Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214223.roa
File:                     AS214223.roa (raw, json)
Hash identifier:          XG+2aH48jlR8MtkkcEa2grSdkBDLfPM7nRkkQiupD+U=
Subject key identifier:   09:75:C1:5A:C1:D4:B4:5C:C2:55:D6:8E:09:EE:9E:0C:57:3F:41:84
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       524F23833DE99F49ACE83908AF36B20ABF2D4909
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214223.roa
Signing time:             Sat 25 Jan 2025 18:32:09 +0000
ROA not before:           Sat 25 Jan 2025 18:27:09 +0000
ROA not after:            Sat 24 Jan 2026 18:32:09 +0000
asID:                     214223
IP address blocks:        2a0a:6044:c110::/44 maxlen: 52
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4f:23:83:3d:e9:9f:49:ac:e8:39:08:af:36:b2:0a:bf:2d:49:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jan 25 18:27:09 2025 GMT
            Not After : Jan 24 18:32:09 2026 GMT
        Subject: CN=0975C15AC1D4B45CC255D68E09EE9E0C573F4184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:ce:9e:e4:12:b8:3b:35:b4:26:94:83:d6:
                    8d:5f:d7:61:cb:5e:ae:39:a5:3f:63:c8:ec:b3:27:
                    c5:ef:23:7a:57:95:1e:8a:fb:04:8d:2d:74:ce:e8:
                    58:f1:f1:b8:45:68:7b:1f:b9:07:81:6d:a6:6f:60:
                    60:55:20:53:a1:15:df:0e:e5:c1:87:fc:d0:bd:cc:
                    25:7e:53:cc:8f:eb:6f:1e:76:4f:55:bf:80:6a:d9:
                    80:4c:dd:ca:8d:bc:c1:e3:1c:2d:74:23:52:a0:0b:
                    aa:aa:91:4f:b0:3a:a7:5e:d1:2f:29:ae:0a:f2:79:
                    cf:97:0b:1d:99:c8:ca:ee:42:90:d8:b7:42:b4:bf:
                    3c:75:9e:e0:af:57:07:47:19:97:53:88:b5:d8:3b:
                    89:bd:ed:4b:30:1e:f4:12:92:fe:c2:cc:a5:eb:9d:
                    92:5a:8a:67:4b:e2:d0:ad:85:18:ea:ed:66:87:a4:
                    c3:fc:43:a6:d7:46:98:ab:f8:ce:3f:54:27:f5:05:
                    e4:37:ce:ec:2f:67:47:53:e3:62:a9:b4:6f:3e:04:
                    c2:89:13:f2:27:b2:25:4d:7d:84:8c:53:0d:04:80:
                    a8:d4:4b:36:3e:08:00:d9:d8:76:10:6e:eb:3c:17:
                    7e:ec:8c:46:99:7a:d4:07:83:9f:59:f0:40:fb:85:
                    a3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:75:C1:5A:C1:D4:B4:5C:C2:55:D6:8E:09:EE:9E:0C:57:3F:41:84
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214223.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:c110::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:0b:74:95:91:d6:00:9c:3d:ec:64:14:bf:c4:0c:31:1e:8c:
         35:bb:16:48:c1:2b:8c:0d:27:82:f8:2f:1b:7c:c0:8a:f4:00:
         b6:e0:e9:47:f3:3f:f5:97:44:54:89:b6:cb:cf:36:ea:2b:ce:
         16:25:79:a8:4a:d5:49:35:6d:98:13:97:a6:b1:bf:f7:67:94:
         62:19:ca:a0:34:24:1d:8c:35:84:11:6b:37:ec:b0:26:6f:d8:
         2c:d5:39:d6:fe:6f:21:58:cd:95:f0:93:4d:eb:04:d8:8e:f9:
         de:52:eb:d4:c1:d4:d9:f6:33:43:7e:4d:0d:98:a9:89:c7:ea:
         7e:60:4c:d0:bb:f7:1e:43:bd:2d:25:e3:26:58:e8:94:22:7a:
         c6:34:9d:cc:04:0e:2b:ad:44:cd:50:a4:6c:43:2d:d3:76:2f:
         3c:e3:66:c7:77:fc:94:b2:42:19:36:7c:98:0c:ea:5e:0d:d2:
         e9:cf:bf:f6:16:b1:7c:fc:05:8b:4f:d4:7e:b1:09:30:9a:e6:
         36:ef:21:ee:e4:40:d2:d8:09:0f:02:a6:2a:4a:3d:db:e1:fb:
         45:21:18:26:24:fc:94:35:5b:a8:07:84:e5:b8:ff:cd:1d:9c:
         b1:36:c3:d4:5c:73:4a:26:0d:8b:dc:c7:85:dd:98:ea:dd:3e:
         1f:fb:f7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----