Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323030303a3a2f33362d3434203d3e20323132313132.roa
File:                     326130393a353463373a323030303a3a2f33362d3434203d3e20323132313132.roa (raw, json)
Hash identifier:          GEkeFzq1BUZUXr07U5oeBFiVxkvQislt7X9omrg4/pE=
Subject key identifier:   64:D7:70:53:F1:21:52:1E:88:DB:31:1B:0C:1D:17:8D:F2:05:86:86
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       7622C45A8EAFFDA09BBE42CED163847387DBCB6E
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323030303a3a2f33362d3434203d3e20323132313132.roa
Signing time:             Mon 30 Jun 2025 11:20:57 +0000
ROA not before:           Mon 30 Jun 2025 11:15:57 +0000
ROA not after:            Mon 29 Jun 2026 11:20:57 +0000
asID:                     212112
IP address blocks:        2a09:54c7:2000::/36 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:22:c4:5a:8e:af:fd:a0:9b:be:42:ce:d1:63:84:73:87:db:cb:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Jun 30 11:15:57 2025 GMT
            Not After : Jun 29 11:20:57 2026 GMT
        Subject: CN=64D77053F121521E88DB311B0C1D178DF2058686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:5d:d7:f5:e7:de:15:e8:c1:e5:54:c3:2e:
                    59:0a:b9:c0:f4:e0:56:0b:8c:03:a1:79:84:bd:49:
                    90:7a:eb:e4:08:81:ea:31:fc:a9:88:79:6e:46:5b:
                    bb:23:8e:ed:20:5d:13:38:df:d3:8b:2e:41:54:6d:
                    e3:1e:e6:c3:8f:9e:a2:a3:e3:a6:3a:b1:8a:65:aa:
                    09:49:bf:32:f7:a1:35:15:10:09:81:7b:b7:b7:75:
                    b0:eb:4e:4a:1d:b2:5d:e4:6c:63:b5:69:a5:82:2f:
                    c6:4e:30:b1:df:65:b4:7a:82:db:f4:d6:2c:be:77:
                    d8:a7:56:83:07:1f:e1:29:24:ba:d6:38:73:59:a6:
                    9f:6e:37:74:89:a8:e1:b4:d5:a0:4f:56:df:bd:1d:
                    82:1e:c5:f4:a8:d8:fd:45:64:26:24:a8:07:39:2d:
                    f5:46:20:ce:b0:2b:92:cd:21:4b:ca:c9:d9:7d:0f:
                    54:a8:f6:a1:6f:d3:ef:47:7e:66:5c:28:30:49:92:
                    67:73:6f:60:18:4a:a6:b1:57:48:93:5f:c0:e1:5c:
                    ea:a7:c4:eb:ac:2a:23:3f:55:cc:dd:ef:cc:7d:2c:
                    37:a4:a3:04:7b:9d:60:1b:1c:ca:73:0b:85:cd:03:
                    5b:75:80:3d:9b:d4:a0:06:b9:a6:0c:de:35:4a:62:
                    56:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D7:70:53:F1:21:52:1E:88:DB:31:1B:0C:1D:17:8D:F2:05:86:86
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323030303a3a2f33362d3434203d3e20323132313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c7:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         57:0d:76:71:1b:74:30:13:af:8d:86:a2:00:ec:e7:ca:05:40:
         e1:a6:48:e1:e1:bb:45:e0:09:da:3e:01:eb:07:70:27:eb:71:
         6b:8d:78:04:3b:34:37:39:a4:80:68:26:83:9f:48:be:96:58:
         a4:ea:10:6f:a0:e4:d9:11:fc:e3:3a:a7:7e:12:2b:12:8b:92:
         89:7b:57:e6:33:08:9d:13:c6:cf:4a:d4:ee:a0:e5:75:f5:f7:
         12:b0:1d:4e:1b:57:b4:dc:39:1d:d4:da:a8:b0:48:43:80:1e:
         8a:60:a6:0a:4c:e7:d5:a6:db:b3:99:c8:c6:0e:3f:53:b2:b2:
         a9:c3:c1:39:a6:1e:4b:d8:20:07:88:09:16:40:c7:30:a9:28:
         f0:df:e2:6f:d8:9e:33:c7:fd:30:4b:ce:bb:b8:22:a3:e7:60:
         39:20:4e:43:60:e8:8e:90:5b:c8:b8:b4:67:94:2a:7c:3b:d0:
         7e:fc:76:19:9d:65:47:d0:09:c8:5c:1c:a4:ad:03:ba:3f:31:
         92:57:d5:5b:ea:a4:d4:c2:44:4c:0b:6d:50:83:b9:29:df:a6:
         04:3e:cc:53:f7:cd:c4:cd:05:b3:49:2e:b1:de:f6:67:41:06:
         49:5f:b5:13:07:fb:69:45:78:c8:39:8e:18:40:65:58:47:1a:
         6d:0e:8e:42
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUdiLEWo6v/aCbvkLO0WOEc4fby24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA2MzAxMTE1NTdaFw0yNjA2MjkxMTIwNTdaMDMxMTAvBgNV
BAMTKDY0RDc3MDUzRjEyMTUyMUU4OERCMzExQjBDMUQxNzhERjIwNTg2ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7713X9efeFejB5VTDLlkKucD0
4FYLjAOheYS9SZB66+QIgeox/KmIeW5GW7sjju0gXRM439OLLkFUbeMe5sOPnqKj
46Y6sYplqglJvzL3oTUVEAmBe7e3dbDrTkodsl3kbGO1aaWCL8ZOMLHfZbR6gtv0
1iy+d9inVoMHH+EpJLrWOHNZpp9uN3SJqOG01aBPVt+9HYIexfSo2P1FZCYkqAc5
LfVGIM6wK5LNIUvKydl9D1So9qFv0+9HfmZcKDBJkmdzb2AYSqaxV0iTX8DhXOqn
xOusKiM/Vczd78x9LDekowR7nWAbHMpzC4XNA1t1gD2b1KAGuaYM3jVKYlZFAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUZNdwU/EhUh6I2zEbDB0XjfIFhoYwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt
MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzkzYTM1MzQ2MzM3
M2EzMjMwMzAzMDNhM2EyZjMzMzYyZDM0MzQyMDNkM2UyMDMyMzEzMjMxMzEzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGBCoJVMcgMA0GCSqGSIb3DQEBCwUAA4IBAQBXDXZxG3QwE6+NhqIA
7OfKBUDhpkjh4btF4AnaPgHrB3An63FrjXgEOzQ3OaSAaCaDn0i+llik6hBvoOTZ
EfzjOqd+EisSi5KJe1fmMwidE8bPStTuoOV19fcSsB1OG1e03Dkd1NqosEhDgB6K
YKYKTOfVptuzmcjGDj9TsrKpw8E5ph5L2CAHiAkWQMcwqSjw3+Jv2J4zx/0wS867
uCKj52A5IE5DYOiOkFvIuLRnlCp8O9B+/HYZnWVH0AnIXBykrQO6PzGSV9Vb6qTU
wkRMC21Qg7kp36YEPsxT983EzQWzSS6x3vZnQQZJX7UTB/tpRXjIOY4YQGVYRxpt
Do5C
-----END CERTIFICATE-----
Generated at Thu Jul 24 03:51:40 2025 by rpki-client