Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363365333a3a2f34382d3438203d3e2032313337363838.roa
File:                     326130613a363034343a363365333a3a2f34382d3438203d3e2032313337363838.roa (raw, json)
Hash identifier:          ljpRXnIJ5NKuyUBPdUaayEqbUeENMu8wgFdcJtlgdTM=
Subject key identifier:   0C:CE:95:AB:75:0A:CB:8E:20:47:32:2B:E3:F6:CF:DC:07:21:F1:20
Certificate issuer:       /CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Certificate serial:       79CA922F0D38FC9B64D6DBFC70AE001560B882FF
Authority key identifier: 18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363365333a3a2f34382d3438203d3e2032313337363838.roa
Signing time:             Tue 10 Dec 2024 11:13:06 +0000
ROA not before:           Tue 10 Dec 2024 11:08:06 +0000
ROA not after:            Tue 09 Dec 2025 11:13:06 +0000
asID:                     2137688
IP address blocks:        2a0a:6044:63e3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ca:92:2f:0d:38:fc:9b:64:d6:db:fc:70:ae:00:15:60:b8:82:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
        Validity
            Not Before: Dec 10 11:08:06 2024 GMT
            Not After : Dec  9 11:13:06 2025 GMT
        Subject: CN=0CCE95AB750ACB8E2047322BE3F6CFDC0721F120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:d7:f2:06:d4:e1:d6:f8:ee:aa:e1:46:78:
                    7c:00:12:bb:06:d2:c6:c3:70:a4:5f:4a:c5:b3:1a:
                    c7:f7:b1:61:c5:eb:c7:68:48:33:20:3d:6a:12:c3:
                    b7:d1:95:80:00:e6:d8:91:53:f1:71:d1:34:39:3a:
                    8f:4f:43:c7:75:95:d0:f0:23:8f:b8:4a:7b:60:99:
                    fa:8f:68:a4:06:2a:30:eb:83:79:a6:2b:3c:b1:ed:
                    fe:34:e5:3c:e6:56:fb:4b:d2:a2:cf:6d:9c:f3:87:
                    df:d3:8e:49:f2:86:d6:8b:61:65:a2:26:24:9e:0b:
                    ea:95:bf:6e:cd:50:da:3b:66:d8:4c:df:ae:0d:ec:
                    7b:e6:3c:4c:28:b8:50:bd:f5:b3:f2:47:2e:a0:2c:
                    cb:92:80:a7:2b:1a:c9:b6:c4:88:83:b5:f5:c7:51:
                    30:3e:7d:eb:9e:d6:89:26:95:3e:4c:4e:52:a3:87:
                    23:f4:94:8e:cc:fb:3a:4c:d5:b6:8a:e7:0b:e8:aa:
                    39:2a:dd:1a:ed:80:b4:c2:38:e1:ea:79:3e:df:9b:
                    6c:49:66:6a:5f:0a:c6:39:1f:a7:8c:e0:99:b9:c5:
                    36:44:d9:eb:fc:fb:4a:77:25:60:71:1e:a1:ab:50:
                    1b:a2:79:71:22:15:ce:e6:f5:d3:dd:f6:46:13:1a:
                    9f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CE:95:AB:75:0A:CB:8E:20:47:32:2B:E3:F6:CF:DC:07:21:F1:20
            X509v3 Authority Key Identifier:
                keyid:18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363365333a3a2f34382d3438203d3e2032313337363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:63e3::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:8e:9f:d5:b8:20:5d:d8:2a:ea:c7:67:2a:75:c7:b6:14:6a:
         00:29:77:9a:3d:dc:a1:56:b6:1a:8f:b2:ab:ce:64:87:8d:28:
         77:06:61:d1:9d:1d:e4:b6:58:be:8e:ff:24:fb:07:1c:50:c3:
         28:a7:9d:d1:74:d2:62:bb:99:a3:5c:57:24:d6:0b:f4:51:5f:
         a3:8f:c0:ce:db:1d:65:81:ef:2e:1c:9a:69:f7:73:fe:e2:ff:
         76:56:44:d9:12:98:13:c5:5d:68:9b:51:cb:84:43:ab:7e:b6:
         e5:39:d1:e7:d0:d4:7e:6a:45:10:0c:76:15:2d:59:4e:2b:6c:
         be:0e:d6:9c:bc:ed:5f:6e:3e:af:55:32:e2:84:c4:ba:79:4e:
         ca:d7:c3:b1:3a:c1:49:ee:bc:ff:00:02:ca:21:28:56:e2:9a:
         f7:e0:b7:f3:fb:c1:4d:ae:70:9d:b8:66:84:57:8c:b0:49:e5:
         60:fe:e1:5d:cf:08:fb:01:b7:72:90:86:b2:3f:65:90:f5:f8:
         72:fa:6f:b0:03:fc:65:58:00:1c:90:69:37:d3:ab:fd:db:ea:
         a3:3b:d0:07:ae:8b:af:f7:e9:d4:70:a0:50:5a:58:35:59:87:
         95:6d:1c:07:5c:31:47:da:b8:bb:79:de:11:e4:11:ee:cc:0c:
         42:8c:2d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----