Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3231303a3a2f34362d3436203d3e20323033303632.roa
File:                     326130623a346530373a3231303a3a2f34362d3436203d3e20323033303632.roa (raw, json)
Hash identifier:          ubWyWmEt+4/O0WxSccONm/rgB40GnETceiTwSvCBApQ=
Subject key identifier:   E1:13:BD:73:5D:EC:7E:40:3E:C4:13:6C:FD:18:E9:5C:17:E2:B1:D7
Certificate issuer:       /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial:       2981C73D74C71076822318094E71CBF22CDF1BEC
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3231303a3a2f34362d3436203d3e20323033303632.roa
Signing time:             Mon 17 Mar 2025 12:33:16 +0000
ROA not before:           Mon 17 Mar 2025 12:28:16 +0000
ROA not after:            Mon 16 Mar 2026 12:33:16 +0000
asID:                     203062
IP address blocks:        2a0b:4e07:210::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:81:c7:3d:74:c7:10:76:82:23:18:09:4e:71:cb:f2:2c:df:1b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
        Validity
            Not Before: Mar 17 12:28:16 2025 GMT
            Not After : Mar 16 12:33:16 2026 GMT
        Subject: CN=E113BD735DEC7E403EC4136CFD18E95C17E2B1D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b2:9e:19:2d:70:f6:58:00:c3:40:0d:1d:09:
                    d6:41:a0:57:04:e7:2a:37:9f:08:cf:79:59:6c:3a:
                    9c:82:12:b6:8e:da:e3:3b:45:eb:37:1f:aa:42:05:
                    43:44:76:eb:e7:17:82:eb:e6:39:f2:1d:eb:b4:ae:
                    ef:9d:b0:51:41:6e:be:0a:0a:cf:f9:24:e4:c1:12:
                    e0:48:b7:53:dc:b6:8d:78:19:dd:df:71:58:57:23:
                    fe:b3:0c:cd:88:26:8d:73:c8:c6:11:3c:34:84:69:
                    1e:5a:d4:63:09:bf:4d:80:4b:c5:0d:a4:aa:aa:91:
                    8a:75:2a:11:51:2d:cf:b9:db:1a:12:21:68:74:d0:
                    d4:d0:c4:b2:1f:0e:7a:7d:fb:29:a5:cd:f2:93:d1:
                    1e:86:d8:c4:36:ea:b4:80:6b:5e:8c:03:07:77:1a:
                    6b:7b:b9:3b:b1:c0:ee:b0:c1:14:2c:c4:75:90:da:
                    66:4b:1e:4b:e4:ad:4f:dc:80:48:47:f3:05:e6:5d:
                    84:58:b5:d7:e5:5f:e9:49:a0:16:4e:20:a0:a2:62:
                    02:f4:56:06:9d:fe:9d:d5:38:24:94:54:ca:18:0c:
                    ae:0d:b6:8d:f7:85:f0:c9:a7:ee:23:1e:b3:60:15:
                    56:6b:90:88:08:56:c5:9f:f5:40:5a:ae:81:f0:a3:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:13:BD:73:5D:EC:7E:40:3E:C4:13:6C:FD:18:E9:5C:17:E2:B1:D7
            X509v3 Authority Key Identifier:
                keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3231303a3a2f34362d3436203d3e20323033303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:210::/46

    Signature Algorithm: sha256WithRSAEncryption
         ac:60:48:f2:6c:04:d6:33:8d:c5:38:b1:7f:19:82:9e:49:33:
         e9:20:56:7a:38:fc:0c:5b:92:86:cd:1f:e4:44:9d:31:19:16:
         ce:15:87:8a:33:3e:eb:3f:93:f2:21:4d:ad:27:c5:69:2a:e9:
         14:fd:4a:99:69:8b:f1:db:9d:2e:bb:66:73:af:91:3f:f3:98:
         de:be:c3:0e:40:45:47:93:71:dc:08:db:a7:4d:3c:79:f2:d4:
         40:c8:f6:24:7f:e2:a0:5a:c1:ed:6e:aa:85:ed:cd:32:30:6b:
         d9:0d:e7:59:d3:2e:73:ec:45:cd:77:1c:5f:58:51:85:ed:4d:
         87:5a:7a:f4:85:26:2e:1c:7f:87:9b:e6:6f:41:bd:87:11:84:
         2b:43:6e:3c:02:0f:be:32:e4:da:4b:23:c3:1c:3c:9f:25:6a:
         61:f1:1e:55:ef:ff:2e:5d:0a:70:95:f5:dd:71:ea:79:17:d1:
         58:0f:a4:6f:a9:fe:49:1f:3d:1e:e1:ce:5f:69:40:f4:09:34:
         bc:bc:0c:7b:66:19:14:c1:52:67:cf:86:0d:63:84:b7:f4:72:
         b9:79:46:80:f1:eb:5e:90:ef:4c:d5:3d:08:b8:c9:28:be:94:
         91:d6:28:d0:c2:6c:01:e2:16:4c:29:f4:9a:51:56:d5:04:bd:
         4f:70:0e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----