Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a646561643a3a2f34382d3438203d3e203534363831.roa
File:                     326130373a353463303a646561643a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier:          EeDIHHk/yxXWONtOEp4Y/BI1jPBwE4eN77GGBsTgW3o=
Subject key identifier:   68:46:CC:C4:90:36:38:BB:20:01:09:91:0E:4C:06:19:F3:DC:E5:1E
Certificate issuer:       /CN=99D922574ADCFE8B3741930044512F9A57EF91A4
Certificate serial:       0112AAA10EC6B06096F41F1D1E24B78B89B324AA
Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a646561643a3a2f34382d3438203d3e203534363831.roa
Signing time:             Sat 29 Jun 2024 11:29:37 +0000
ROA not before:           Sat 29 Jun 2024 11:24:37 +0000
ROA not after:            Sat 28 Jun 2025 11:29:37 +0000
asID:                     54681
IP address blocks:        2a07:54c0:dead::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:12:aa:a1:0e:c6:b0:60:96:f4:1f:1d:1e:24:b7:8b:89:b3:24:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4
        Validity
            Not Before: Jun 29 11:24:37 2024 GMT
            Not After : Jun 28 11:29:37 2025 GMT
        Subject: CN=6846CCC4903638BB200109910E4C0619F3DCE51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:41:8e:47:62:98:00:2e:cf:f7:1b:55:84:c8:
                    d4:67:e7:c4:44:c1:dd:27:2d:8f:d6:4f:bf:ba:91:
                    35:a8:4a:e7:8e:b9:a2:b4:8a:97:8f:88:dd:c8:00:
                    08:bc:95:2b:b5:97:34:46:a6:13:14:65:e2:19:3e:
                    a3:e7:2d:da:1f:28:fd:52:3f:db:f9:82:b2:0c:7b:
                    36:82:46:d3:84:0d:5e:3c:7a:b2:2b:e9:fa:b0:7e:
                    56:02:bc:35:cf:1c:54:bd:a1:4a:93:0d:e6:d8:18:
                    d7:e4:69:bd:d9:ce:8f:83:18:16:2d:12:f8:59:21:
                    ad:f1:9e:47:d3:44:4f:a1:33:64:78:36:99:bb:09:
                    69:0f:c8:19:aa:6c:9a:5e:62:25:bd:7e:69:92:fa:
                    a6:fd:7f:60:22:8c:6e:e9:37:09:12:f4:2e:94:68:
                    0d:12:b7:d9:29:12:c3:24:3a:90:64:fc:14:0f:36:
                    80:bb:29:c5:df:41:a7:51:07:6f:2a:d0:49:9e:25:
                    a7:e0:16:70:af:5c:17:55:df:a1:16:4f:26:4d:c4:
                    bb:36:12:65:a5:e2:19:80:d8:aa:4d:0f:66:c5:cd:
                    f9:7d:50:dc:05:37:79:3c:f6:13:f3:24:31:36:42:
                    3a:39:a3:e2:38:16:bd:81:8a:89:8e:69:e5:c5:8f:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:46:CC:C4:90:36:38:BB:20:01:09:91:0E:4C:06:19:F3:DC:E5:1E
            X509v3 Authority Key Identifier:
                keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a646561643a3a2f34382d3438203d3e203534363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:dead::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:b1:4f:32:ec:3e:a0:27:14:2b:85:0d:83:5f:75:1c:2d:48:
         10:43:d7:8b:a1:9f:c2:77:e9:91:06:0f:6d:77:62:59:5c:39:
         75:1a:c9:bd:0a:8b:4a:d3:e6:81:50:96:45:ba:94:3f:b7:d8:
         ea:17:2b:dd:d1:68:78:d7:88:72:f8:e2:fb:46:94:b5:4e:6f:
         65:24:5e:4e:f9:33:69:a3:4c:13:34:60:a4:94:ba:78:71:18:
         03:71:18:2d:b9:37:1d:ab:d3:01:80:96:4d:f1:f4:ac:5c:a2:
         75:5a:e0:ed:20:13:3a:df:01:17:34:51:3f:ac:ba:48:4b:dd:
         1a:86:52:72:a1:66:97:b3:bf:a4:bf:18:ec:30:74:e7:ea:62:
         22:f2:3c:b8:52:5a:94:9a:bc:03:46:f9:0b:8c:f4:0e:aa:80:
         ad:3a:83:24:73:9c:b2:c2:8a:88:7e:80:5b:7c:ee:22:96:0b:
         da:03:0f:82:96:63:4f:4c:61:90:4f:77:22:88:1c:35:be:06:
         29:d5:05:e8:b1:69:66:64:e9:3e:68:49:02:b3:28:6e:c0:73:
         68:6c:10:0c:af:84:eb:8f:71:d2:ae:db:18:e5:b4:e9:f2:46:
         a6:af:45:c6:1b:b4:02:34:b0:df:ca:17:53:ed:f0:6a:ea:88:
         db:a3:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----