Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/326130393a353463333a613034663a3a2f34382d3438203d3e20323135313437.roa
File:                     326130393a353463333a613034663a3a2f34382d3438203d3e20323135313437.roa (raw, json)
Hash identifier:          DYKApsC0Xy9yKLi3q0BaMZa16VHMvjlxYhlK7Vyadxk=
Subject key identifier:   02:C3:56:16:BD:AA:9B:FB:EE:EA:98:84:7B:9F:AD:58:07:C1:E9:75
Certificate issuer:       /CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4
Certificate serial:       3A5AF4F9F27448CB8DD425577092AEB907BFB0B3
Authority key identifier: B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/326130393a353463333a613034663a3a2f34382d3438203d3e20323135313437.roa
Signing time:             Sat 22 Mar 2025 21:11:13 +0000
ROA not before:           Sat 22 Mar 2025 21:06:13 +0000
ROA not after:            Sat 21 Mar 2026 21:11:13 +0000
asID:                     215147
IP address blocks:        2a09:54c3:a04f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5a:f4:f9:f2:74:48:cb:8d:d4:25:57:70:92:ae:b9:07:bf:b0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4
        Validity
            Not Before: Mar 22 21:06:13 2025 GMT
            Not After : Mar 21 21:11:13 2026 GMT
        Subject: CN=02C35616BDAA9BFBEEEA98847B9FAD5807C1E975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6f:4f:fe:99:da:b3:9c:84:eb:d5:ee:af:4c:
                    d5:28:d7:b2:90:76:27:3f:2c:3b:da:84:b5:3f:13:
                    a2:46:d3:bf:01:89:e2:b5:b2:a5:e4:ac:5d:e1:49:
                    c7:ff:86:96:22:4c:d5:86:26:30:b6:65:a4:de:81:
                    96:6c:83:bf:a7:3b:bd:56:0b:4e:60:0a:e5:06:74:
                    44:76:de:69:57:82:47:94:90:d6:6f:84:d3:70:8c:
                    69:3c:c3:da:3d:7a:a2:f9:95:5b:36:bc:39:b3:22:
                    75:de:f5:a1:c2:01:16:36:0a:db:38:70:34:0f:2e:
                    ac:ca:34:5d:f7:27:d9:92:7c:88:62:98:d9:f7:12:
                    5a:c9:9a:48:37:54:40:a6:0c:aa:cf:44:56:df:26:
                    a6:bc:6b:b6:82:6b:1f:00:fa:fc:cf:3a:ec:a1:0e:
                    b4:6a:2a:97:b3:3b:89:05:f5:a6:8d:44:1b:9b:c1:
                    5c:a6:ad:20:ea:4e:4e:aa:72:e1:b0:01:42:37:44:
                    39:96:0f:00:5e:e3:72:fa:62:52:0b:6e:d9:8a:91:
                    fb:c3:62:fa:b0:a5:92:81:c2:12:85:33:df:5a:86:
                    98:ad:4b:71:d4:bc:05:f2:a9:dc:94:b8:67:e2:2f:
                    8d:b1:f5:b0:be:88:7c:a2:ca:25:6a:00:51:9e:cd:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C3:56:16:BD:AA:9B:FB:EE:EA:98:84:7B:9F:AD:58:07:C1:E9:75
            X509v3 Authority Key Identifier:
                keyid:B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/326130393a353463333a613034663a3a2f34382d3438203d3e20323135313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c3:a04f::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:b4:67:65:5d:6f:87:89:9d:dc:c6:f9:2a:33:64:d9:15:bb:
         bd:ee:20:6c:2d:f2:a9:0c:aa:26:0a:39:96:a3:f4:a4:26:45:
         72:b2:a9:3a:10:f3:e7:03:04:bc:49:99:9b:ed:78:0c:19:47:
         c2:a1:18:ca:96:ff:f2:10:12:a9:3c:42:0d:15:83:6f:e4:5c:
         e6:66:9a:ef:45:46:e9:90:8f:f8:39:6d:d6:34:fd:84:6e:36:
         2c:50:2b:bf:7a:a2:fb:a4:9e:5a:a1:39:38:6e:53:4d:85:20:
         35:5c:e4:60:a5:2c:c8:8c:2e:7b:ea:9c:be:a7:cf:e0:b3:c3:
         3f:ab:af:3a:c6:03:80:6d:37:ca:01:e1:da:75:d6:1d:e7:81:
         a9:c8:b8:7d:68:6c:1b:6d:a7:ec:ee:83:35:93:0d:fb:25:5b:
         af:46:4f:8a:54:97:51:ce:53:58:63:cb:92:1f:47:3b:4a:a3:
         43:c6:8c:cb:ec:ac:30:c9:7b:e9:86:4d:42:82:e9:aa:3e:e0:
         ad:b7:31:78:07:8a:75:79:a9:6a:37:0c:6d:be:fd:00:ea:ec:
         f5:9d:b9:55:76:52:d6:f0:3a:b3:b0:b8:d6:db:96:c2:3a:17:
         af:1e:1a:f1:0d:31:ca:3c:82:e7:03:77:70:34:07:29:66:46:
         07:67:c5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----