Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/7NbpdH0brOhpYkB5TkO19YmU9-0.roa
File:                     7NbpdH0brOhpYkB5TkO19YmU9-0.roa (raw, json)
Hash identifier:          eTbBw8ESq3LavO9XbO1zU1mjoQ+T4zcyO3yQikEaPV8=
Subject key identifier:   EC:D6:E9:74:7D:1B:AC:E8:69:62:40:79:4E:43:B5:F5:89:94:F7:ED
Certificate issuer:       /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial:       01944C61B4126CAB3CB5C411F8C007D5AA1C
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/7NbpdH0brOhpYkB5TkO19YmU9-0.roa
Signing time:             Thu 09 Jan 2025 18:44:19 +0000
ROA not before:           Thu 09 Jan 2025 18:44:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214610
IP address blocks:        2a0f:7803:f5d0::/44 maxlen: 48
                          2a0f:7803:f5e0::/44 maxlen: 48
                          2a0f:7803:f5f0::/44 maxlen: 48
                          2a0f:7803:f680::/44 maxlen: 48
                          2a0f:7803:f690::/44 maxlen: 48
                          2a0f:7803:f6a0::/44 maxlen: 48
                          2a0f:7803:f7c0::/44 maxlen: 48
                          2a0f:7803:f7d0::/44 maxlen: 48
                          2a0f:7803:f7e0::/44 maxlen: 48
                          2a0f:7803:f7f0::/44 maxlen: 48
                          2a0f:7803:f800::/44 maxlen: 48
                          2a0f:7803:f810::/44 maxlen: 48
                          2a0f:7803:f840::/44 maxlen: 48
                          2a0f:7803:f860::/44 maxlen: 48
                          2a0f:7803:f8b0::/44 maxlen: 48
                          2a0f:7803:f970::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:4c:61:b4:12:6c:ab:3c:b5:c4:11:f8:c0:07:d5:aa:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
        Validity
            Not Before: Jan  9 18:44:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ecd6e9747d1bace8696240794e43b5f58994f7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ee:60:cb:7e:71:c2:35:38:ad:df:24:bc:88:
                    e3:eb:92:4b:3d:61:67:64:a7:f9:b9:68:80:b6:40:
                    1c:80:2a:23:59:27:09:61:76:2a:9c:e9:ed:1f:4b:
                    1b:54:4c:d9:53:af:e0:88:39:8e:97:c5:b2:a3:75:
                    55:93:8f:7e:0e:2a:7a:44:eb:45:c2:93:20:ed:aa:
                    5e:64:47:99:73:49:5e:ff:06:72:b1:c1:e7:07:40:
                    20:20:d8:06:71:cc:95:82:55:7a:01:6c:20:13:22:
                    b9:25:68:ac:34:02:69:ca:a6:9d:21:db:86:a7:df:
                    dc:84:fd:27:a0:8c:93:99:d8:e2:5c:eb:31:e2:9e:
                    fc:22:30:48:ab:81:9b:3f:65:99:17:fb:57:26:e8:
                    7b:43:1c:40:a5:73:19:79:ec:98:3f:c2:49:d0:1b:
                    b5:90:24:f6:19:5d:12:08:fc:d5:c3:27:83:de:1e:
                    c6:35:6e:fd:3e:91:17:66:4a:f2:eb:15:33:81:2d:
                    00:a9:5c:fb:b1:34:c9:7e:26:09:0a:99:38:50:5f:
                    69:14:ce:84:5f:83:a9:59:4d:b3:fa:16:15:c8:1f:
                    7d:65:ae:a8:f4:ff:42:2a:ee:27:2e:70:c1:9b:a4:
                    51:28:8c:98:c3:68:52:5f:97:46:0b:87:be:60:be:
                    a2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D6:E9:74:7D:1B:AC:E8:69:62:40:79:4E:43:B5:F5:89:94:F7:ED
            X509v3 Authority Key Identifier:
                keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/7NbpdH0brOhpYkB5TkO19YmU9-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:7803:f5d0::-2a0f:7803:f5ff:ffff:ffff:ffff:ffff:ffff
                  2a0f:7803:f680::-2a0f:7803:f6af:ffff:ffff:ffff:ffff:ffff
                  2a0f:7803:f7c0::-2a0f:7803:f81f:ffff:ffff:ffff:ffff:ffff
                  2a0f:7803:f840::/44
                  2a0f:7803:f860::/44
                  2a0f:7803:f8b0::/44
                  2a0f:7803:f970::/44

    Signature Algorithm: sha256WithRSAEncryption
         1f:10:44:84:d1:4e:9a:85:1d:8d:d3:97:2e:b3:e0:42:89:43:
         17:c8:95:be:f0:34:2a:b7:dd:85:22:72:71:f0:ef:af:11:f7:
         33:82:ca:0f:43:ab:58:ea:6e:59:d5:b0:1e:b3:99:6e:89:92:
         6f:09:8f:93:a7:43:b2:8e:78:63:f5:bc:61:c2:a7:eb:b3:75:
         63:59:0a:5b:23:d0:4d:f2:ba:95:0d:7d:8c:0e:1b:44:19:d8:
         b6:a2:7e:5a:b2:5b:fb:38:e5:7c:fb:ea:86:d0:3e:f5:65:66:
         44:8c:e3:60:8c:0f:9e:62:15:d0:65:0c:40:bc:34:d9:5e:3a:
         1f:e3:8e:ac:ea:da:e6:8f:32:51:0d:0a:6d:29:f4:d1:96:96:
         72:06:9a:be:c9:dd:e4:6b:ea:be:52:6a:bb:87:10:94:f9:bc:
         0b:5a:b8:2f:ef:1a:34:2d:b5:07:90:15:7a:6b:5a:e5:2e:aa:
         70:59:e3:24:aa:ae:7b:81:fc:ee:13:5e:3a:1d:74:e5:8b:84:
         5e:56:bd:0b:58:30:64:67:12:1b:67:a1:40:4f:dc:ce:66:90:
         ea:98:99:07:8a:0e:4a:12:03:e0:d8:0b:5a:a4:2a:90:b4:32:
         eb:c9:e6:8a:ef:35:4c:0e:13:b0:a5:61:3e:4e:12:61:ca:52:
         7b:d5:87:26
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAZRMYbQSbKs8tcQR+MAH1aocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw
ZDcwZTUwHhcNMjUwMTA5MTg0NDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2Q2ZTk3NDdkMWJhY2U4Njk2MjQwNzk0ZTQzYjVmNTg5OTRmN2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u5gy35xwjU4rd8kvIjj65JLPWFn
ZKf5uWiAtkAcgCojWScJYXYqnOntH0sbVEzZU6/giDmOl8Wyo3VVk49+Dip6ROtF
wpMg7apeZEeZc0le/wZyscHnB0AgINgGccyVglV6AWwgEyK5JWisNAJpyqadIduG
p9/chP0noIyTmdjiXOsx4p78IjBIq4GbP2WZF/tXJuh7QxxApXMZeeyYP8JJ0Bu1
kCT2GV0SCPzVwyeD3h7GNW79PpEXZkry6xUzgS0AqVz7sTTJfiYJCpk4UF9pFM6E
X4OpWU2z+hYVyB99Za6o9P9CKu4nLnDBm6RRKIyYw2hSX5dGC4e+YL6i1QIDAQAB
o4ICYjCCAl4wHQYDVR0OBBYEFOzW6XR9G6zoaWJAeU5DtfWJlPftMB8GA1UdIwQY
MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt
ZjViNmE3MThmNGI1LzEvN05icGRIMGJyT2hwWWtCNVRrTzE5WW1VOS0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1
LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBlBAIAAjBfMBEDBwQqD3gD
9dADBgEqD3gD9DASAwcHKg94A/aAAwcEKg94A/agMBIDBwYqD3gD98ADBwUqD3gD
+AADBwQqD3gD+EADBwQqD3gD+GADBwQqD3gD+LADBwQqD3gD+XAwDQYJKoZIhvcN
AQELBQADggEBAB8QRITRTpqFHY3Tly6z4EKJQxfIlb7wNCq33YUicnHw768R9zOC
yg9Dq1jqblnVsB6zmW6Jkm8Jj5OnQ7KOeGP1vGHCp+uzdWNZClsj0E3yupUNfYwO
G0QZ2LaiflqyW/s45Xz76obQPvVlZkSM42CMD55iFdBlDEC8NNleOh/jjqzq2uaP
MlENCm0p9NGWlnIGmr7J3eRr6r5SaruHEJT5vAtauC/vGjQttQeQFXprWuUuqnBZ
4ySqrnuB/O4TXjoddOWLhF5WvQtYMGRnEhtnoUBP3M5mkOqYmQeKDkoSA+DYC1qk
KpC0MuvJ5orvNUwOE7ClYT5OEmHKUnvVhyY=
-----END CERTIFICATE-----