Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa
File:                     326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa (raw, json)
Hash identifier:          mVqYPHXZFgCW00Y2ej0uNLFZlmcciaFr8mPxKhhXZIs=
Subject key identifier:   84:5E:79:0F:A1:29:93:C8:44:81:2E:FF:13:20:A5:6E:92:67:48:99
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       7103C1213740F2FC8CB2F7150462D6B643270EE8
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa
Signing time:             Fri 10 Jan 2025 16:15:03 +0000
ROA not before:           Fri 10 Jan 2025 16:10:03 +0000
ROA not after:            Fri 09 Jan 2026 16:15:03 +0000
asID:                     140915
IP address blocks:        2a14:7580:9400::/39 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:03:c1:21:37:40:f2:fc:8c:b2:f7:15:04:62:d6:b6:43:27:0e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jan 10 16:10:03 2025 GMT
            Not After : Jan  9 16:15:03 2026 GMT
        Subject: CN=845E790FA12993C844812EFF1320A56E92674899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:ee:43:3d:42:db:44:b6:9b:93:ee:05:16:
                    71:ab:6b:8e:b3:3e:36:63:30:46:95:98:e6:ab:d9:
                    b3:61:bf:ea:f5:ed:87:89:58:79:db:4a:58:f9:f2:
                    1d:f2:d8:5b:23:2f:b2:de:19:3b:0d:11:9f:e0:25:
                    e7:f2:d8:a0:a7:e4:13:86:1c:46:1b:4a:c9:63:d8:
                    1c:74:9d:c5:d4:2f:98:99:24:3e:0e:2a:b8:0a:f2:
                    d3:8b:56:c8:c4:e2:4f:fd:39:4b:a6:f6:ef:e7:03:
                    56:94:4f:05:ae:c3:20:c5:7e:d5:43:7d:47:c0:1c:
                    ae:b8:89:1d:ab:50:be:ee:b7:34:9f:51:5d:d5:bb:
                    39:50:6f:31:34:5b:52:ee:2f:12:de:de:5a:6e:3e:
                    0e:89:8a:0d:64:6b:bb:51:0a:6f:12:83:00:c2:f6:
                    66:45:b3:38:87:17:ca:77:cb:8e:ab:41:29:fe:89:
                    35:e4:08:df:2c:5e:95:82:36:7b:48:bd:c9:89:70:
                    2e:fc:f9:fd:3c:e5:3a:e7:92:32:99:60:aa:64:3b:
                    a3:74:43:68:5d:28:55:89:63:df:a2:9f:67:48:d7:
                    6f:ec:2c:19:0d:51:c3:2f:8e:37:bb:be:50:6a:db:
                    08:a5:31:34:08:97:79:6b:fe:a6:db:37:06:bf:3b:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5E:79:0F:A1:29:93:C8:44:81:2E:FF:13:20:A5:6E:92:67:48:99
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:9400::/39

    Signature Algorithm: sha256WithRSAEncryption
         66:d9:5d:20:b5:76:c2:a3:c4:3e:d5:d7:03:27:64:78:83:06:
         32:9e:29:50:ec:f2:11:d1:7e:fb:cd:17:ef:83:d2:1b:a4:df:
         95:15:8b:8c:3b:da:82:71:7a:ea:a3:ab:63:8b:e1:77:fd:b8:
         23:a1:50:e6:22:36:9a:ca:5e:7f:ce:73:c5:bc:b6:77:e3:2e:
         09:de:13:28:2a:a8:36:d2:1c:07:36:d0:4b:91:e8:a1:05:10:
         7f:e0:7c:d3:a8:37:14:47:b1:30:98:93:e7:98:59:c0:e7:41:
         1c:ed:d4:7c:4f:f9:49:ce:01:8d:cd:e9:c9:4a:30:35:bc:39:
         aa:47:e9:6d:e9:ec:ad:c1:66:99:68:2c:f4:ef:e4:d2:46:72:
         c3:df:83:a0:12:ac:9c:12:13:81:de:70:d8:3d:f2:59:ac:48:
         3a:db:bd:ef:b6:f6:70:e4:ab:17:cd:4b:2a:58:9d:5a:db:13:
         2f:62:5b:6f:21:04:b9:ef:dc:5e:22:14:d1:39:fb:f6:ea:50:
         78:9b:20:8a:c5:61:22:23:7b:ed:af:0d:7b:24:81:95:28:c0:
         61:ba:8a:ca:65:7a:84:eb:10:63:cb:b0:5c:01:b0:72:82:68:
         5d:b9:74:b1:97:79:34:4c:6e:d0:e3:e2:fa:69:97:fe:1a:2a:
         0c:4b:97:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----