Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363337303a3a2f34342d3434203d3e20323134313239.roa
File:                     326130613a363034343a363337303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier:          Y2/0kWeC6WwthTiMFs4AWQ97amsTukjw0xD9l0PtfQA=
Subject key identifier:   69:8E:31:0C:7E:55:84:B9:39:49:91:7E:D5:21:BE:BB:7F:D0:D7:22
Certificate issuer:       /CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Certificate serial:       65EEC0480DEBC61113BD0C466E833C4CAB224760
Authority key identifier: 18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363337303a3a2f34342d3434203d3e20323134313239.roa
Signing time:             Sat 07 Dec 2024 20:33:46 +0000
ROA not before:           Sat 07 Dec 2024 20:28:46 +0000
ROA not after:            Sat 06 Dec 2025 20:33:46 +0000
asID:                     214129
IP address blocks:        2a0a:6044:6370::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ee:c0:48:0d:eb:c6:11:13:bd:0c:46:6e:83:3c:4c:ab:22:47:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
        Validity
            Not Before: Dec  7 20:28:46 2024 GMT
            Not After : Dec  6 20:33:46 2025 GMT
        Subject: CN=698E310C7E5584B93949917ED521BEBB7FD0D722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:20:44:9b:ac:d5:5c:02:f7:33:35:42:b6:69:
                    66:30:9c:2d:f7:fc:6d:5b:03:66:c9:76:99:e4:14:
                    00:dd:a7:9d:fc:4b:21:93:8b:cf:a0:71:49:c7:04:
                    09:2c:b4:81:af:0a:05:ce:2c:62:95:41:dc:37:e9:
                    57:0e:a8:d6:ba:b2:98:ed:bb:36:5a:8b:ed:42:c4:
                    47:e2:5c:12:60:5d:1a:15:2d:ba:8f:d7:4e:be:4b:
                    ca:7e:be:16:b3:d6:bb:4b:35:06:a1:d4:4f:5b:23:
                    3b:15:18:c0:f0:6a:bd:4a:4a:8c:ce:97:2e:5d:2d:
                    d6:13:17:36:bb:f7:b0:e5:10:d1:5d:ee:3b:61:c9:
                    ef:6a:d1:5e:cb:28:ab:ed:a0:ad:c8:bc:0d:87:66:
                    b2:95:37:62:73:6c:4f:35:31:78:c5:43:57:e7:2d:
                    7f:43:8b:2e:da:2c:46:88:f1:4e:ab:7b:f8:87:04:
                    12:51:4b:59:29:8b:e3:7e:39:c8:5e:b5:74:24:6b:
                    d9:a0:75:0e:f0:6a:61:42:ca:11:7a:12:0c:9b:b8:
                    74:d9:c4:2f:87:5c:f3:70:cd:20:ef:2e:a9:7e:41:
                    9c:25:6f:8d:8f:2d:e1:4c:57:c0:de:40:b0:e7:9d:
                    44:9b:b5:2b:03:7d:eb:9a:a7:82:d8:75:e2:b1:83:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8E:31:0C:7E:55:84:B9:39:49:91:7E:D5:21:BE:BB:7F:D0:D7:22
            X509v3 Authority Key Identifier:
                keyid:18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363337303a3a2f34342d3434203d3e20323134313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6370::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:ef:95:aa:5d:f8:59:12:4e:e8:46:5f:bb:79:71:82:83:11:
         53:ae:a2:cf:f0:89:8e:3f:eb:30:87:da:01:d8:31:02:f5:c7:
         f0:33:ed:e0:0c:76:2b:1d:bb:40:10:a1:ab:0a:71:8a:f8:b5:
         aa:86:50:35:04:92:7c:12:bd:80:6d:6c:5a:0e:75:69:52:4a:
         6d:ba:5f:17:33:a0:e7:e6:1a:98:b1:02:b0:e7:9e:f9:0f:f4:
         35:af:e8:94:7a:a8:c7:64:ea:33:b9:69:e5:e8:8e:f2:4c:97:
         04:66:52:86:f0:c7:b5:b1:46:55:5f:ee:9e:b5:e7:1b:ec:39:
         e4:de:9b:9e:83:df:62:10:38:12:11:a5:b3:6b:1d:61:f7:57:
         b7:bc:87:52:98:58:d7:d7:5c:7c:5a:6d:be:71:68:f9:23:46:
         a7:98:f3:77:15:64:98:37:90:b4:0c:85:25:b8:bc:22:e1:83:
         77:22:78:3c:69:9a:0b:e8:0b:d6:09:c3:b2:56:9d:87:cf:4c:
         13:d6:5c:f5:b7:5f:4d:53:2d:9b:0b:f9:68:a4:33:42:29:51:
         ff:f9:cb:3b:c0:fa:64:9d:01:bb:d3:01:a6:1c:4f:50:b8:1a:
         ba:f6:2f:3e:40:21:26:4b:3e:51:81:0b:a7:57:10:26:d8:f8:
         be:96:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----