Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS209737.roa
File:                     AS209737.roa (raw, json)
Hash identifier:          35Uz8UlQD8yG1xbHqotS2kw/j6/Zj4FtW+m0QGL/Icc=
Subject key identifier:   B0:3B:07:9A:9C:4B:A4:5E:B4:A4:4F:9A:75:45:7A:B6:7B:37:01:75
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       1EB411965873BBAD289620992A0FD1E910C6D79A
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS209737.roa
Signing time:             Mon 30 Jun 2025 14:59:40 +0000
ROA not before:           Mon 30 Jun 2025 14:54:40 +0000
ROA not after:            Mon 29 Jun 2026 14:59:40 +0000
asID:                     209737
IP address blocks:        2a05:dfc3:fd23::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b4:11:96:58:73:bb:ad:28:96:20:99:2a:0f:d1:e9:10:c6:d7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Jun 30 14:54:40 2025 GMT
            Not After : Jun 29 14:59:40 2026 GMT
        Subject: CN=B03B079A9C4BA45EB4A44F9A75457AB67B370175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:0e:7b:91:75:31:87:7b:93:4b:6b:ed:ce:
                    99:0f:a0:9a:36:45:1d:8c:01:ca:b5:1e:63:34:d8:
                    a1:61:a6:5f:a8:3e:18:4f:b1:40:1d:8d:bb:5a:84:
                    aa:7a:20:d8:4d:01:d3:3f:03:79:85:58:73:de:66:
                    78:d2:2e:9a:86:c9:de:d8:c4:92:d4:36:28:c7:cd:
                    e4:55:f3:34:f9:06:4b:55:15:02:28:31:94:a4:ea:
                    37:d5:dc:72:67:3e:95:ef:12:c4:dc:52:c8:cb:41:
                    85:05:cf:0a:68:18:04:98:30:3c:02:98:32:6b:47:
                    3c:9d:73:96:e7:19:c2:96:58:fc:92:26:f7:4b:77:
                    06:6c:a3:bd:0c:0c:93:13:e0:8a:10:d2:40:50:03:
                    fd:78:bc:1b:0f:5d:79:72:4d:91:90:c2:80:cf:bc:
                    ef:d9:85:e8:e5:fc:3c:59:e4:73:5f:2b:d8:a0:e3:
                    c7:81:08:9a:8b:35:99:5d:cb:2e:6f:66:9c:42:95:
                    38:8f:fe:0d:1c:53:c7:80:41:64:9a:69:20:2b:59:
                    19:72:86:2d:76:b7:81:23:60:b2:05:40:3f:10:25:
                    33:ff:73:6b:3f:61:93:99:f7:da:97:56:bf:e3:ec:
                    35:ae:51:06:83:eb:fe:07:05:a9:72:67:3d:b8:70:
                    c9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3B:07:9A:9C:4B:A4:5E:B4:A4:4F:9A:75:45:7A:B6:7B:37:01:75
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS209737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:fd23::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:81:1d:06:a2:c8:a2:14:5b:ac:05:57:61:e3:8b:b3:54:ed:
         cb:e9:0b:8e:27:e9:8c:44:47:89:23:ff:60:ef:de:d7:7a:e7:
         e6:3c:c5:62:26:c4:a4:5a:96:9d:65:bf:51:36:7e:69:af:b1:
         e0:c4:07:09:33:f0:17:6e:da:00:bd:1e:f5:70:85:56:82:35:
         09:03:83:c0:a2:01:31:4c:e3:ec:a3:9e:f4:a8:eb:7d:09:c6:
         a7:7f:de:a2:7e:d2:25:88:dc:87:f1:e5:e8:1d:02:9e:68:99:
         89:64:6e:84:d2:8b:fc:04:b2:9d:25:7e:2f:3c:cf:0d:f5:61:
         bc:ff:55:a5:8a:09:46:9c:c2:16:db:b7:bc:5a:ec:30:80:d9:
         5d:0e:08:01:34:19:23:6c:66:d2:5d:4a:01:bf:36:1e:23:62:
         1b:17:81:57:a6:e4:62:95:66:de:ed:78:dd:91:54:e3:67:3c:
         57:f3:34:8d:bc:96:0e:56:27:1b:ae:03:43:26:55:39:d4:eb:
         d0:4b:3a:b7:74:36:fc:8a:1a:5b:53:d3:4a:a0:10:79:62:35:
         f2:d0:7e:c9:7e:b5:d2:7c:aa:80:97:02:72:80:89:0e:25:16:
         72:21:42:a9:c0:a3:5a:f8:18:6a:16:23:86:82:bb:38:bd:37:
         83:0c:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----