Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS213864.roa
File:                     AS213864.roa (raw, json)
Hash identifier:          vTd4HmYokrzg1m670OoaSdXCQoP5snqYFTa9yiNLrko=
Subject key identifier:   CC:E8:E5:76:D1:94:DC:14:FA:41:81:B4:54:AD:9B:17:82:5F:92:A5
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       6A29A8547A42C2F7641CED7A57F90A3008322EBA
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS213864.roa
Signing time:             Mon 30 Jun 2025 14:59:46 +0000
ROA not before:           Mon 30 Jun 2025 14:54:46 +0000
ROA not after:            Mon 29 Jun 2026 14:59:46 +0000
asID:                     213864
IP address blocks:        2a05:dfc2::/32 maxlen: 32
                          2a06:1281:7000::/36 maxlen: 44
                          2a06:1281:a000::/36 maxlen: 44
                          2a06:1284::/32 maxlen: 32
                          2a09:54c6:1000::/36 maxlen: 44
                          2a09:54c7:4000::/36 maxlen: 44
                          2a09:54c7:5000::/36 maxlen: 44
                          2a09:54c7:6000::/36 maxlen: 44
                          2a09:54c7:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:29:a8:54:7a:42:c2:f7:64:1c:ed:7a:57:f9:0a:30:08:32:2e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Jun 30 14:54:46 2025 GMT
            Not After : Jun 29 14:59:46 2026 GMT
        Subject: CN=CCE8E576D194DC14FA4181B454AD9B17825F92A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f3:96:d2:bd:c9:e9:f0:c2:7a:eb:41:97:c0:
                    75:40:ba:09:c9:bc:6b:54:24:37:ee:ed:27:74:21:
                    75:10:b3:f0:87:2e:47:d4:c4:b2:b9:84:ac:8b:72:
                    46:d8:fc:a3:56:3e:2d:7f:23:8c:ff:05:7e:c5:fe:
                    dc:c5:6a:c4:80:d5:f1:87:b1:63:b8:74:b8:8b:ed:
                    5b:87:7c:c2:f4:ac:89:b0:cd:4c:6c:97:ac:3b:7d:
                    00:6b:d6:10:31:ae:b9:24:41:27:e7:9e:9b:2d:bf:
                    3a:5a:47:78:a4:b7:89:e5:d2:ed:56:27:4b:33:0a:
                    9a:47:a5:cf:5c:24:c0:e7:26:9e:78:b8:85:83:5d:
                    43:dc:3a:aa:91:4d:86:32:cd:f9:55:a3:16:80:d1:
                    94:43:3d:18:8e:64:60:b4:20:76:16:5b:51:20:4e:
                    af:d9:53:ae:dc:81:81:55:0e:68:7a:ce:72:c2:c9:
                    4f:67:78:6f:b6:19:f9:3c:cb:b8:9f:24:8b:f0:e4:
                    80:31:e8:02:20:f2:0f:e6:f7:a1:f9:88:d8:43:71:
                    21:fa:8e:ac:e7:2b:f5:ed:78:35:ef:f0:61:0e:33:
                    48:3d:e6:db:c5:4d:22:53:95:39:27:5b:03:17:ed:
                    d4:c3:d9:74:ec:82:6a:31:f2:6b:d2:41:af:1e:e9:
                    c0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E8:E5:76:D1:94:DC:14:FA:41:81:B4:54:AD:9B:17:82:5F:92:A5
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS213864.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc2::/32
                  2a06:1281:7000::/36
                  2a06:1281:a000::/36
                  2a06:1284::/32
                  2a09:54c6:1000::/36
                  2a09:54c7:4000::-2a09:54c7:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:54c7:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         81:9b:fb:79:b4:c2:84:b6:31:a7:01:13:70:44:14:0e:36:25:
         6b:9e:c5:1e:c3:40:84:35:53:41:f7:c1:5a:11:b7:81:e8:bc:
         74:7a:ce:a6:f2:d2:67:b9:5c:8a:18:8a:2f:28:9b:88:5b:d5:
         72:1a:47:c6:9f:5e:c7:86:27:ae:ac:08:7e:44:6f:85:d6:bc:
         4c:c4:94:b2:8f:4e:94:10:77:1f:f7:d6:c3:f7:6a:12:dc:de:
         26:e9:d9:a9:f8:80:7a:53:29:1f:17:04:00:e6:66:87:18:7f:
         17:9f:24:c9:3e:d7:e4:c3:71:90:f8:ea:ea:94:d7:ea:3e:f2:
         09:94:85:84:98:8e:21:df:4a:ea:01:66:bf:4f:64:01:fa:1d:
         d7:92:f1:b2:5f:fa:4b:02:be:44:6d:7a:f1:c8:21:b1:05:d2:
         c6:df:59:43:b3:05:44:a9:2f:22:d5:a5:cc:9d:83:76:62:31:
         5e:a1:9c:43:0d:5b:51:82:11:1c:ff:88:6f:f1:70:e0:cf:b6:
         61:d9:f3:65:d5:ab:70:f1:df:3c:72:c4:6c:ab:de:f3:33:50:
         70:6c:02:5c:dd:9e:7f:45:63:10:ee:30:e3:be:ca:71:15:d3:
         84:ed:2c:5a:3a:ad:b2:9a:66:a3:8e:9d:f9:44:84:b5:fd:54:
         f8:4d:71:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----