Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666434303a3a2f34382d3438203d3e20323134323939.roa
File:                     326130353a646663333a666434303a3a2f34382d3438203d3e20323134323939.roa (raw, json)
Hash identifier:          92F7VuZ17J54ETGBEWdPP4heHCGWfYwxiOwhP0mlk9g=
Subject key identifier:   09:26:DF:CB:B0:CF:C7:21:41:17:1D:52:F8:4C:2E:97:11:37:E9:5E
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       03AC5158CA72C43EF3AECEEC0372CD717474C7B5
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666434303a3a2f34382d3438203d3e20323134323939.roa
Signing time:             Mon 26 May 2025 08:36:21 +0000
ROA not before:           Mon 26 May 2025 08:31:21 +0000
ROA not after:            Mon 25 May 2026 08:36:21 +0000
asID:                     214299
IP address blocks:        2a05:dfc3:fd40::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ac:51:58:ca:72:c4:3e:f3:ae:ce:ec:03:72:cd:71:74:74:c7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: May 26 08:31:21 2025 GMT
            Not After : May 25 08:36:21 2026 GMT
        Subject: CN=0926DFCBB0CFC72141171D52F84C2E971137E95E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dc:5d:00:6e:63:51:58:2f:a2:46:17:f9:5b:
                    c3:c3:8a:26:fd:1f:f1:d7:b9:51:b6:01:10:78:95:
                    dd:19:2d:d3:5f:93:4a:a0:fa:e9:d1:d0:70:40:ba:
                    0f:1c:ab:39:95:9a:bf:03:25:01:33:64:e6:cd:7b:
                    3e:84:5f:3e:ab:12:cf:3e:6b:78:3c:a4:89:ce:d3:
                    71:ec:33:0e:77:78:fb:37:09:df:67:b0:e4:88:2c:
                    ec:bd:10:11:ab:6d:55:23:64:51:e8:7a:04:2f:e3:
                    c1:7a:99:6c:54:cb:23:26:ce:0f:a9:06:77:a3:d8:
                    27:75:46:84:d2:73:84:5c:9c:95:e2:2f:7b:3d:57:
                    7d:2e:b2:19:22:fc:78:c5:e5:de:56:e4:17:14:09:
                    b2:cb:ca:37:3a:ae:ca:40:62:2f:4f:4c:2f:65:db:
                    4f:0f:77:ab:d7:1d:4d:7b:a4:51:18:6d:58:17:ce:
                    63:f9:98:7f:f0:ef:a8:d8:73:e7:ad:14:12:be:c2:
                    db:7b:66:f3:d0:ef:85:d9:85:8c:5c:70:df:7d:45:
                    e0:b3:2b:18:61:c6:05:71:e8:a5:13:66:47:1b:35:
                    ba:40:c6:9f:a9:2c:ab:0f:ed:58:05:bf:75:f3:fc:
                    c5:f9:5d:c0:6d:78:c3:81:f8:90:6a:6e:d5:53:75:
                    9f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:26:DF:CB:B0:CF:C7:21:41:17:1D:52:F8:4C:2E:97:11:37:E9:5E
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666434303a3a2f34382d3438203d3e20323134323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:fd40::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:97:d0:3d:e8:ad:9c:3e:51:52:b0:7a:d7:c5:05:e4:f0:98:
         5e:8e:30:04:ca:2d:c4:35:37:f1:68:45:ba:53:75:98:be:1e:
         66:9d:33:8c:7b:23:b7:d0:83:a7:67:2c:b7:66:d1:6f:2d:c9:
         1a:4e:a2:d0:d5:6d:bb:09:76:da:0a:c7:fe:b2:a1:bb:b2:66:
         eb:49:21:f2:5e:be:b0:c2:72:48:a6:cc:16:81:97:31:8e:24:
         93:a1:63:df:2a:c2:87:ca:46:7d:0c:a7:c3:fb:60:4d:c5:3b:
         ca:77:90:9a:15:c1:61:b5:19:81:47:2c:28:68:f2:ed:50:c5:
         82:20:92:a5:a7:1e:ff:ee:16:da:6c:bd:5f:08:72:93:ae:43:
         b3:91:a4:ef:31:41:29:5e:63:c7:ef:b2:2b:66:ad:42:45:73:
         ab:8a:43:91:8c:7c:15:ea:21:c3:8b:a2:b0:9c:fc:b7:a6:19:
         b0:63:5d:93:d3:a1:dd:21:10:c7:0f:49:a6:da:0a:1f:f3:6d:
         f4:a4:82:a8:ea:67:53:ca:99:e7:0e:6c:be:3a:81:e0:20:43:
         8a:37:9e:6e:f6:7b:d1:fe:5a:e5:3f:94:f9:b1:f2:b1:7a:76:
         f5:6d:57:bf:65:b8:2b:5d:e7:6a:b4:44:aa:85:f6:dc:45:ef:
         ab:bb:12:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----