Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663330303a3a2f34302d3430203d3e20323135343730.roa
File:                     326131343a373538303a663330303a3a2f34302d3430203d3e20323135343730.roa (raw, json)
Hash identifier:          NYjufeU5nji5tNLR9669xX3/zAC6IxnZWFE8KHjLm6Y=
Subject key identifier:   56:71:08:11:82:5B:DB:B9:EF:3B:F9:32:25:36:A0:F9:12:79:41:05
Certificate issuer:       /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Certificate serial:       4F9BD2E4A5553106776A72BD80508A6E3D207FAF
Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663330303a3a2f34302d3430203d3e20323135343730.roa
Signing time:             Thu 27 Feb 2025 06:14:48 +0000
ROA not before:           Thu 27 Feb 2025 06:09:48 +0000
ROA not after:            Thu 26 Feb 2026 06:14:48 +0000
asID:                     215470
IP address blocks:        2a14:7580:f300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9b:d2:e4:a5:55:31:06:77:6a:72:bd:80:50:8a:6e:3d:20:7f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
        Validity
            Not Before: Feb 27 06:09:48 2025 GMT
            Not After : Feb 26 06:14:48 2026 GMT
        Subject: CN=56710811825BDBB9EF3BF9322536A0F912794105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6f:82:9c:2e:bc:50:79:0a:61:33:16:4d:f7:
                    05:dc:f5:ea:c5:7f:1a:63:83:b4:4e:93:90:d8:97:
                    3e:92:d2:a3:33:48:50:3a:e7:f3:4a:79:1c:9f:e3:
                    99:0b:9f:10:40:66:80:57:52:a5:63:ef:56:5c:23:
                    81:b0:0f:ae:37:ee:f1:06:df:b9:5f:3c:ee:a4:79:
                    5e:4b:05:4b:f5:95:d2:88:ba:13:61:92:3f:2f:1e:
                    4a:6a:30:94:90:d8:03:29:42:6f:97:6d:2f:7b:9e:
                    ca:86:f8:ce:c3:37:82:ae:e6:10:d8:d8:ca:d7:58:
                    ab:df:28:82:a8:04:3d:09:b7:b0:9d:13:09:eb:33:
                    fe:ad:15:2e:62:81:ac:1e:d8:b1:32:70:fa:cb:f5:
                    ff:4d:8d:90:7c:ab:04:42:1d:bd:cb:9d:1a:46:03:
                    9e:30:c6:af:e5:55:8a:84:e8:15:b7:89:35:e7:99:
                    9e:f4:b6:b8:77:64:db:b1:c6:c1:81:9d:2d:c2:2f:
                    f0:ea:a7:92:f3:24:55:f7:91:8b:03:df:11:67:81:
                    39:de:08:dc:e0:29:c3:77:3a:e1:37:21:d8:70:41:
                    0a:24:a4:40:f6:32:09:fe:14:49:d1:99:48:8f:a5:
                    1f:6f:c0:91:53:4c:d0:75:77:05:8c:e1:2b:7e:dc:
                    95:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:71:08:11:82:5B:DB:B9:EF:3B:F9:32:25:36:A0:F9:12:79:41:05
            X509v3 Authority Key Identifier:
                keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663330303a3a2f34302d3430203d3e20323135343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:f300::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:30:49:a6:ee:77:a3:7b:41:22:a5:07:ab:e7:d7:f4:65:bd:
         a3:4c:a7:f0:23:ce:92:08:3d:45:7e:6f:50:9a:0a:24:75:b9:
         25:ff:8b:82:ba:3a:0c:71:59:24:06:35:05:34:e6:5d:94:27:
         d0:88:bb:5e:c2:2e:ab:fe:92:c2:5f:b6:91:e6:83:a3:f1:ed:
         2e:6d:63:9a:11:a2:84:43:2b:6c:eb:9a:4d:76:1f:6a:16:e0:
         14:2c:bf:d7:d6:d5:d8:a0:25:ec:48:10:f4:8c:42:3f:6c:7f:
         53:30:54:61:fb:de:99:1d:dc:99:07:01:be:35:c3:83:fa:bc:
         dd:9d:59:66:61:45:28:ff:22:e4:e3:08:1c:9f:5e:3d:cc:20:
         10:e0:46:9c:63:89:06:33:15:89:4f:f8:21:92:3d:46:91:53:
         4b:04:0b:71:10:d8:f7:67:72:ea:91:38:83:5d:dc:34:56:ba:
         4c:e3:35:13:72:72:9b:33:1a:7b:63:72:f0:0a:9f:a3:ac:64:
         40:ca:9c:fa:5a:35:c0:51:0e:35:ae:79:95:f6:e6:06:ef:22:
         d0:df:d1:87:62:b2:c0:5a:67:a8:b1:24:08:83:18:72:14:d1:
         00:27:e0:27:27:94:33:11:4a:33:83:f6:05:4d:12:36:95:a8:
         e1:f9:87:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----