Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS213576.roa
File:                     AS213576.roa (raw, json)
Hash identifier:          ExyeJryRGZ0PtI+DwnYgBWduXdJlfSOkaGMrilHcvbM=
Subject key identifier:   E4:DA:12:40:93:17:B2:96:D5:70:AB:F2:64:14:C7:3B:7A:8C:11:F7
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       5AB98E568800D6F1078862A55628D8BF1C3BC3BC
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS213576.roa
Signing time:             Mon 30 Jun 2025 14:59:39 +0000
ROA not before:           Mon 30 Jun 2025 14:54:39 +0000
ROA not after:            Mon 29 Jun 2026 14:59:39 +0000
asID:                     213576
IP address blocks:        2a05:dfc3:fe00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b9:8e:56:88:00:d6:f1:07:88:62:a5:56:28:d8:bf:1c:3b:c3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Jun 30 14:54:39 2025 GMT
            Not After : Jun 29 14:59:39 2026 GMT
        Subject: CN=E4DA12409317B296D570ABF26414C73B7A8C11F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:cc:4c:fa:8f:c6:c3:d7:8b:5c:78:08:9c:
                    25:68:91:e9:ac:cf:06:6c:60:de:07:90:f1:31:29:
                    37:52:c1:96:e3:e9:44:4e:5e:fa:79:d5:9c:18:0f:
                    98:96:05:9f:bb:96:99:ac:fd:30:a1:74:da:3c:3d:
                    7b:85:97:fe:ed:42:d2:6d:a0:71:6c:ae:13:61:41:
                    64:af:8f:ea:3f:ca:63:ff:09:46:2d:cf:49:07:3e:
                    41:ef:06:f5:a7:d3:39:fc:84:c4:ef:19:96:ca:07:
                    46:08:7b:0f:6b:34:28:6f:c5:a7:3c:d7:19:88:6d:
                    a3:d8:ce:c1:70:4a:5f:a4:76:f4:14:7d:bd:18:3e:
                    41:c2:7c:09:d7:ea:76:c9:d7:46:e0:e0:88:4c:43:
                    46:bc:fa:81:69:90:71:3b:0b:12:52:e9:93:fd:04:
                    5b:a6:5a:dd:c7:ba:21:d5:4a:7f:bd:74:d2:73:73:
                    18:33:ec:8f:7e:d3:e0:bd:47:a6:01:35:db:7b:27:
                    0e:57:a7:08:f6:21:25:c0:ed:e8:1e:1d:87:eb:09:
                    1b:52:1b:e4:05:09:71:cf:3c:1c:ec:a4:ed:9f:96:
                    15:fe:61:b2:d9:30:76:4a:42:3a:c5:d3:e5:10:bb:
                    38:b8:7c:6f:32:4b:5a:f1:a2:a8:14:87:f6:3e:34:
                    ae:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DA:12:40:93:17:B2:96:D5:70:AB:F2:64:14:C7:3B:7A:8C:11:F7
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS213576.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:e7:e5:6a:44:8c:34:1b:f5:d2:32:14:38:43:08:06:9e:ed:
         df:ad:7b:04:c9:de:71:08:a1:1a:72:89:2e:ef:33:cf:2b:62:
         56:ae:77:6e:70:31:fd:cf:e2:b8:a6:37:3f:c5:78:c2:2b:f0:
         4e:44:6e:f4:f1:f0:3d:dd:3d:45:ce:6f:e8:79:f2:4f:b8:a7:
         83:70:c1:73:72:e6:4f:e9:74:22:14:95:1f:b9:84:d6:73:8f:
         9a:fa:71:2c:bf:11:85:d9:a3:35:1a:25:ba:7e:c2:e8:d4:d8:
         33:e2:fa:8f:b1:8d:8c:20:e1:bf:d0:04:54:19:fe:97:f3:32:
         c5:79:25:7a:5b:45:f4:39:62:ff:a3:9a:cc:b5:e1:9c:c3:1e:
         81:81:40:ea:88:fb:c9:f8:9f:33:81:5c:48:79:b4:23:90:77:
         25:27:7e:75:69:bb:30:68:29:f5:e6:46:64:99:a5:26:e0:28:
         ee:60:7d:6e:8c:bb:f5:d6:7a:a6:3a:83:6d:11:e4:db:6a:97:
         ce:56:c5:f5:70:cb:af:47:87:fb:5a:81:3c:f0:d8:9b:15:3b:
         f3:8a:71:98:75:b2:96:4b:b8:01:b8:0a:61:b8:e4:12:46:3f:
         67:7a:02:f3:ac:9c:ce:b6:b0:ca:eb:42:8f:9f:df:1b:b4:aa:
         62:9a:80:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----