Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/2/326131333a646638303a376530303a3a2f34342d3438203d3e20323034383434.roa
File:                     326131333a646638303a376530303a3a2f34342d3438203d3e20323034383434.roa (raw, json)
Hash identifier:          MuwqZk1rxz6oimIhilBXAUI1GFyX38ZQFKGo/L0/Ewk=
Subject key identifier:   1A:1C:10:2A:25:96:D1:3A:0F:C1:FF:1C:DE:0B:93:AB:79:E1:EB:F5
Certificate issuer:       /CN=66950426E34C31CE2D1F2604E94F4D1A65D61995
Certificate serial:       13CFF08AAD2A38B9FDFE8C75F1B3F3F554CF79D1
Authority key identifier: 66:95:04:26:E3:4C:31:CE:2D:1F:26:04:E9:4F:4D:1A:65:D6:19:95
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/66950426E34C31CE2D1F2604E94F4D1A65D61995.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/2/326131333a646638303a376530303a3a2f34342d3438203d3e20323034383434.roa
Signing time:             Tue 09 Apr 2024 23:12:09 +0000
ROA not before:           Tue 09 Apr 2024 23:07:09 +0000
ROA not after:            Tue 08 Apr 2025 23:12:09 +0000
asID:                     204844
IP address blocks:        2a13:df80:7e00::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:cf:f0:8a:ad:2a:38:b9:fd:fe:8c:75:f1:b3:f3:f5:54:cf:79:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66950426E34C31CE2D1F2604E94F4D1A65D61995
        Validity
            Not Before: Apr  9 23:07:09 2024 GMT
            Not After : Apr  8 23:12:09 2025 GMT
        Subject: CN=1A1C102A2596D13A0FC1FF1CDE0B93AB79E1EBF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:36:0d:a2:f0:45:96:62:b7:4f:45:b9:02:
                    6a:01:60:00:90:68:be:23:19:bc:46:d1:69:67:77:
                    19:3b:4a:c5:ee:12:58:c3:19:47:ae:9b:6f:4c:19:
                    53:a4:bd:67:06:9d:c4:0a:85:98:43:23:ff:fc:f0:
                    2e:ba:1b:1b:32:44:0c:6b:ce:d8:c3:e2:e4:21:e3:
                    f3:37:45:4f:c8:b7:1d:fa:b2:51:a3:af:c2:aa:72:
                    ec:d6:a2:0c:9e:54:ed:9d:44:d1:42:e9:9c:da:cb:
                    22:fb:ee:a6:23:ff:90:32:48:ee:fe:df:a5:aa:ce:
                    e5:d0:5b:81:bc:6a:9a:72:38:e2:46:ee:94:aa:bd:
                    b4:a3:32:1f:29:05:e5:78:69:62:37:5d:7e:17:a0:
                    f5:4d:e7:5d:7a:34:4b:5e:9d:c9:87:55:41:8c:5b:
                    27:76:8a:2c:e2:b2:c1:81:ee:e8:74:08:70:68:f2:
                    27:a0:c3:cd:6c:f3:ed:a0:17:79:50:ec:e4:18:b2:
                    e1:81:17:01:b6:fe:fc:d5:2c:68:e7:16:78:18:86:
                    0e:4e:f4:27:0b:e3:1e:62:46:42:98:0c:26:02:ce:
                    a4:a5:b2:70:cf:7f:bf:9a:9d:5c:32:93:03:6e:a4:
                    09:ca:b2:af:ea:ed:7d:02:86:18:cc:b8:62:54:d2:
                    91:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1C:10:2A:25:96:D1:3A:0F:C1:FF:1C:DE:0B:93:AB:79:E1:EB:F5
            X509v3 Authority Key Identifier:
                keyid:66:95:04:26:E3:4C:31:CE:2D:1F:26:04:E9:4F:4D:1A:65:D6:19:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/2/66950426E34C31CE2D1F2604E94F4D1A65D61995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/66950426E34C31CE2D1F2604E94F4D1A65D61995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/2/326131333a646638303a376530303a3a2f34342d3438203d3e20323034383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:7e00::/44

    Signature Algorithm: sha256WithRSAEncryption
         4a:33:02:e4:32:b1:22:6f:f5:95:ed:84:90:47:49:8b:ab:3e:
         1e:2d:f0:b3:08:cd:f7:81:4a:c2:c5:3c:37:ec:ac:f0:d5:85:
         6c:6d:ad:8f:eb:d9:fc:a4:3e:3b:1a:1d:fa:cf:96:51:e6:b6:
         09:33:66:ba:1d:91:6b:3b:73:d2:1b:1c:21:c2:9f:80:b3:87:
         5a:0f:2a:c7:59:1f:cb:85:5c:7e:b3:ff:66:ae:31:74:41:c5:
         36:e4:62:99:68:31:ab:d1:6e:72:c8:15:52:91:1f:97:a5:61:
         e1:cd:dd:d7:24:9d:fa:67:b4:90:47:55:cb:ad:a9:f7:bb:1c:
         ba:c5:fd:5d:63:0a:e1:91:b5:7c:0e:d5:58:90:28:56:58:ca:
         17:f4:0f:be:40:bd:ec:79:a9:6e:54:a5:29:0f:7e:7a:01:5e:
         88:8a:36:97:76:6b:c8:fa:90:41:27:6f:fa:20:0a:93:0f:59:
         ff:95:55:d8:da:78:dd:07:1d:a0:9c:72:eb:ba:26:3a:4b:af:
         15:df:73:81:6c:d9:8c:7a:2e:62:b5:92:a0:c4:ec:02:c0:7e:
         de:f5:1f:8d:fd:2b:c4:7e:75:d1:fe:e3:f6:5e:43:60:bb:40:
         ae:37:2b:9b:7c:09:aa:51:14:aa:93:1a:c1:54:7f:70:ff:a4:
         7c:da:83:21
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUE8/wiq0qOLn9/ox18bPz9VTPedEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY5NTA0MjZFMzRDMzFDRTJEMUYyNjA0RTk0RjREMUE2
NUQ2MTk5NTAeFw0yNDA0MDkyMzA3MDlaFw0yNTA0MDgyMzEyMDlaMDMxMTAvBgNV
BAMTKDFBMUMxMDJBMjU5NkQxM0EwRkMxRkYxQ0RFMEI5M0FCNzlFMUVCRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR4TYNovBFlmK3T0W5AmoBYACQ
aL4jGbxG0Wlndxk7SsXuEljDGUeum29MGVOkvWcGncQKhZhDI//88C66GxsyRAxr
ztjD4uQh4/M3RU/Itx36slGjr8KqcuzWogyeVO2dRNFC6ZzayyL77qYj/5AySO7+
36WqzuXQW4G8appyOOJG7pSqvbSjMh8pBeV4aWI3XX4XoPVN5116NEtencmHVUGM
Wyd2iizissGB7uh0CHBo8iegw81s8+2gF3lQ7OQYsuGBFwG2/vzVLGjnFngYhg5O
9CcL4x5iRkKYDCYCzqSlsnDPf7+anVwykwNupAnKsq/q7X0ChhjMuGJU0pGBAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUGhwQKiWW0ToPwf8c3guTq3nh6/UwHwYDVR0j
BBgwFoAUZpUEJuNMMc4tHyYE6U9NGmXWGZUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDlmNzEwMjMtOTA0OS00ZWNiLWE4YTUtN2YwOGQ4ZWFk
Njc2LzIvNjY5NTA0MjZFMzRDMzFDRTJEMUYyNjA0RTk0RjREMUE2NUQ2MTk5NS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0xZDU3LTRj
M2ItOTA0My1hMGU3ZmViZjE2N2QvMC82Njk1MDQyNkUzNEMzMUNFMkQxRjI2MDRF
OTRGNEQxQTY1RDYxOTk1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8wOWY3MTAyMy05MDQ5LTRlY2ItYThhNS03ZjA4ZDhlYWQ2NzYvMi8zMjYxMzEz
MzNhNjQ2NjM4MzAzYTM3NjUzMDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz
MDM0MzgzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKhPfgH4AMA0GCSqGSIb3DQEBCwUAA4IBAQBK
MwLkMrEib/WV7YSQR0mLqz4eLfCzCM33gUrCxTw37Kzw1YVsba2P69n8pD47Gh36
z5ZR5rYJM2a6HZFrO3PSGxwhwp+As4daDyrHWR/LhVx+s/9mrjF0QcU25GKZaDGr
0W5yyBVSkR+XpWHhzd3XJJ36Z7SQR1XLran3uxy6xf1dYwrhkbV8DtVYkChWWMoX
9A++QL3sealuVKUpD356AV6IijaXdmvI+pBBJ2/6IAqTD1n/lVXY2njdBx2gnHLr
uiY6S68V33OBbNmMei5itZKgxOwCwH7e9R+N/SvEfnXR/uP2XkNgu0CuNyubfAmq
URSqkxrBVH9w/6R82oMh
-----END CERTIFICATE-----