Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a3a2f33322d3332203d3e20323135343336.roa
File:                     326131343a3763373a3a2f33322d3332203d3e20323135343336.roa (raw, json)
Hash identifier:          ZnCWJRFJJpEVvlzwkot6Yk/b84Fa2TJ6GTVFAZH0Os0=
Subject key identifier:   30:5B:53:3B:0B:51:BB:18:27:2D:B7:86:01:C1:CC:1A:A9:69:49:7F
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       4FE74F9EFF97CFD49A42AA3AAB13CD3CA5D340F7
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a3a2f33322d3332203d3e20323135343336.roa
Signing time:             Sat 18 May 2024 07:19:59 +0000
ROA not before:           Sat 18 May 2024 07:14:59 +0000
ROA not after:            Sat 17 May 2025 07:19:59 +0000
asID:                     215436
IP address blocks:        2a14:7c7::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e7:4f:9e:ff:97:cf:d4:9a:42:aa:3a:ab:13:cd:3c:a5:d3:40:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: May 18 07:14:59 2024 GMT
            Not After : May 17 07:19:59 2025 GMT
        Subject: CN=305B533B0B51BB18272DB78601C1CC1AA969497F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ea:47:94:e7:f1:e0:be:e5:2c:cd:98:39:fc:
                    40:86:2c:76:8b:e7:3a:1e:d3:a3:e0:d6:40:76:98:
                    94:4b:07:c4:c9:89:27:24:56:02:8a:fc:b5:9e:73:
                    44:e6:d1:c4:ae:bc:5b:4a:b3:03:24:73:c8:da:84:
                    ac:77:f8:01:b8:95:7c:6d:9c:63:3d:71:85:e9:2f:
                    dd:ad:99:d3:01:80:10:5f:7c:68:be:9d:42:ee:cd:
                    a1:94:c4:26:5c:d3:63:31:61:7a:96:e1:36:28:7c:
                    c6:8d:cf:c9:4a:0c:87:41:15:83:c5:73:34:a6:6e:
                    f9:d0:49:93:d8:8e:31:0b:97:9a:ab:c0:0f:c5:d0:
                    72:2d:8a:69:df:f7:ea:7a:2b:d3:85:1e:3a:82:15:
                    fa:ba:38:6c:a1:67:36:88:f5:f8:82:77:c7:e1:35:
                    08:75:54:ce:af:78:da:a4:3d:d1:be:fb:2f:74:3a:
                    64:a7:79:41:d4:aa:5b:46:d8:39:d1:17:97:df:bc:
                    c9:e3:bb:81:a1:23:b9:51:4e:14:65:6f:f6:c4:65:
                    1e:a2:b7:66:4b:91:67:8b:63:42:1a:3c:e4:8c:37:
                    32:c9:bf:c4:54:02:e3:3e:78:d3:2d:ff:77:26:55:
                    3a:6e:95:3c:67:99:59:a5:27:85:83:5f:f4:0d:47:
                    d2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5B:53:3B:0B:51:BB:18:27:2D:B7:86:01:C1:CC:1A:A9:69:49:7F
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a3a2f33322d3332203d3e20323135343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:d7:35:27:de:23:80:03:71:24:51:72:d3:a6:83:d3:b1:d5:
         29:26:cb:92:f3:a7:5d:76:9b:f6:b6:e3:ea:d4:9f:8f:ae:0b:
         d7:88:05:33:d1:df:84:21:b0:5d:75:02:21:2d:d7:3b:46:fb:
         3e:ea:58:1e:20:4b:21:56:6c:61:df:59:43:22:21:0b:a1:89:
         85:0c:d5:c8:4c:90:14:4d:9c:f3:b6:45:0d:45:60:0a:a9:3d:
         9f:b1:8e:03:e3:e6:c4:75:2f:30:2b:d9:bd:7e:43:54:24:22:
         8c:75:c1:45:37:87:57:41:49:f0:73:4f:d0:eb:4b:ec:2a:5c:
         06:14:bb:7d:09:83:7d:96:5e:9d:a7:bc:18:61:97:d8:e7:10:
         61:c9:69:86:a4:60:cf:14:ee:b2:a1:af:b0:9e:20:96:80:e8:
         46:f1:15:80:5f:ba:d2:e1:10:ca:d6:db:30:a7:61:bf:4c:73:
         66:27:62:aa:59:5a:d3:cf:a4:70:08:11:f6:c3:13:64:6d:01:
         32:31:fe:b5:b1:68:40:0b:f0:0d:d0:0d:43:a1:7f:68:42:28:
         dc:9f:31:2a:57:69:2d:e1:14:e7:d0:33:58:75:66:0e:a4:dc:
         0b:e8:a8:f1:51:d2:1c:71:cb:3e:e5:2a:f7:6c:34:3e:57:7c:
         f6:1e:38:16
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUT+dPnv+Xz9SaQqo6qxPNPKXTQPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDA1MTgwNzE0NTlaFw0yNTA1MTcwNzE5NTlaMDMxMTAvBgNV
BAMTKDMwNUI1MzNCMEI1MUJCMTgyNzJEQjc4NjAxQzFDQzFBQTk2OTQ5N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS6keU5/HgvuUszZg5/ECGLHaL
5zoe06Pg1kB2mJRLB8TJiSckVgKK/LWec0Tm0cSuvFtKswMkc8jahKx3+AG4lXxt
nGM9cYXpL92tmdMBgBBffGi+nULuzaGUxCZc02MxYXqW4TYofMaNz8lKDIdBFYPF
czSmbvnQSZPYjjELl5qrwA/F0HItimnf9+p6K9OFHjqCFfq6OGyhZzaI9fiCd8fh
NQh1VM6veNqkPdG++y90OmSneUHUqltG2DnRF5ffvMnju4GhI7lRThRlb/bEZR6i
t2ZLkWeLY0IaPOSMNzLJv8RUAuM+eNMt/3cmVTpulTxnmVmlJ4WDX/QNR9IlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUMFtTOwtRuxgnLbeGAcHMGqlpSX8wHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzNzNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzEzNTM0MzMzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoU
B8cwDQYJKoZIhvcNAQELBQADggEBALjXNSfeI4ADcSRRctOmg9Ox1Skmy5Lzp112
m/a24+rUn4+uC9eIBTPR34QhsF11AiEt1ztG+z7qWB4gSyFWbGHfWUMiIQuhiYUM
1chMkBRNnPO2RQ1FYAqpPZ+xjgPj5sR1LzAr2b1+Q1QkIox1wUU3h1dBSfBzT9Dr
S+wqXAYUu30Jg32WXp2nvBhhl9jnEGHJaYakYM8U7rKhr7CeIJaA6EbxFYBfutLh
EMrW2zCnYb9Mc2YnYqpZWtPPpHAIEfbDE2RtATIx/rWxaEAL8A3QDUOhf2hCKNyf
MSpXaS3hFOfQM1h1Zg6k3AvoqPFR0hxxyz7lKvdsND5XfPYeOBY=
-----END CERTIFICATE-----