Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/326130613a363034343a376230343a3a2f34382d3438203d3e20333937373330.roa
File:                     326130613a363034343a376230343a3a2f34382d3438203d3e20333937373330.roa (raw, json)
Hash identifier:          oFlaNN8zjfzX/t38JcNKBx+QvJ8/nTSN0K9i6iEVoEQ=
Subject key identifier:   95:43:18:CF:5D:20:30:B6:18:E6:34:56:F0:6C:DA:49:D3:F9:62:F6
Certificate issuer:       /CN=451E20DA90C6D597951FEC29DF3771EAC47643EE
Certificate serial:       43BDCA085522BBC77A514EF10C2A6C98033FE9BA
Authority key identifier: 45:1E:20:DA:90:C6:D5:97:95:1F:EC:29:DF:37:71:EA:C4:76:43:EE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/451E20DA90C6D597951FEC29DF3771EAC47643EE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/326130613a363034343a376230343a3a2f34382d3438203d3e20333937373330.roa
Signing time:             Thu 19 Dec 2024 18:44:35 +0000
ROA not before:           Thu 19 Dec 2024 18:39:35 +0000
ROA not after:            Thu 18 Dec 2025 18:44:35 +0000
asID:                     397730
IP address blocks:        2a0a:6044:7b04::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bd:ca:08:55:22:bb:c7:7a:51:4e:f1:0c:2a:6c:98:03:3f:e9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451E20DA90C6D597951FEC29DF3771EAC47643EE
        Validity
            Not Before: Dec 19 18:39:35 2024 GMT
            Not After : Dec 18 18:44:35 2025 GMT
        Subject: CN=954318CF5D2030B618E63456F06CDA49D3F962F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b1:a6:2d:d6:5b:03:07:ba:0c:d0:75:74:32:
                    e0:a2:28:8a:38:f8:a6:af:ef:1e:5c:1d:9f:8d:9f:
                    f9:4e:d2:f7:8e:e8:5b:a0:09:ed:4f:99:16:82:6c:
                    14:f9:a8:24:32:ea:81:ea:04:fb:db:8d:32:a6:d3:
                    b2:64:56:9b:47:48:e3:7c:3c:08:aa:8c:61:69:47:
                    1f:d1:0c:74:5e:d4:2c:1a:c2:86:14:86:74:84:71:
                    a6:b0:02:4a:01:79:4d:e7:cc:bb:75:02:b6:60:bc:
                    83:b6:34:7c:c7:fc:6f:8f:8b:de:d5:ef:29:f1:9f:
                    d8:c2:59:1b:ee:ab:26:78:f1:aa:2b:dd:d6:ce:de:
                    de:12:f2:30:88:e2:d2:e3:a2:79:10:a0:4a:52:e2:
                    0d:c1:ee:73:c3:db:30:d0:9c:8c:87:68:84:6a:77:
                    6a:af:9e:81:3b:a7:a5:e0:6a:26:91:d4:8a:b0:ca:
                    f4:b9:cc:3d:b8:b4:ce:79:8d:fe:0f:8d:f1:29:a9:
                    41:32:dc:12:db:f3:99:bc:e7:9d:f3:21:0c:51:34:
                    7f:09:44:30:1c:61:c2:97:68:72:c9:25:01:12:64:
                    6a:2f:6a:e3:d4:a0:a8:6d:ca:a5:63:e8:c3:47:fc:
                    6a:08:9a:b8:ed:9c:89:72:9a:74:71:59:14:33:47:
                    7a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:43:18:CF:5D:20:30:B6:18:E6:34:56:F0:6C:DA:49:D3:F9:62:F6
            X509v3 Authority Key Identifier:
                keyid:45:1E:20:DA:90:C6:D5:97:95:1F:EC:29:DF:37:71:EA:C4:76:43:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/451E20DA90C6D597951FEC29DF3771EAC47643EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/451E20DA90C6D597951FEC29DF3771EAC47643EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/326130613a363034343a376230343a3a2f34382d3438203d3e20333937373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7b04::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:90:58:f8:41:6b:a5:b5:cc:71:d1:0d:ff:ef:3f:31:d6:fe:
         93:fa:f5:01:54:d3:01:33:3c:a2:d0:bf:0b:8e:98:54:ab:83:
         18:d3:99:25:53:55:66:dc:d6:61:fa:f4:6b:8c:49:14:9b:46:
         2e:fa:c2:f9:d7:52:cf:05:6b:a8:49:82:5c:9c:95:d1:6a:b2:
         38:f6:6c:ec:11:7a:d0:7d:94:87:66:78:77:52:5c:ca:c0:60:
         bb:48:8a:1a:df:ad:fc:ee:31:9a:b6:32:5c:30:0c:29:54:9a:
         f2:bf:0a:42:88:24:be:b9:25:22:5d:5b:b5:b1:f7:e9:2a:3f:
         da:9c:fd:d2:70:53:2d:52:08:8f:2f:27:44:5d:80:f0:7d:d3:
         8c:66:db:d9:35:26:09:b7:4f:07:cd:c6:3c:3f:41:e8:c8:ed:
         db:bc:0d:c1:5c:19:b5:b7:ce:d1:f8:70:01:55:d9:25:cb:41:
         0d:93:40:9e:ed:4a:f8:fa:38:c0:69:1a:2c:13:cd:dd:f6:c0:
         4d:ab:40:77:80:34:eb:11:f2:f9:55:7c:ec:1d:23:6a:3d:0d:
         37:8c:40:f3:60:68:e8:ef:b1:2d:88:e3:05:71:06:ba:fc:6b:
         12:0b:7c:e5:33:4f:1f:60:29:e6:ec:3a:2a:da:8f:ef:56:b9:
         6d:d7:c3:a6
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUQ73KCFUiu8d6UU7xDCpsmAM/6bowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUxRTIwREE5MEM2RDU5Nzk1MUZFQzI5REYzNzcxRUFD
NDc2NDNFRTAeFw0yNDEyMTkxODM5MzVaFw0yNTEyMTgxODQ0MzVaMDMxMTAvBgNV
BAMTKDk1NDMxOENGNUQyMDMwQjYxOEU2MzQ1NkYwNkNEQTQ5RDNGOTYyRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgsaYt1lsDB7oM0HV0MuCiKIo4
+Kav7x5cHZ+Nn/lO0veO6FugCe1PmRaCbBT5qCQy6oHqBPvbjTKm07JkVptHSON8
PAiqjGFpRx/RDHRe1CwawoYUhnSEcaawAkoBeU3nzLt1ArZgvIO2NHzH/G+Pi97V
7ynxn9jCWRvuqyZ48aor3dbO3t4S8jCI4tLjonkQoEpS4g3B7nPD2zDQnIyHaIRq
d2qvnoE7p6XgaiaR1IqwyvS5zD24tM55jf4PjfEpqUEy3BLb85m8553zIQxRNH8J
RDAcYcKXaHLJJQESZGovauPUoKhtyqVj6MNH/GoImrjtnIlymnRxWRQzR3r5AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUlUMYz10gMLYY5jRW8GzaSdP5YvYwHwYDVR0j
BBgwFoAURR4g2pDG1ZeVH+wp3zdx6sR2Q+4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNjZGY5Y2EtZGQ2NC00ZjMxLWFiZjMtMGYzMmI4ZTdm
ZTc5LzEvNDUxRTIwREE5MEM2RDU5Nzk1MUZFQzI5REYzNzcxRUFDNDc2NDNFRS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC80NTFFMjBEQTkwQzZENTk3OTUxRkVDMjlE
RjM3NzFFQUM0NzY0M0VFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8yM2NkZjljYS1kZDY0LTRmMzEtYWJmMy0wZjMyYjhlN2ZlNzkvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM3NjIzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMz
OTM3MzczMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRHsEMA0GCSqGSIb3DQEBCwUAA4IBAQAU
kFj4QWultcxx0Q3/7z8x1v6T+vUBVNMBMzyi0L8LjphUq4MY05klU1Vm3NZh+vRr
jEkUm0Yu+sL511LPBWuoSYJcnJXRarI49mzsEXrQfZSHZnh3UlzKwGC7SIoa3638
7jGatjJcMAwpVJryvwpCiCS+uSUiXVu1sffpKj/anP3ScFMtUgiPLydEXYDwfdOM
ZtvZNSYJt08HzcY8P0HoyO3bvA3BXBm1t87R+HABVdkly0ENk0Ce7Ur4+jjAaRos
E83d9sBNq0B3gDTrEfL5VXzsHSNqPQ03jEDzYGjo77EtiOMFcQa6/GsSC3zlM08f
YCnm7Doq2o/vVrlt18Om
-----END CERTIFICATE-----