Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/326130363a613030353a313530373a3a2f34382d3438203d3e203530313034.roa
File:                     326130363a613030353a313530373a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier:          O8PHbihXJmzLnfo6VlRmCcQg+Mwhz4OX02VwYH4GaVs=
Subject key identifier:   87:20:E6:5E:07:A7:10:E1:FA:C2:56:E4:B0:AE:07:B2:98:2D:A3:D6
Certificate issuer:       /CN=6EC74C12BEB63E6D47484ACE255EC241A80F5486
Certificate serial:       24470EAEF896B3804676439D3E282E31E52107FB
Authority key identifier: 6E:C7:4C:12:BE:B6:3E:6D:47:48:4A:CE:25:5E:C2:41:A8:0F:54:86
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/6EC74C12BEB63E6D47484ACE255EC241A80F5486.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/326130363a613030353a313530373a3a2f34382d3438203d3e203530313034.roa
Signing time:             Thu 27 Feb 2025 04:51:49 +0000
ROA not before:           Thu 27 Feb 2025 04:46:49 +0000
ROA not after:            Thu 26 Feb 2026 04:51:49 +0000
asID:                     50104
IP address blocks:        2a06:a005:1507::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:47:0e:ae:f8:96:b3:80:46:76:43:9d:3e:28:2e:31:e5:21:07:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EC74C12BEB63E6D47484ACE255EC241A80F5486
        Validity
            Not Before: Feb 27 04:46:49 2025 GMT
            Not After : Feb 26 04:51:49 2026 GMT
        Subject: CN=8720E65E07A710E1FAC256E4B0AE07B2982DA3D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:23:e7:3b:58:6c:c6:09:e1:b1:6d:6d:b0:
                    b5:ff:e9:11:89:d1:9f:9e:36:b1:d4:ff:d7:06:d5:
                    dd:1e:ca:8b:be:47:fd:c5:58:64:51:df:58:03:9a:
                    72:63:a3:28:8b:f6:41:19:49:82:4e:09:a0:e5:e2:
                    1c:36:34:ba:ba:c6:51:7d:0c:c6:e0:b2:7c:a6:b0:
                    d9:37:2f:b3:81:c5:7e:cc:fb:27:c1:a1:da:fd:fc:
                    a1:1a:72:a0:91:28:d3:f4:61:33:52:35:b5:04:0d:
                    ec:eb:f9:e4:f6:a6:89:a6:d8:53:dd:52:bb:81:b7:
                    46:ea:19:0c:93:aa:7f:86:54:23:d3:b0:56:92:76:
                    2d:03:34:98:ce:f2:fc:23:43:8a:91:06:18:22:b2:
                    23:1c:73:6c:b5:8d:2c:28:29:e2:41:6d:44:42:34:
                    95:88:1a:aa:45:ec:52:90:8c:cc:39:1b:8d:8f:79:
                    ff:eb:eb:2e:a8:23:53:d4:c5:95:5c:89:2b:fd:7b:
                    15:08:b2:ae:0d:6f:87:e6:0f:24:bd:dd:f8:61:9e:
                    32:ef:1d:7b:8e:7c:fc:47:46:6f:c8:74:8c:97:f6:
                    63:38:b3:d8:9b:71:b1:4a:56:8e:e7:6e:6d:f1:90:
                    91:4f:d8:02:90:9a:19:c7:ce:fd:fb:1d:03:12:c6:
                    8e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:20:E6:5E:07:A7:10:E1:FA:C2:56:E4:B0:AE:07:B2:98:2D:A3:D6
            X509v3 Authority Key Identifier:
                keyid:6E:C7:4C:12:BE:B6:3E:6D:47:48:4A:CE:25:5E:C2:41:A8:0F:54:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/6EC74C12BEB63E6D47484ACE255EC241A80F5486.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/326130363a613030353a313530373a3a2f34382d3438203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1507::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:50:cf:2c:b4:35:3a:56:74:78:09:3e:3d:f1:f9:3a:0f:4a:
         f2:10:34:4d:95:a0:20:a3:df:a4:a4:e0:49:d6:97:27:99:e5:
         49:57:67:6e:5c:9a:e9:29:1a:c5:ea:86:66:14:7c:9e:67:ea:
         01:a8:5c:76:da:22:56:6c:65:3b:59:02:b6:a7:59:05:0d:db:
         60:c7:c8:f6:bf:d3:c6:d7:18:f5:c7:88:18:e9:81:cc:13:b7:
         eb:47:94:b9:e8:be:60:26:80:95:22:33:14:36:40:b0:f8:8f:
         9f:5e:36:b6:39:fe:21:4b:3c:7e:45:c0:ea:74:71:0c:94:f0:
         86:f6:a3:ed:34:c9:3e:6e:29:2c:f6:95:02:38:28:34:71:6b:
         78:78:bb:8f:30:bb:71:dd:e6:5c:a7:ee:d0:08:49:f5:48:5b:
         d1:5e:e5:32:67:5c:ce:c0:05:dc:7d:86:2b:3d:8b:16:75:81:
         2d:a7:74:d3:fa:38:46:f7:51:a9:2b:34:e7:66:1f:e5:5d:54:
         77:07:24:d8:90:c8:61:d8:4d:0c:0f:e0:9b:60:39:f8:b4:8a:
         6b:59:61:89:12:54:2c:22:0d:10:08:46:3b:24:9b:09:1b:a0:
         3e:4a:33:0f:5f:b2:97:8e:06:3d:0f:b7:6c:02:b3:d4:62:d8:
         1c:3d:85:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----