Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663430303a3a2f34342d3434203d3e203439383637.roa
File:                     326130353a646663333a663430303a3a2f34342d3434203d3e203439383637.roa (raw, json)
Hash identifier:          eNP3oAfc3LILOD9QWw6yq/PghHhqfgSiJlxOrENK8a8=
Subject key identifier:   B8:1C:7F:50:4D:50:EF:AD:8A:65:B1:90:26:D8:39:20:5C:00:29:39
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       76EBCCE05536B405B70F5EC71BAB41732D31EC8F
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663430303a3a2f34342d3434203d3e203439383637.roa
Signing time:             Sat 14 Jun 2025 09:58:48 +0000
ROA not before:           Sat 14 Jun 2025 09:53:48 +0000
ROA not after:            Sat 13 Jun 2026 09:58:48 +0000
asID:                     49867
IP address blocks:        2a05:dfc3:f400::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:eb:cc:e0:55:36:b4:05:b7:0f:5e:c7:1b:ab:41:73:2d:31:ec:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Jun 14 09:53:48 2025 GMT
            Not After : Jun 13 09:58:48 2026 GMT
        Subject: CN=B81C7F504D50EFAD8A65B19026D839205C002939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:67:1f:db:3c:59:04:a7:e4:ad:10:17:79:
                    01:10:f2:85:bc:4b:6f:59:a7:2e:d4:9e:13:3e:39:
                    3f:8b:cf:da:d5:a9:08:3c:64:6d:6d:ba:1f:0d:7f:
                    8c:3d:da:22:29:47:54:81:ed:aa:07:f2:e8:2a:e2:
                    8c:d2:18:bc:ad:a0:2f:cc:b6:d1:b2:05:97:d0:69:
                    a0:16:2a:90:b4:db:7f:00:0b:2a:82:44:cc:82:4d:
                    a8:76:22:9f:0d:14:ae:e9:4a:20:9b:bc:56:5f:f7:
                    86:f4:4a:f1:0e:c5:f0:48:59:64:8f:5d:de:80:35:
                    62:66:f3:ea:62:2c:07:48:53:14:bc:a6:79:ad:92:
                    6c:6c:69:6d:ec:f0:b4:f9:0b:0b:30:01:dd:b0:9b:
                    0e:a0:f0:af:67:88:73:0b:3f:3a:80:2d:10:fc:1d:
                    29:e4:92:12:20:b9:d7:d7:92:96:4b:14:c0:fb:b8:
                    13:8f:90:b8:24:0b:c4:56:68:c0:63:89:ba:4f:5f:
                    75:38:27:8f:68:c6:3e:4d:5f:70:f7:ef:30:21:67:
                    a6:1e:6c:b4:59:61:62:92:0e:91:4b:33:9c:bd:d7:
                    aa:4f:ac:1d:73:a4:6f:a3:6f:73:03:9b:dc:1e:8f:
                    d9:69:53:d0:5b:14:27:f5:ac:8c:41:38:5d:7e:7d:
                    de:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1C:7F:50:4D:50:EF:AD:8A:65:B1:90:26:D8:39:20:5C:00:29:39
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663430303a3a2f34342d3434203d3e203439383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:f400::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:ca:37:1e:7d:c8:98:43:b2:f9:a0:ff:b2:5e:0b:4f:7d:03:
         54:c3:a3:66:59:3a:27:62:33:d4:0d:51:c2:36:62:89:86:6c:
         b4:da:77:65:86:24:0b:a1:eb:08:22:cc:55:e5:e1:fb:07:3e:
         2a:6e:4e:09:5c:ac:18:1d:ae:ec:8c:3a:27:92:c3:3b:70:83:
         bc:e7:bf:96:2f:73:4b:16:5a:49:06:af:bb:c9:17:13:1d:94:
         f8:c1:ca:5a:82:43:d0:9e:74:38:30:e6:49:3c:56:b8:d3:3f:
         23:d5:ec:6c:58:fc:59:2f:ad:0a:0a:7c:5e:ab:da:2d:be:75:
         69:7b:8c:83:f5:0f:3c:ce:16:40:02:fa:9b:e6:97:0e:44:87:
         0b:ce:49:f1:3e:41:e1:0b:5e:b5:76:4b:60:22:ed:4d:1c:56:
         11:07:58:57:58:ce:02:f4:6d:02:29:4b:9a:df:a4:41:2b:7d:
         d1:0c:5c:47:16:40:7e:ff:aa:b0:cd:33:33:5c:8a:d8:d9:30:
         1f:1b:21:79:d3:b3:f4:8f:d9:81:8d:f8:45:09:3e:78:41:f3:
         f6:f1:f4:57:82:22:ec:76:a8:d2:15:2d:cc:09:c4:b3:9e:35:
         ea:5c:11:21:ae:6c:95:9d:4e:55:31:38:36:ce:e1:1b:df:6c:
         4e:a1:bb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----