Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/6/326131343a373538343a333030303a3a2f34382d3438203d3e203530313034.roa
File:                     326131343a373538343a333030303a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier:          g3tEIoUNUE0CkN7yg67dbsO+K36vOx7gIDZrka/mzHc=
Subject key identifier:   3B:68:3B:6C:07:83:6E:73:63:FD:F4:3C:67:F2:4E:49:CE:30:43:43
Certificate issuer:       /CN=545C6A5736C41820C43C221A4B622EF9C3675652
Certificate serial:       2725B1973D9D9F262A7BC0D23B2848E977FF1735
Authority key identifier: 54:5C:6A:57:36:C4:18:20:C4:3C:22:1A:4B:62:2E:F9:C3:67:56:52
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/545C6A5736C41820C43C221A4B622EF9C3675652.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/6/326131343a373538343a333030303a3a2f34382d3438203d3e203530313034.roa
Signing time:             Thu 27 Feb 2025 04:51:50 +0000
ROA not before:           Thu 27 Feb 2025 04:46:50 +0000
ROA not after:            Thu 26 Feb 2026 04:51:50 +0000
asID:                     50104
IP address blocks:        2a14:7584:3000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:25:b1:97:3d:9d:9f:26:2a:7b:c0:d2:3b:28:48:e9:77:ff:17:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=545C6A5736C41820C43C221A4B622EF9C3675652
        Validity
            Not Before: Feb 27 04:46:50 2025 GMT
            Not After : Feb 26 04:51:50 2026 GMT
        Subject: CN=3B683B6C07836E7363FDF43C67F24E49CE304343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:38:32:ed:fe:90:fd:76:16:97:01:71:50:
                    f0:e6:bb:77:8f:bc:18:b2:56:3d:11:4f:76:a2:0b:
                    f1:f6:1a:75:1c:76:2e:c6:99:b1:16:9b:30:e4:78:
                    54:92:3e:f5:4b:84:14:b6:04:4a:e3:ba:17:49:b8:
                    8d:34:eb:09:4c:99:9f:af:59:40:00:3a:35:b4:22:
                    39:36:7f:3d:04:18:a8:1b:4d:5c:91:9e:a6:3f:cb:
                    e2:2e:01:7d:6c:6e:9b:b2:83:1f:5b:17:18:1e:90:
                    eb:06:d6:64:5b:5c:02:3c:be:3e:22:87:26:1f:70:
                    e3:b4:49:b4:69:15:96:11:c6:44:34:f0:d0:54:f4:
                    5b:2e:a7:39:13:f9:94:12:fe:db:97:c5:ad:33:28:
                    94:07:cf:25:25:0d:e9:a9:bd:19:42:b6:c5:3e:fc:
                    0f:4f:27:2c:d2:c8:85:57:ab:3e:87:a0:ce:e7:42:
                    b4:38:99:02:c8:96:6b:62:4d:8f:3f:e4:bb:a0:3b:
                    c3:eb:03:11:58:53:86:01:64:d2:c9:ee:b9:fa:97:
                    00:66:eb:a1:a8:9c:8b:2c:57:7e:d6:58:a3:50:0a:
                    84:0b:d9:38:80:3e:11:ae:16:0c:25:d9:54:4d:08:
                    71:2d:81:ff:8c:04:63:27:d9:d9:37:fa:e0:36:b8:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:68:3B:6C:07:83:6E:73:63:FD:F4:3C:67:F2:4E:49:CE:30:43:43
            X509v3 Authority Key Identifier:
                keyid:54:5C:6A:57:36:C4:18:20:C4:3C:22:1A:4B:62:2E:F9:C3:67:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/6/545C6A5736C41820C43C221A4B622EF9C3675652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/545C6A5736C41820C43C221A4B622EF9C3675652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/6/326131343a373538343a333030303a3a2f34382d3438203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:7b:3d:91:88:8c:7f:e6:7d:92:33:1a:35:35:73:59:26:ab:
         8c:7e:9e:13:57:51:2b:4b:58:b9:d1:4d:28:12:91:ea:37:b1:
         80:76:f7:73:5a:c2:74:b2:2b:00:0c:df:6e:0e:d1:8f:ed:23:
         6c:bd:a2:a3:f1:6d:9d:24:ea:93:33:7e:62:9e:67:59:68:ca:
         ce:8e:06:ba:76:b8:73:d8:16:2b:94:87:1e:0e:19:8c:41:69:
         0b:bc:18:91:8c:3a:55:75:a1:6e:53:e7:07:b8:f4:79:c0:c5:
         6c:99:b6:3c:da:67:18:bc:66:7c:52:5a:b2:d9:f7:b6:f1:97:
         42:47:02:db:ab:ef:70:7e:21:12:3c:b6:72:a3:97:ae:ff:98:
         ec:07:50:a1:94:9d:c6:fb:26:20:10:4f:89:61:e3:0a:d2:88:
         48:f2:6b:04:99:b6:81:ea:b2:a5:8f:eb:69:7c:6d:33:ee:d7:
         5b:36:a1:24:e6:8a:e4:2f:52:76:7e:ba:13:a0:27:4f:8b:73:
         b9:a6:1d:f3:18:e8:aa:c7:a6:4a:3c:ab:c8:42:b9:e8:3b:a6:
         cb:9f:0f:f5:00:6c:55:65:c8:43:6e:9d:a2:6a:fe:f5:6d:58:
         c2:1d:e1:9b:a5:e6:24:f8:17:71:22:3b:82:f6:31:fb:ed:e2:
         76:d1:75:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----