Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa
File:                     326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier:          3qXl5FbKnzkRN6THBxhJGfWR/NW3B6cW7HVh5EatIt4=
Subject key identifier:   47:65:82:B7:5F:CA:58:28:EC:7A:12:DD:34:5F:D9:BD:6F:F9:D9:13
Certificate issuer:       /CN=6EC74C12BEB63E6D47484ACE255EC241A80F5486
Certificate serial:       690D58C9F58BED1668F28DE6FC9B9C01F6524E42
Authority key identifier: 6E:C7:4C:12:BE:B6:3E:6D:47:48:4A:CE:25:5E:C2:41:A8:0F:54:86
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/6EC74C12BEB63E6D47484ACE255EC241A80F5486.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa
Signing time:             Thu 27 Feb 2025 04:51:49 +0000
ROA not before:           Thu 27 Feb 2025 04:46:49 +0000
ROA not after:            Thu 26 Feb 2026 04:51:49 +0000
asID:                     152368
IP address blocks:        2a06:a005:d2d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0d:58:c9:f5:8b:ed:16:68:f2:8d:e6:fc:9b:9c:01:f6:52:4e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EC74C12BEB63E6D47484ACE255EC241A80F5486
        Validity
            Not Before: Feb 27 04:46:49 2025 GMT
            Not After : Feb 26 04:51:49 2026 GMT
        Subject: CN=476582B75FCA5828EC7A12DD345FD9BD6FF9D913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:9d:92:df:cf:4e:32:87:5e:bf:a1:a1:36:
                    1a:55:c1:8b:af:fd:39:9a:f3:77:3e:0f:be:6a:c3:
                    9c:ed:32:0b:a5:be:2f:d3:42:2d:d3:87:60:c5:85:
                    b8:43:39:ab:04:44:71:dd:65:fe:de:f6:87:d7:f4:
                    a7:bb:d0:c2:e5:cf:51:aa:9e:82:a6:11:5c:b6:12:
                    ef:4e:06:93:59:47:32:81:be:1f:78:1d:e0:0b:55:
                    21:d6:82:02:df:00:b4:8c:e4:c5:31:9f:7b:4b:ee:
                    91:ae:14:e9:db:9e:dc:8f:2f:f8:cf:23:93:8b:5b:
                    cf:f6:04:18:9f:36:3c:5b:d4:df:11:c3:ec:26:35:
                    39:75:28:12:09:fe:56:9e:34:fa:3d:94:cc:34:f7:
                    26:45:d0:86:4a:54:56:62:9d:19:58:45:1f:6c:a5:
                    39:31:80:f1:a1:22:11:7a:fc:c8:f4:a3:a1:2d:b8:
                    0a:69:18:3b:8a:1f:56:c0:91:4d:0b:7c:ee:e6:49:
                    c8:15:8f:68:bf:a9:f9:1e:f8:11:28:96:d2:d3:fe:
                    c2:28:a9:ab:82:26:b6:ef:b2:a6:3c:1d:71:88:05:
                    91:f9:64:52:d8:19:91:aa:02:13:75:c0:e6:60:bc:
                    bd:58:7c:45:b7:ca:be:9f:ca:fc:f8:ba:d8:a6:1a:
                    01:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:65:82:B7:5F:CA:58:28:EC:7A:12:DD:34:5F:D9:BD:6F:F9:D9:13
            X509v3 Authority Key Identifier:
                keyid:6E:C7:4C:12:BE:B6:3E:6D:47:48:4A:CE:25:5E:C2:41:A8:0F:54:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/6EC74C12BEB63E6D47484ACE255EC241A80F5486.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2d::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:23:67:28:d7:e1:23:27:bf:0a:02:1e:c7:16:d0:ad:f1:9b:
         14:14:63:42:70:de:d2:b0:5d:22:74:c7:be:49:78:b1:c0:8b:
         71:c4:25:bf:ab:60:27:75:54:2f:a5:dc:0e:03:d4:22:0b:83:
         95:2c:da:a8:6e:b6:ca:ad:54:41:7c:e5:7c:37:78:21:19:5e:
         96:29:3d:a5:50:7b:c9:39:8b:f2:28:1d:1f:75:0d:58:76:1d:
         1e:9d:30:88:fb:63:00:ef:02:ce:58:a1:82:d0:3a:2f:37:84:
         d9:16:4c:d3:7b:7c:eb:a6:51:02:5a:1a:75:41:cd:fb:d5:30:
         02:7a:bf:ce:bd:e1:96:5e:f7:65:42:b5:2c:75:b1:f5:ba:2c:
         02:50:56:b1:8d:0b:bf:cd:bb:cb:bc:be:ed:8d:2e:34:c4:ef:
         a2:6c:7b:ad:b0:65:a1:ef:da:27:c4:ae:b0:15:5c:61:67:2f:
         f0:fe:d4:41:3b:66:bb:7a:88:8f:f6:fe:d3:75:40:29:9f:2c:
         88:fd:2c:b5:c8:7f:9e:5b:f9:28:e7:e5:47:25:5e:0d:36:38:
         1f:95:46:49:90:0a:f4:c5:36:1c:88:52:b5:41:90:c5:a7:80:
         6a:fb:5a:e0:99:1d:f3:b9:27:59:5b:f4:31:e9:69:2c:45:ff:
         17:5c:c6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----