Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663430303a3a2f34302d3434203d3e203439383637.roa
File:                     326130353a646663333a663430303a3a2f34302d3434203d3e203439383637.roa (raw, json)
Hash identifier:          2M56pVOgHYhoHxyTQq4DluE6KKndf4y7bPlKGJOnU4s=
Subject key identifier:   7E:D6:A7:37:7E:4F:E5:D4:3B:68:F5:A0:86:F0:35:A5:95:63:6B:09
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       46DB678839B2C64C246A3F5BF7334558CCB91851
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663430303a3a2f34302d3434203d3e203439383637.roa
Signing time:             Sat 14 Jun 2025 10:28:57 +0000
ROA not before:           Sat 14 Jun 2025 10:23:57 +0000
ROA not after:            Sat 13 Jun 2026 10:28:57 +0000
asID:                     49867
IP address blocks:        2a05:dfc3:f400::/40 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:db:67:88:39:b2:c6:4c:24:6a:3f:5b:f7:33:45:58:cc:b9:18:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Jun 14 10:23:57 2025 GMT
            Not After : Jun 13 10:28:57 2026 GMT
        Subject: CN=7ED6A7377E4FE5D43B68F5A086F035A595636B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:85:d7:2e:a9:03:c8:51:eb:28:02:84:43:
                    88:75:f5:e0:b4:3b:a8:bf:12:3d:60:8d:8e:33:af:
                    df:bd:9a:97:c9:75:36:f4:10:60:92:a8:f8:16:d3:
                    11:1f:75:29:23:2c:c1:fa:56:57:7a:0f:28:f2:81:
                    5d:75:9a:8f:fa:aa:6a:0a:1a:63:9e:cf:21:de:09:
                    f6:c1:73:bf:ac:6c:da:95:2d:1d:96:a9:c2:47:b8:
                    c2:76:73:01:4c:48:f5:12:4d:3b:12:7e:d4:a0:92:
                    29:19:69:2b:20:0b:7b:64:37:1c:84:96:f3:bb:98:
                    4d:3f:7a:a8:a1:b5:4f:a6:b1:1c:cd:4c:c1:7e:fb:
                    1d:28:ce:16:c5:8c:82:bb:98:fe:c8:b0:8b:3f:98:
                    ad:9f:82:50:23:e7:86:77:cb:2e:ed:85:5d:6f:bf:
                    6d:d5:10:55:f3:98:6f:dd:73:83:33:c2:11:8b:23:
                    ca:b1:a6:a7:19:8d:f0:fb:dc:7c:24:4c:59:32:2d:
                    31:c1:9e:f0:74:e7:69:31:ff:b1:62:16:e3:af:b8:
                    08:f0:97:f0:59:12:14:39:54:07:6b:57:fd:55:59:
                    35:39:a9:f3:80:ff:90:f4:fc:7d:4c:76:1c:91:ea:
                    42:9f:21:13:64:84:81:41:c7:b7:b2:8d:7a:bb:4e:
                    d3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D6:A7:37:7E:4F:E5:D4:3B:68:F5:A0:86:F0:35:A5:95:63:6B:09
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663430303a3a2f34302d3434203d3e203439383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:f400::/40

    Signature Algorithm: sha256WithRSAEncryption
         1b:2e:86:55:22:fc:44:c3:7c:a0:54:be:11:70:b8:32:1b:b6:
         ea:27:a8:a5:af:c4:49:99:1f:d8:c5:66:7c:19:32:66:fd:59:
         f3:51:b3:29:1f:d5:94:25:67:29:61:81:d6:fc:5b:38:86:23:
         d7:cb:f2:22:43:27:70:0d:8a:15:6a:76:de:ba:16:94:0e:43:
         94:4e:f4:84:ff:87:e9:a4:ca:69:2a:c6:7a:b2:17:78:99:61:
         5c:a9:50:70:d9:68:67:48:74:cf:22:7a:2e:c2:58:dd:b5:44:
         07:75:bf:43:ca:1a:50:98:c2:0a:8d:6f:ab:01:2c:9f:8a:4f:
         aa:47:05:ea:38:fe:57:83:47:04:e6:d8:08:a3:07:6e:4f:f9:
         76:5b:60:b2:28:e9:34:94:42:28:a8:5d:a0:9e:a9:11:90:eb:
         8d:46:54:db:15:dc:1e:70:16:df:09:7b:1c:7f:4b:88:13:b2:
         ba:00:6b:72:5e:65:5a:84:96:de:bc:8c:da:2d:b4:ca:00:35:
         70:d3:c3:37:3d:b7:79:44:74:60:b5:46:0a:d5:42:86:92:c6:
         7e:47:ea:99:a2:76:f7:f7:9b:09:66:5e:4e:30:94:75:97:31:
         a2:d5:59:b0:2e:d2:c7:f7:0c:cc:3b:25:91:0b:e6:c3:5e:39:
         fd:5a:61:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----