Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/326130613a363034343a613131303a3a2f34342d3434203d3e20323134373537.roa
File:                     326130613a363034343a613131303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier:          rskhBJDT9Pq845uWuyyyX4juoAsGeSqdhZalHLnKq2M=
Subject key identifier:   98:28:C1:89:3C:2E:E4:F3:A5:24:9A:17:F1:BC:E1:B0:36:A8:8C:69
Certificate issuer:       /CN=BA1E57809F341A79CDDA255B18E19FA068FA270F
Certificate serial:       62C96C146AFB287CBAE04578B2A443464C5A3955
Authority key identifier: BA:1E:57:80:9F:34:1A:79:CD:DA:25:5B:18:E1:9F:A0:68:FA:27:0F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BA1E57809F341A79CDDA255B18E19FA068FA270F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/326130613a363034343a613131303a3a2f34342d3434203d3e20323134373537.roa
Signing time:             Sat 11 Jan 2025 20:19:00 +0000
ROA not before:           Sat 11 Jan 2025 20:14:00 +0000
ROA not after:            Sat 10 Jan 2026 20:19:00 +0000
asID:                     214757
IP address blocks:        2a0a:6044:a110::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c9:6c:14:6a:fb:28:7c:ba:e0:45:78:b2:a4:43:46:4c:5a:39:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA1E57809F341A79CDDA255B18E19FA068FA270F
        Validity
            Not Before: Jan 11 20:14:00 2025 GMT
            Not After : Jan 10 20:19:00 2026 GMT
        Subject: CN=9828C1893C2EE4F3A5249A17F1BCE1B036A88C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:7d:f4:ec:ed:ea:65:bb:c0:6b:43:10:81:
                    37:b1:37:db:14:b6:61:13:0c:01:45:12:b7:1a:30:
                    9c:3a:82:91:b6:f8:6b:d7:cf:4a:72:4a:f6:03:4b:
                    01:f2:7d:bb:ea:6b:db:c6:f8:25:c8:92:ad:c2:37:
                    22:49:7a:fa:c6:43:58:cf:52:7b:1c:d2:ca:26:35:
                    04:dc:88:be:b8:99:80:a1:da:b1:f2:8d:c8:98:2f:
                    43:54:d1:69:8e:93:53:81:49:3f:c2:00:2b:47:3c:
                    51:38:e5:2b:aa:08:9f:a2:7e:91:eb:5b:05:e2:e0:
                    48:b8:5e:39:ba:a4:24:42:0a:47:8d:9b:5f:fc:0d:
                    59:a8:f0:0d:99:67:e6:51:3b:23:76:f2:fe:f3:7c:
                    c4:24:a2:95:0d:d9:d0:e9:06:18:9c:79:1b:5c:68:
                    23:ae:84:bb:c6:a3:82:00:87:58:f9:92:36:89:53:
                    29:8d:94:ba:f3:7e:35:b1:5e:f9:55:f9:ef:64:3b:
                    fd:f8:c4:92:73:f0:5c:28:07:96:29:67:eb:8d:24:
                    69:b1:f4:26:39:52:e5:69:85:2f:aa:bc:81:87:c1:
                    ee:8f:54:14:a5:3c:f8:b2:27:5e:2d:23:ca:7c:e6:
                    20:eb:04:52:04:c1:a6:7d:4c:29:63:d0:07:b9:b5:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:28:C1:89:3C:2E:E4:F3:A5:24:9A:17:F1:BC:E1:B0:36:A8:8C:69
            X509v3 Authority Key Identifier:
                keyid:BA:1E:57:80:9F:34:1A:79:CD:DA:25:5B:18:E1:9F:A0:68:FA:27:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/BA1E57809F341A79CDDA255B18E19FA068FA270F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BA1E57809F341A79CDDA255B18E19FA068FA270F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/326130613a363034343a613131303a3a2f34342d3434203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a110::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:36:91:2a:4e:f7:cb:02:af:b9:49:6f:f9:9e:7f:cf:2f:e0:
         85:a9:df:26:56:9b:fd:32:89:79:b8:09:0a:f0:ab:41:27:c9:
         a7:21:5a:c6:67:8e:a7:5b:ea:a7:6c:fe:6f:e6:03:3b:91:24:
         07:27:4f:d2:6f:f6:24:5c:46:e8:e9:6f:5e:f0:d7:e0:23:04:
         c9:f6:0e:9d:d8:0f:5f:8b:b7:d2:13:9c:cc:de:79:c4:0d:03:
         f0:f2:b5:50:47:b7:7d:86:7a:f5:74:f2:71:e3:97:9f:b7:c5:
         84:8c:39:24:d2:73:77:69:05:ee:68:57:ae:a9:74:e4:f7:20:
         33:b7:a7:aa:b9:f7:fc:ff:ad:3e:e4:f6:9f:4c:fb:70:78:e2:
         15:e6:8a:13:65:3c:c3:34:38:9e:26:4e:ff:ba:c5:69:a4:50:
         41:6e:0e:d6:4e:c4:f7:47:36:3b:d8:fd:4e:e4:9b:ad:34:99:
         87:d2:30:5a:37:6f:e2:d4:47:7e:a6:30:ea:80:ab:d7:f0:67:
         2b:2b:d8:26:17:a8:5c:3b:50:a4:d3:f3:97:24:df:b4:4c:47:
         db:ae:ac:0b:e7:c0:17:02:0c:27:56:f5:24:d6:07:a4:90:fe:
         8a:53:09:7e:cb:71:d5:39:9f:63:85:59:b4:66:a0:90:fe:46:
         d4:bd:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----