Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a633131303a3a2f34342d3438203d3e20323134323233.roa
File:                     326130613a363034343a633131303a3a2f34342d3438203d3e20323134323233.roa (raw, json)
Hash identifier:          Enu8D36fIY1XUOoVoRq2YTk3FBf2gE3qr2jO5TSYuQo=
Subject key identifier:   08:50:21:0C:F7:BB:85:96:18:5F:42:AC:2D:E9:C2:03:FB:75:EE:84
Certificate issuer:       /CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
Certificate serial:       45EE22BECB337DB49C8C73928C5B55D0062D7DB4
Authority key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a633131303a3a2f34342d3438203d3e20323134323233.roa
Signing time:             Tue 11 Feb 2025 16:44:55 +0000
ROA not before:           Tue 11 Feb 2025 16:39:55 +0000
ROA not after:            Tue 10 Feb 2026 16:44:55 +0000
asID:                     214223
IP address blocks:        2a0a:6044:c110::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ee:22:be:cb:33:7d:b4:9c:8c:73:92:8c:5b:55:d0:06:2d:7d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
        Validity
            Not Before: Feb 11 16:39:55 2025 GMT
            Not After : Feb 10 16:44:55 2026 GMT
        Subject: CN=0850210CF7BB8596185F42AC2DE9C203FB75EE84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:65:3c:68:ad:de:d1:ca:6b:6f:f2:9f:a5:92:
                    74:e9:bf:a8:87:4c:4b:dd:9c:b1:0c:65:93:04:c7:
                    28:f3:80:e0:47:b1:72:40:68:db:46:18:94:6c:4d:
                    3c:27:60:d3:54:0e:38:1a:fd:7b:e3:db:93:c7:62:
                    bf:9d:fe:e9:72:73:b7:dc:57:d0:53:12:c8:cf:21:
                    12:11:54:05:b1:68:4b:ba:9d:df:e6:1b:52:e3:63:
                    7c:34:98:43:df:46:60:2a:50:48:82:6c:49:9f:5b:
                    55:01:6c:16:b2:85:e1:7a:84:e8:f3:3c:dd:ff:c9:
                    4d:23:19:51:c2:c0:d0:6b:87:f6:17:96:f8:de:ad:
                    b8:64:69:a2:27:5b:c9:81:26:8f:f5:1f:65:da:4e:
                    49:3b:03:f2:33:8f:09:ae:1b:12:dd:0b:83:05:5d:
                    de:1b:2d:7b:03:4c:f5:51:4f:f4:70:78:96:3e:7f:
                    72:c4:db:5d:98:ae:54:7a:b1:ea:9d:5d:a7:ab:14:
                    85:77:b4:bb:0b:17:e1:0c:da:0a:ae:b4:11:d1:2d:
                    d2:21:d3:0f:e3:7e:28:41:8e:e4:cd:31:e1:64:9e:
                    ba:bc:f8:74:b3:64:d2:7d:cb:8a:f2:f4:c9:7b:7a:
                    7f:ce:e6:8f:30:0e:86:4e:c0:aa:48:72:e1:df:6e:
                    36:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:50:21:0C:F7:BB:85:96:18:5F:42:AC:2D:E9:C2:03:FB:75:EE:84
            X509v3 Authority Key Identifier:
                keyid:ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a633131303a3a2f34342d3438203d3e20323134323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:c110::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:2a:2a:08:95:a4:cb:76:d9:18:d5:2d:42:b3:e8:06:73:85:
         b3:7b:ff:18:26:a8:86:1e:d0:47:e0:58:e5:77:99:7a:47:61:
         77:b7:fe:4e:9a:8e:22:20:eb:84:b6:75:28:d0:0f:d2:1b:fd:
         db:f4:bf:9b:0b:31:dc:05:cf:81:10:cb:92:26:59:de:b7:e7:
         2e:94:a4:ae:05:2d:4d:b3:76:f6:56:58:0a:31:dd:55:fb:54:
         d8:42:ff:b9:aa:5d:6d:e0:f5:68:a9:33:7c:2e:b1:10:11:8d:
         37:7b:84:fd:04:87:f3:7f:6f:fb:9a:a4:93:0b:9e:75:13:02:
         23:01:d8:2d:15:25:fe:04:62:22:a3:3f:1b:4d:19:be:ba:92:
         1e:df:44:2b:9f:6c:a0:de:59:74:c2:f0:3e:ab:d5:99:89:9a:
         0b:15:0c:4e:d3:0e:cd:82:97:fc:c4:4e:ac:08:6f:29:75:33:
         e7:5b:49:e6:5a:32:41:a0:35:ee:17:46:72:2a:da:15:4c:a5:
         d0:13:27:25:74:b7:b4:27:29:de:04:26:84:8b:66:24:0d:e9:
         11:45:a6:8c:63:c1:db:81:29:63:37:82:7b:f2:18:b2:29:6c:
         b2:e5:71:e7:f4:24:da:51:52:3c:e1:19:06:6b:32:d5:9d:e3:
         91:49:3c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----