Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663334303a3a2f34342d3438203d3e20323133343238.roa
File:                     326131343a373538303a663334303a3a2f34342d3438203d3e20323133343238.roa (raw, json)
Hash identifier:          Z7InVHvKI4/fqGkdwdL0zl1WS4Iyc09xlEsVxaD8p5A=
Subject key identifier:   64:27:5F:1B:13:BB:53:E0:73:21:2E:55:80:54:9A:E8:59:AB:11:6A
Certificate issuer:       /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Certificate serial:       5B17F5F19AB56BC8D47281520F2CA5F6A6D4B151
Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663334303a3a2f34342d3438203d3e20323133343238.roa
Signing time:             Thu 27 Feb 2025 02:55:30 +0000
ROA not before:           Thu 27 Feb 2025 02:50:30 +0000
ROA not after:            Thu 26 Feb 2026 02:55:30 +0000
asID:                     213428
IP address blocks:        2a14:7580:f340::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:17:f5:f1:9a:b5:6b:c8:d4:72:81:52:0f:2c:a5:f6:a6:d4:b1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
        Validity
            Not Before: Feb 27 02:50:30 2025 GMT
            Not After : Feb 26 02:55:30 2026 GMT
        Subject: CN=64275F1B13BB53E073212E5580549AE859AB116A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:73:16:2b:c0:0d:b8:79:1a:8e:95:82:47:
                    b2:92:84:39:44:e7:28:06:01:43:29:df:f9:0f:01:
                    e6:86:e7:c5:47:0f:c7:e6:60:29:7f:08:3a:f5:85:
                    ed:d5:d2:55:49:8d:0b:ba:79:91:9b:4d:6a:10:4a:
                    a6:22:ed:d4:15:78:f8:0f:1e:bd:4c:e8:21:5b:ed:
                    02:26:48:4e:e6:40:40:f8:ea:84:a2:02:a1:e3:45:
                    47:5d:9f:03:ff:dc:1e:a0:db:72:f0:95:05:2c:b6:
                    b5:ea:31:50:60:02:8a:d8:3d:e5:b6:9e:14:b1:af:
                    2f:1b:af:ca:30:fc:4b:49:60:2a:7a:1e:ec:41:8e:
                    e7:9a:2d:1c:fa:81:ea:ea:de:ff:73:9d:5c:96:07:
                    01:70:ff:da:b8:91:05:43:fa:cc:2a:d8:5d:da:89:
                    ec:f3:17:8a:19:99:eb:8c:06:7e:1c:05:8a:a5:1c:
                    85:fc:2c:42:4c:e5:fc:54:5c:e6:92:1e:77:52:58:
                    02:68:72:c0:fe:20:46:43:8f:5c:b7:1b:21:70:96:
                    5b:d9:27:69:cd:3b:33:a1:94:aa:9f:7e:60:da:42:
                    bb:f4:ba:e3:10:b4:ee:7a:95:5a:6d:d7:4d:c7:74:
                    fd:27:01:59:cf:eb:b7:9b:3e:bb:0e:d9:a9:ed:2e:
                    bc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:27:5F:1B:13:BB:53:E0:73:21:2E:55:80:54:9A:E8:59:AB:11:6A
            X509v3 Authority Key Identifier:
                keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663334303a3a2f34342d3438203d3e20323133343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:f340::/44

    Signature Algorithm: sha256WithRSAEncryption
         68:5e:06:72:2b:85:30:d4:6e:2a:84:28:1b:54:07:b6:07:6d:
         53:bc:eb:89:ef:5d:0a:d6:3e:9a:24:2d:cd:6e:1d:d4:11:07:
         1b:ed:91:1c:4e:3c:d1:b3:ad:2e:0f:2f:3d:44:38:3f:7c:51:
         de:db:37:33:d2:76:77:09:01:f3:57:f3:e3:d5:b1:90:24:0c:
         50:0a:52:ca:c1:86:a3:12:a6:92:8f:12:0f:fd:56:53:52:9f:
         05:dc:5c:b8:e0:f4:43:5b:24:47:b1:c0:7a:f0:3a:19:5b:e5:
         b5:ff:dd:b5:30:a9:ac:3d:54:de:10:10:ab:18:db:eb:63:f4:
         36:f9:56:28:0e:1d:8d:b5:29:e9:cc:93:e3:97:8c:fa:52:ad:
         41:ea:02:f3:23:ea:1d:87:7e:f6:98:f3:f8:d2:b2:7e:67:37:
         05:22:59:aa:11:8d:c0:87:85:85:58:98:4f:26:c0:01:03:7a:
         cc:8e:8f:2d:ba:60:f4:7e:9f:66:fb:ea:e9:64:c9:e6:51:fc:
         20:4a:5a:41:e4:8d:60:67:10:bb:bf:c5:d1:97:17:bd:ef:89:
         ca:40:60:12:15:00:2b:22:e6:c6:32:f0:5d:e3:77:62:2d:5b:
         99:a3:2a:6f:20:e6:9e:4e:0e:59:8e:6a:2b:6d:b6:3b:e4:4d:
         22:29:ad:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----