Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a333030303a3a2f33362d3336203d3e2030.roa
File:                     326130393a353463373a333030303a3a2f33362d3336203d3e2030.roa (raw, json)
Hash identifier:          fujsiOThtxRKED6Lmw0wEUap+KSYW4WY5VC9KvBlym4=
Subject key identifier:   AC:C7:16:DA:A4:E4:5F:21:FC:53:FF:B5:BF:D6:6D:D9:27:D8:64:56
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       0D932C7AAF2B0BFC760053B3789CDEB24D67D9CD
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a333030303a3a2f33362d3336203d3e2030.roa
Signing time:             Sun 29 Jun 2025 18:30:33 +0000
ROA not before:           Sun 29 Jun 2025 18:25:33 +0000
ROA not after:            Sun 28 Jun 2026 18:30:33 +0000
asID:                     0
IP address blocks:        2a09:54c7:3000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:93:2c:7a:af:2b:0b:fc:76:00:53:b3:78:9c:de:b2:4d:67:d9:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Jun 29 18:25:33 2025 GMT
            Not After : Jun 28 18:30:33 2026 GMT
        Subject: CN=ACC716DAA4E45F21FC53FFB5BFD66DD927D86456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:ce:87:ff:f9:89:0a:66:b8:3e:57:38:4b:
                    da:00:b8:cc:2b:cb:73:e1:a3:03:17:89:29:09:3a:
                    be:8f:e2:5b:ca:19:55:f5:48:9f:76:9f:91:5a:39:
                    7f:6c:a3:a4:9e:3c:cc:f1:f4:11:23:a3:d1:72:f8:
                    27:8c:60:1b:66:e4:78:84:49:25:7b:2d:51:89:11:
                    4a:34:4c:b7:c1:7d:4f:d3:c1:e7:18:e4:d7:22:ce:
                    78:55:ca:60:61:64:3a:9a:f1:8a:7a:cc:fd:ff:48:
                    d5:3b:21:c1:15:8e:a1:45:43:e8:f4:d8:41:6e:f7:
                    07:ef:f8:25:80:22:d3:6e:48:2b:8e:c0:e4:9c:3e:
                    53:b4:93:bc:f2:29:c5:fc:94:de:43:81:1f:d7:a6:
                    db:0e:42:c6:66:55:c5:7f:43:2c:d4:2b:93:8e:a8:
                    dc:bb:24:3e:51:45:60:d7:65:4c:5e:42:d1:ad:de:
                    5a:d2:0e:c3:64:bc:27:f2:9c:3a:a6:4e:c0:8d:89:
                    b9:7a:37:53:90:07:df:f6:a5:f0:2a:ee:d0:f3:b7:
                    bd:bb:60:3b:9b:5a:7c:d8:33:69:57:ea:8a:14:cd:
                    0e:12:99:ee:36:70:51:03:a4:26:d5:6d:4d:45:aa:
                    a5:b1:98:b7:ae:ad:5a:20:37:32:9f:d2:6a:cc:2f:
                    be:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C7:16:DA:A4:E4:5F:21:FC:53:FF:B5:BF:D6:6D:D9:27:D8:64:56
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a333030303a3a2f33362d3336203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c7:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:e7:aa:02:c1:a4:cb:91:d2:61:18:ba:af:b9:df:8e:84:cd:
         18:fc:3b:9f:88:4c:ea:01:f1:15:97:09:c8:35:ef:03:5f:15:
         ec:da:1d:78:0c:f6:bf:38:14:29:d7:00:3b:ba:b8:e5:8f:f7:
         43:56:19:52:e7:7c:d4:aa:9c:5f:a8:69:7e:c0:5c:23:aa:cb:
         03:03:9b:ef:0b:c5:4e:60:72:8e:96:1c:bb:1b:5a:38:52:bc:
         f1:c2:ca:d4:f8:43:9c:10:0a:9b:50:0c:d7:81:ea:75:6c:d4:
         c8:73:68:dd:96:28:9c:68:8c:ca:95:1a:b0:65:cf:e5:f1:a7:
         86:53:8d:73:85:76:5f:0f:af:e2:c2:26:e5:41:3e:be:44:cb:
         65:59:c6:ec:21:35:d8:34:a9:60:0e:c5:f1:fb:cf:57:52:39:
         49:14:90:a2:19:aa:7f:97:dd:71:7a:b1:b7:11:34:f5:a9:33:
         3d:fb:b6:3d:e6:a6:0d:c4:34:56:ff:e9:b7:bb:0d:9b:ad:1e:
         1f:8a:e5:9b:f8:eb:2c:24:94:48:88:dd:bc:00:89:06:db:89:
         8c:5c:5d:61:74:52:a4:5e:93:ba:13:7c:f6:87:14:d0:67:27:
         c1:56:a2:b0:67:be:ea:99:1f:e8:af:cf:08:70:9c:59:bd:91:
         7b:71:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:51:15 2025 by rpki-client