Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663430303a3a2f34302d313238203d3e203439383637.roa
File:                     326130353a646663333a663430303a3a2f34302d313238203d3e203439383637.roa (raw, json)
Hash identifier:          dISVG+BDDZf3yMN1OHHZbZtEtfptL4Z/YKQxJ+oC3XQ=
Subject key identifier:   D6:60:E0:3D:57:F3:70:9E:13:6B:B8:F4:D9:FB:FC:4B:88:EF:00:E8
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       78273D0A980E7C681D4B69339CD730C9D8D3D0A6
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663430303a3a2f34302d313238203d3e203439383637.roa
Signing time:             Sat 14 Jun 2025 09:24:21 +0000
ROA not before:           Sat 14 Jun 2025 09:19:21 +0000
ROA not after:            Sat 13 Jun 2026 09:24:21 +0000
asID:                     49867
IP address blocks:        2a05:dfc3:f400::/40 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:27:3d:0a:98:0e:7c:68:1d:4b:69:33:9c:d7:30:c9:d8:d3:d0:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Jun 14 09:19:21 2025 GMT
            Not After : Jun 13 09:24:21 2026 GMT
        Subject: CN=D660E03D57F3709E136BB8F4D9FBFC4B88EF00E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:01:d6:a3:97:de:30:a7:d9:69:4a:07:3e:
                    28:85:ff:0b:6e:0a:cd:60:4d:21:3b:db:1c:df:26:
                    8e:e7:fe:68:bb:03:e9:a2:4b:95:1e:5f:86:1e:33:
                    81:06:3a:0c:cf:7e:04:1f:ba:fe:9c:26:6a:fc:4a:
                    95:d2:23:31:93:32:94:e9:b5:a4:ee:fe:1c:09:22:
                    c8:3f:d7:7a:ae:16:bc:e4:a5:fb:20:ba:6d:57:3b:
                    92:21:3b:f3:08:68:70:91:66:7d:01:cb:e4:1a:6e:
                    a8:a2:ee:a0:b8:49:6c:41:40:44:ae:45:8c:b8:2c:
                    66:12:ac:cb:54:9b:65:f0:4c:2a:18:55:3a:0f:16:
                    09:4f:b4:a9:ec:65:f5:9d:b1:fb:c0:22:19:d1:cf:
                    d0:e8:ea:84:54:a7:98:c9:6f:cf:59:b4:18:48:d2:
                    c3:9a:e9:b4:0f:5f:fc:55:3b:42:c3:fc:f7:22:b4:
                    84:9f:cb:21:ef:92:f7:00:46:40:49:39:48:e1:69:
                    bb:8f:11:b6:c6:07:31:35:de:47:5d:98:86:8f:fb:
                    e3:a4:83:b1:73:0f:60:ae:5b:ca:1b:4c:26:85:00:
                    cf:19:83:e3:62:44:18:cc:7c:bc:99:9f:83:b9:44:
                    f6:02:22:a6:ba:61:67:df:51:f9:f0:1e:3e:db:1d:
                    05:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:60:E0:3D:57:F3:70:9E:13:6B:B8:F4:D9:FB:FC:4B:88:EF:00:E8
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663430303a3a2f34302d313238203d3e203439383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:f400::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:72:45:d0:dd:65:40:ba:8a:74:e3:2e:9a:9a:e2:f9:d9:f0:
         8b:60:2a:f3:b9:0f:12:ee:69:9a:5f:94:80:98:5a:ea:aa:2c:
         8a:88:c0:a3:b4:03:6f:39:19:3c:a9:ef:6e:0b:55:9e:00:f6:
         58:7f:9f:e3:65:29:a5:33:c3:d6:48:9d:8e:4c:d3:7f:d2:c3:
         43:1d:72:63:1e:c9:9a:6a:3e:5f:17:fc:a2:69:2d:a1:1c:24:
         8e:8b:f0:9a:bb:85:2f:9f:7e:7f:3a:dc:40:f7:3e:06:66:57:
         f2:e7:04:ce:e5:fe:f0:7f:44:ad:33:96:a5:b8:6a:e0:dd:a1:
         16:b7:b8:5d:85:de:31:7c:d8:49:6a:f9:5b:06:84:1e:57:d7:
         0b:27:a7:22:f1:95:8b:26:4c:fa:7f:ed:bd:e3:02:6b:ef:f2:
         51:92:63:6f:c6:0a:78:86:85:e6:47:be:0a:b6:37:55:02:a7:
         95:02:dc:82:10:38:de:0f:f7:00:24:4b:f2:09:0d:63:01:f8:
         36:3f:de:19:fa:2d:8f:45:44:66:5a:c2:47:08:60:fd:5a:18:
         d1:69:0a:25:2c:96:54:2c:ff:76:8f:26:da:9b:f1:6e:ee:62:
         bd:88:65:5e:9e:8f:7a:24:ae:b8:bd:a2:1a:f2:8e:67:f9:e8:
         b0:4f:0e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----