:c5:cf:60:c7:35:c0:a3:0b:86:a4:21:78:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Jan  1 12:34:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ebe455b4d3cd34e3564763f0930aec97bbaf73a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:d6:90:3a:69:ad:43:58:74:d7:05:5d:68:
                    f3:35:e5:60:32:4d:89:11:de:ec:3f:60:5d:77:03:
                    ac:3f:be:82:ff:6c:27:d2:3f:03:72:c3:44:15:47:
                    f9:66:31:3a:69:57:98:93:8f:f3:39:53:b0:5f:50:
                    fa:20:b6:10:b3:7b:7e:13:f9:82:3f:07:3a:4c:64:
                    f5:93:73:7b:98:d3:ae:a7:aa:c0:cf:ce:d4:00:c6:
                    b8:ad:0f:7d:77:91:5d:0c:43:c8:4c:0f:b4:82:5f:
                    77:af:bb:2c:cf:67:4a:c0:0d:75:a5:b1:36:10:a0:
                    c0:9d:62:1f:87:34:f7:58:62:2e:8d:35:94:40:01:
                    4e:1f:1a:87:12:a2:95:86:04:30:9e:e2:32:14:74:
                    53:c3:1a:45:dd:5e:98:4d:40:4a:9b:07:96:1a:0f:
                    27:d9:a3:88:cd:18:94:f4:50:16:0e:e1:c9:70:d5:
                    cc:8a:7b:67:b3:23:90:fc:39:64:67:fe:1b:2f:8e:
                    6d:50:96:e3:aa:1c:93:4f:8e:55:c4:a4:2b:3f:36:
                    88:b5:65:ec:c5:2e:90:18:4a:4b:b4:38:8c:fe:68:
                    ff:cc:72:43:da:f8:c6:ed:b7:2a:f5:d4:fb:66:40:
                    da:e6:09:f5:b9:31:43:fd:cf:35:94:1c:e2:eb:01:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E4:55:B4:D3:CD:34:E3:56:47:63:F0:93:0A:EC:97:BB:AF:73:A0
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/6-RVtNPNNONWR2Pwkwrsl7uvc6A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3dfe::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:76:99:2c:00:0a:8a:2b:a9:c2:89:5c:e8:82:8c:b3:cc:ba:
         9e:9a:23:49:91:f3:b2:48:e4:86:49:ff:a2:de:80:e6:75:3d:
         f9:85:86:39:f8:07:90:14:b0:a7:72:98:89:b8:dc:04:69:c2:
         cf:a0:69:3b:b7:2b:eb:a8:b2:23:14:71:91:f8:29:c9:c4:3f:
         03:32:32:f1:cf:e1:86:41:c5:c2:40:5d:0b:87:bb:38:93:c3:
         85:c1:85:26:b5:d4:13:02:19:d8:cc:7e:9d:7d:1b:fd:a2:6e:
         14:95:18:eb:15:7d:a5:fd:e2:eb:36:da:bd:4a:28:39:cd:e0:
         13:28:fe:a0:f6:2f:a2:bc:fe:a1:ee:92:bd:34:80:39:9d:39:
         71:d4:7f:9f:0c:30:71:5e:85:37:67:74:9b:bc:15:43:51:66:
         24:a6:5a:90:db:42:06:a8:6a:f4:c8:58:a9:c6:af:d3:67:91:
         5d:dc:97:dc:d9:c2:52:ce:95:89:f2:e2:f9:fd:6e:9c:72:32:
         e0:c6:97:6f:01:3e:0e:51:9b:cf:97:49:24:d9:57:89:c4:07:
         05:85:bb:8a:7a:7f:06:70:81:61:48:b3:ca:26:07:f7:41:17:
         37:f5:0b:a3:78:99:18:c1:f8:00:7e:b7:61:e5:eb:75:3c:0e:
         8c:9a:82:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:00:55 2025 by rpki-client