Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/7YARPQdaOfAfP7z49sWifiPjIb4.roa
File:                     7YARPQdaOfAfP7z49sWifiPjIb4.roa (raw, json)
Hash identifier:          oDKL9sSNMsir8IssQMT/GhxAdUizw+2YGT6nm9dI+lg=
Subject key identifier:   ED:80:11:3D:07:5A:39:F0:1F:3F:BC:F8:F6:C5:A2:7E:23:E3:21:BE
Certificate issuer:       /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial:       018B89FAEDCBBFF8781570BBE57AF0717F1C
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/7YARPQdaOfAfP7z49sWifiPjIb4.roa
Signing time:             Wed 01 Nov 2023 08:23:25 +0000
ROA not before:           Wed 01 Nov 2023 08:23:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204916
IP address blocks:        2a0c:4182::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:89:fa:ed:cb:bf:f8:78:15:70:bb:e5:7a:f0:71:7f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
        Validity
            Not Before: Nov  1 08:23:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed80113d075a39f01f3fbcf8f6c5a27e23e321be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:95:b7:94:0f:8b:74:f0:03:d5:ec:0f:9f:c5:
                    3b:43:43:a6:6a:af:91:a8:08:e8:9e:58:c1:8f:a4:
                    02:b9:3e:09:9f:00:ee:80:b1:bf:b8:a7:1b:96:37:
                    5e:38:b6:37:ae:17:9e:d1:7b:35:20:24:b4:81:cf:
                    02:bb:09:15:b5:04:43:c8:fc:1d:d8:5f:46:ff:ae:
                    12:d4:47:4c:f4:5c:b6:9a:58:f3:00:c9:41:10:7f:
                    72:5b:51:37:05:8c:ba:75:c7:0f:65:e6:e1:af:39:
                    ec:6b:c1:1d:46:1d:f6:87:78:c3:ca:d3:31:3a:ba:
                    92:4a:b0:50:a5:81:ab:31:c5:af:34:56:16:86:0b:
                    a6:31:b9:12:54:76:db:bf:82:da:fa:85:ca:67:fa:
                    68:b8:35:59:ae:2e:bf:ec:58:56:30:c4:ac:97:57:
                    08:84:26:42:20:bf:32:66:08:ca:86:ae:dc:4d:66:
                    a3:73:7e:50:42:42:5a:16:3a:e9:14:4d:40:2b:b9:
                    07:61:98:4d:38:61:e3:b3:62:f7:1a:64:6d:4b:19:
                    98:50:23:5b:ec:29:77:66:b9:f6:4b:13:7e:79:4b:
                    32:1a:2a:6b:da:ce:17:7d:cc:b1:fd:cf:35:e8:d1:
                    2d:7a:7d:f1:c2:43:ec:bb:61:a7:02:57:07:d8:84:
                    70:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:80:11:3D:07:5A:39:F0:1F:3F:BC:F8:F6:C5:A2:7E:23:E3:21:BE
            X509v3 Authority Key Identifier:
                keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/7YARPQdaOfAfP7z49sWifiPjIb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:4182::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:1c:15:10:33:47:28:35:23:20:8b:05:ab:b8:1c:05:1c:48:
         e9:c6:41:1e:46:60:63:42:dd:f6:61:6c:1e:4f:39:42:f9:03:
         80:f6:41:cd:3b:b2:26:4a:cb:29:5c:0c:69:92:1d:8b:1f:29:
         e2:cf:78:6f:3f:c9:b2:be:da:3d:90:2b:ba:50:01:9e:16:d8:
         54:10:3d:b1:bf:2d:e7:01:7b:a3:eb:d9:4d:b6:08:0e:96:ee:
         c3:3e:c8:c9:04:d5:2c:78:0e:c7:cd:4e:8e:a4:c9:34:60:c8:
         ff:01:01:f8:e4:ae:a6:aa:fb:b1:38:76:a4:31:ec:68:23:af:
         46:98:f4:7f:8e:2b:97:7d:0e:72:77:41:fd:54:91:a2:d1:78:
         92:e7:4d:44:81:14:94:90:4f:b1:67:ba:8b:50:b9:4a:5e:f8:
         e7:e9:d9:30:f8:c6:a8:66:0d:b6:78:40:e1:4d:6e:08:12:b8:
         17:4f:a3:bb:78:8a:3f:7b:0e:cb:6f:06:1d:98:8f:96:9c:0c:
         d0:66:1e:30:e4:fc:a0:29:db:b2:94:6a:4d:f9:53:d4:c8:4d:
         78:d5:cf:7c:1c:1f:b0:6d:fa:2e:91:27:49:55:cf:cb:7f:ae:
         83:17:be:e7:4f:43:c4:56:3c:3b:56:a8:b3:6f:a2:68:50:8b:
         46:44:21:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----