Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa
File:                     326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (raw, json)
Hash identifier:          abPKPZr1WbPPFAA4OnjFEi0/3aO9abAcwCp0LqclAy8=
Subject key identifier:   19:9C:47:12:0E:6A:FF:B6:41:B3:F6:F3:60:4E:17:41:D6:68:50:34
Certificate issuer:       /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial:       2DD24BEA70C7F6686AF48384B04877D473772798
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa
Signing time:             Sat 14 Dec 2024 14:36:18 +0000
ROA not before:           Sat 14 Dec 2024 14:31:18 +0000
ROA not after:            Sat 13 Dec 2025 14:36:18 +0000
asID:                     39753
IP address blocks:        2a14:7581:9020::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d2:4b:ea:70:c7:f6:68:6a:f4:83:84:b0:48:77:d4:73:77:27:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
        Validity
            Not Before: Dec 14 14:31:18 2024 GMT
            Not After : Dec 13 14:36:18 2025 GMT
        Subject: CN=199C47120E6AFFB641B3F6F3604E1741D6685034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:bb:9a:ae:48:b5:c7:8f:45:c6:ee:1d:54:
                    d5:b0:be:25:0f:1c:06:91:e5:8c:e2:18:38:17:21:
                    a8:33:d0:c3:32:60:60:f7:65:74:04:ad:87:21:34:
                    72:ec:9b:0f:b9:53:d6:8a:b1:73:ec:0a:34:33:64:
                    fc:89:8f:ac:7d:86:06:17:76:9e:18:b8:86:5e:8d:
                    f9:f0:de:06:29:22:ab:cc:78:8d:df:e6:15:91:1f:
                    11:b0:bb:6a:09:e2:5d:da:0c:34:9c:03:e8:71:51:
                    4c:61:e5:5a:3c:e2:00:89:21:13:c9:f3:9e:d7:67:
                    6e:51:b0:89:1d:07:16:18:20:26:a9:0f:94:ce:39:
                    f4:a0:a9:06:ce:d5:7f:72:9a:f1:c5:e6:b1:41:1b:
                    ad:02:3b:44:18:67:fc:67:0f:fa:ad:d1:29:75:2c:
                    12:2f:a9:c2:90:9b:7c:f9:a9:a9:e4:c7:1b:b6:cd:
                    34:9d:74:ca:6e:5d:6b:69:cc:66:58:07:13:ce:a1:
                    24:7d:e6:a2:42:44:8a:76:df:45:a0:2e:b3:7e:b5:
                    7a:56:7c:01:27:9d:60:a7:5e:f4:f0:16:6a:03:5a:
                    86:93:fb:4f:5d:11:63:c3:8c:64:04:98:b3:b0:04:
                    07:98:ad:3b:2c:4d:9d:98:17:37:ce:b2:2b:76:2e:
                    98:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9C:47:12:0E:6A:FF:B6:41:B3:F6:F3:60:4E:17:41:D6:68:50:34
            X509v3 Authority Key Identifier:
                keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:9020::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:24:96:d6:2e:bf:5b:47:f6:22:3c:53:5f:7f:04:e3:df:00:
         33:22:c2:81:39:98:0e:1a:b3:a6:79:83:48:e3:f7:39:38:cd:
         e3:7d:ab:e4:36:c5:8d:c9:40:e9:40:eb:22:76:d2:00:ce:f0:
         a1:df:27:2d:d3:17:c8:18:9c:50:61:3f:93:60:00:7e:13:a0:
         19:89:df:14:89:2d:b8:79:a7:88:81:ca:a9:10:81:44:8f:05:
         46:a9:5a:e6:37:d8:0a:21:ee:e8:5e:1d:b2:52:0b:8e:5d:13:
         e5:f1:dd:17:2a:36:9a:5c:9e:02:45:64:ef:91:2a:c2:f8:cd:
         97:fa:ca:47:c0:ae:6c:18:52:6b:d6:63:cf:9a:14:8c:f9:00:
         63:bc:00:7f:63:c5:9f:15:76:45:de:6c:eb:a9:51:5c:88:a0:
         82:cb:5c:68:d8:5d:c2:b3:af:e7:cd:9c:c9:31:f8:ec:e1:3c:
         75:3d:a9:be:53:79:37:35:6a:45:ca:a5:83:2d:da:b6:28:7a:
         43:53:90:5f:d5:67:9e:a1:f4:2b:39:a9:4e:53:4e:b5:73:c2:
         82:0d:20:2d:27:ec:cb:ea:10:02:d4:ef:71:ab:78:3d:59:4f:
         85:f8:13:ac:7c:58:8c:d8:a3:1d:52:4f:40:42:4e:63:a5:bf:
         0d:01:db:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----