Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a343030303a3a2f33362d3336203d3e2030.roa
File:                     326130393a353463373a343030303a3a2f33362d3336203d3e2030.roa (raw, json)
Hash identifier:          uaGvh5y6g/n+IajvLm269FFtcZlT+XLpi3Tf9SMjs1E=
Subject key identifier:   3B:43:76:85:E2:41:F6:3B:52:C5:B3:AE:67:E5:26:F5:15:D6:EE:CB
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       3EC6FD54638DE7E36022BF1C4050C99A99F2B83E
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a343030303a3a2f33362d3336203d3e2030.roa
Signing time:             Sun 29 Jun 2025 18:34:06 +0000
ROA not before:           Sun 29 Jun 2025 18:29:06 +0000
ROA not after:            Sun 28 Jun 2026 18:34:06 +0000
asID:                     0
IP address blocks:        2a09:54c7:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c6:fd:54:63:8d:e7:e3:60:22:bf:1c:40:50:c9:9a:99:f2:b8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Jun 29 18:29:06 2025 GMT
            Not After : Jun 28 18:34:06 2026 GMT
        Subject: CN=3B437685E241F63B52C5B3AE67E526F515D6EECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:b4:ab:b0:88:09:3d:a5:3e:38:d7:5c:08:
                    f0:7b:4b:96:89:a0:e7:a1:87:9b:70:f7:44:87:4e:
                    75:03:68:5c:53:27:48:69:45:5b:d1:9c:a6:f0:88:
                    0f:a2:c3:5b:16:fc:19:89:03:fe:85:51:d5:10:74:
                    03:cf:8b:e0:aa:3a:18:b7:13:9e:b1:a6:b1:4d:49:
                    23:31:b8:e4:ed:f3:27:85:ba:c0:94:04:d6:94:1c:
                    0b:7f:33:92:7b:28:bd:18:d0:fe:2a:7d:79:c8:75:
                    bc:42:6b:e5:75:7e:40:ed:d1:8b:5e:ea:f7:7a:7f:
                    ed:2e:25:e2:3b:1e:12:fe:56:a4:36:5a:5e:48:8e:
                    bc:67:37:87:18:16:1c:8d:a4:13:10:02:73:11:40:
                    a2:f6:58:8e:52:bb:2d:9b:f8:24:91:71:14:90:f3:
                    04:0a:6e:3d:a9:4e:3d:2b:6b:33:7e:4d:74:24:8b:
                    ff:9f:77:f9:11:d2:92:6f:ee:3f:cb:2e:20:ba:ca:
                    26:d5:66:cc:9d:b5:72:3c:53:d3:cd:75:a3:92:fb:
                    50:d3:01:6f:99:5a:9f:13:3f:7b:91:88:6e:71:07:
                    95:33:22:5b:8d:59:48:88:f8:f8:a9:5b:8d:16:66:
                    a8:30:44:9b:e2:4e:f2:c9:ef:80:eb:98:cf:73:42:
                    f9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:43:76:85:E2:41:F6:3B:52:C5:B3:AE:67:E5:26:F5:15:D6:EE:CB
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a343030303a3a2f33362d3336203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c7:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         81:f0:bc:7f:fe:70:e1:5e:d3:00:bf:48:90:74:6c:7d:9f:b9:
         d0:33:f9:0a:63:85:2a:90:8c:7e:98:1e:99:0f:3d:2a:04:6a:
         7f:e1:c7:86:2d:6e:bc:19:1d:43:6a:18:3e:a8:b6:5d:71:da:
         b1:f5:6f:51:58:a3:f8:6f:ef:b7:cf:a0:02:67:32:4b:ea:39:
         48:bf:97:ef:b7:a2:6d:61:15:60:67:4f:20:b4:de:7c:05:61:
         25:20:e9:55:8a:75:a4:f1:1b:eb:14:67:22:b7:c3:dc:70:ac:
         49:f4:d5:b9:7d:0f:d9:93:2b:e5:eb:d8:f7:c8:73:e5:4f:f9:
         30:7c:6b:c7:da:ef:cf:d5:0f:45:6d:7a:5b:ea:76:e1:e1:25:
         6c:96:aa:d5:48:d6:d5:ab:81:d4:07:68:e0:79:f3:09:85:72:
         cc:63:a1:03:30:c9:bf:6a:20:44:b2:6f:37:89:0d:4b:d4:c7:
         22:ff:00:ef:82:f1:58:bc:53:c2:f5:67:8e:06:c0:c7:8e:28:
         06:e1:93:32:79:5e:85:85:8a:fe:f8:78:06:11:fd:c2:e9:a6:
         a2:8c:38:56:d9:aa:73:64:f2:9b:57:ee:e8:3b:c2:8f:90:bf:
         13:24:42:f2:cf:54:69:55:f9:fd:49:d5:86:f6:44:eb:90:4b:
         03:79:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:51:10 2025 by rpki-client