Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130663a363238303a31383a3a2f34382d313238203d3e203437323732.roa
File:                     326130663a363238303a31383a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier:          ELraLWp+2IEPLrT7tu8aXx6s3XMNWrlbH7y6iJUlav8=
Subject key identifier:   4F:11:00:41:B6:D8:76:5E:FB:8E:D0:7D:68:C4:E8:71:7D:2B:B0:12
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       28029BC639597B11C44DC7888BFD9D69998ADD0A
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130663a363238303a31383a3a2f34382d313238203d3e203437323732.roa
Signing time:             Mon 30 Jun 2025 13:53:08 +0000
ROA not before:           Mon 30 Jun 2025 13:48:08 +0000
ROA not after:            Mon 29 Jun 2026 13:53:08 +0000
asID:                     47272
IP address blocks:        2a0f:6280:18::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:02:9b:c6:39:59:7b:11:c4:4d:c7:88:8b:fd:9d:69:99:8a:dd:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Jun 30 13:48:08 2025 GMT
            Not After : Jun 29 13:53:08 2026 GMT
        Subject: CN=4F110041B6D8765EFB8ED07D68C4E8717D2BB012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f1:21:fb:c3:9f:d3:6c:94:41:51:71:bf:c4:
                    09:ac:f0:0c:5f:f0:8b:f4:6f:bb:dc:0b:dd:8b:b1:
                    07:03:a2:77:cd:87:68:98:e9:36:89:01:b2:e7:63:
                    02:90:da:61:ef:b2:0c:d2:37:ab:d1:95:8c:31:66:
                    d8:42:8f:dc:f3:43:3c:83:43:64:3e:1b:f8:62:a0:
                    4c:30:66:02:66:f8:03:04:60:51:3e:dc:7d:62:b4:
                    f2:7a:ed:e2:61:93:32:95:51:4b:55:ba:93:f7:da:
                    9d:d3:aa:d3:87:fe:61:7a:6a:e7:27:8a:28:43:69:
                    f2:e4:07:41:6e:a7:bb:cb:2a:3a:ab:d9:bf:38:b5:
                    9b:db:25:57:a0:d4:6d:9d:ad:4b:51:ad:ae:6b:a3:
                    72:fa:98:25:ff:a1:d8:6e:b8:aa:29:55:67:4b:7a:
                    b2:44:c2:95:74:57:8c:df:c8:22:00:8c:bc:fd:54:
                    33:27:bc:51:20:07:b6:1e:95:8f:1f:49:62:72:62:
                    d3:94:8f:d5:7e:76:e9:df:2b:b0:78:97:f1:70:67:
                    df:5b:87:8c:ea:ea:23:fd:5e:41:18:79:8d:fd:46:
                    5c:6f:13:20:f0:3e:05:07:8a:e4:3c:50:02:9f:ae:
                    5c:e6:8d:3f:67:97:20:58:bc:b0:a6:dd:92:02:7c:
                    3e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:11:00:41:B6:D8:76:5E:FB:8E:D0:7D:68:C4:E8:71:7D:2B:B0:12
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130663a363238303a31383a3a2f34382d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6280:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:08:83:22:fd:1a:19:53:79:65:fc:f2:30:a4:1f:3d:79:02:
         a7:8b:85:d6:01:b3:62:ae:55:3e:98:3f:6b:9c:9f:a7:66:8e:
         11:9d:a4:38:d2:58:9f:91:35:00:9b:dd:85:a8:8c:f2:a5:b6:
         79:06:b5:f9:59:17:7e:79:09:1a:8e:54:17:52:6c:34:6b:14:
         d2:d9:ad:f3:7c:b3:54:33:e7:7d:6f:f0:72:69:ea:a2:00:c7:
         e8:9b:03:f2:1b:95:4d:b4:6a:22:17:df:b9:c1:b2:03:bd:6c:
         8e:fa:f5:96:59:1f:7a:40:37:cf:16:b8:25:57:09:f2:bf:07:
         9a:fd:b9:27:24:55:49:f8:c3:52:20:37:f6:43:8c:fe:ba:a6:
         49:3f:b9:e8:bb:08:94:97:1a:44:3b:0e:46:67:51:40:5d:bf:
         44:61:3d:36:90:18:d5:07:7d:bf:97:c6:d5:04:44:35:5f:d1:
         49:ee:2f:d2:fa:39:e4:1b:fd:2a:3d:d8:a9:14:94:95:16:ab:
         3a:bf:86:b0:43:85:51:e7:0d:d2:fa:f0:e0:89:78:87:e5:36:
         8e:59:c8:bb:b1:58:85:6c:47:8d:bb:a0:d5:bb:06:37:c1:c2:
         6a:d5:15:d1:b8:b1:14:fe:73:6e:02:8a:4f:e0:f7:d6:e1:4b:
         8f:83:e9:8d
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUKAKbxjlZexHETceIi/2daZmK3QowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA2MzAxMzQ4MDhaFw0yNjA2MjkxMzUzMDhaMDMxMTAvBgNV
BAMTKDRGMTEwMDQxQjZEODc2NUVGQjhFRDA3RDY4QzRFODcxN0QyQkIwMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC08SH7w5/TbJRBUXG/xAms8Axf
8Iv0b7vcC92LsQcDonfNh2iY6TaJAbLnYwKQ2mHvsgzSN6vRlYwxZthCj9zzQzyD
Q2Q+G/hioEwwZgJm+AMEYFE+3H1itPJ67eJhkzKVUUtVupP32p3TqtOH/mF6aucn
iihDafLkB0Fup7vLKjqr2b84tZvbJVeg1G2drUtRra5ro3L6mCX/odhuuKopVWdL
erJEwpV0V4zfyCIAjLz9VDMnvFEgB7YelY8fSWJyYtOUj9V+dunfK7B4l/FwZ99b
h4zq6iP9XkEYeY39RlxvEyDwPgUHiuQ8UAKfrlzmjT9nlyBYvLCm3ZICfD57AgMB
AAGjggJ2MIICcjAdBgNVHQ4EFgQUTxEAQbbYdl77jtB9aMTocX0rsBIwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt
MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjYzYTM2MzIzODMw
M2EzMTM4M2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAzNDM3MzIzNzMyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKg9igAAYMA0GCSqGSIb3DQEBCwUAA4IBAQAwCIMi/RoZU3ll/PIwpB89
eQKni4XWAbNirlU+mD9rnJ+nZo4RnaQ40lifkTUAm92FqIzypbZ5BrX5WRd+eQka
jlQXUmw0axTS2a3zfLNUM+d9b/ByaeqiAMfomwPyG5VNtGoiF9+5wbIDvWyO+vWW
WR96QDfPFrglVwnyvwea/bknJFVJ+MNSIDf2Q4z+uqZJP7nouwiUlxpEOw5GZ1FA
Xb9EYT02kBjVB32/l8bVBEQ1X9FJ7i/S+jnkG/0qPdipFJSVFqs6v4awQ4VR5w3S
+vDgiXiH5TaOWci7sViFbEeNu6DVuwY3wcJq1RXRuLEU/nNuAopP4PfW4UuPg+mN
-----END CERTIFICATE-----