Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa
File:                     326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (raw, json)
Hash identifier:          mAlD/7UUyGVdekoOhhq71B1anWJmZ9lWKYk+6k6Ej2U=
Subject key identifier:   13:BE:18:39:A9:A8:C6:54:0A:79:79:C9:0A:21:95:F3:EB:D4:74:A9
Certificate issuer:       /CN=AFF4C2C7543A73C42DFA94F9950C37BDC859D280
Certificate serial:       2529FD894F93617FFF4242607E265BF0B7CB1939
Authority key identifier: AF:F4:C2:C7:54:3A:73:C4:2D:FA:94:F9:95:0C:37:BD:C8:59:D2:80
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa
Signing time:             Sat 13 Dec 2025 13:34:09 +0000
ROA not before:           Sat 13 Dec 2025 13:29:09 +0000
ROA not after:            Sat 12 Dec 2026 13:34:09 +0000
asID:                     154185
IP address blocks:        2a0f:1cc6:b110::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:29:fd:89:4f:93:61:7f:ff:42:42:60:7e:26:5b:f0:b7:cb:19:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF4C2C7543A73C42DFA94F9950C37BDC859D280
        Validity
            Not Before: Dec 13 13:29:09 2025 GMT
            Not After : Dec 12 13:34:09 2026 GMT
        Subject: CN=13BE1839A9A8C6540A7979C90A2195F3EBD474A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c9:f4:13:23:47:c5:68:df:7d:88:73:a7:a8:
                    b0:ba:36:c7:31:e8:6b:44:cd:11:d9:62:f7:8a:48:
                    70:63:23:94:e1:fc:ba:93:d4:0f:4d:fd:00:15:76:
                    5f:d3:7e:fe:f7:4a:57:d8:15:bb:62:98:73:02:35:
                    9c:7c:18:da:2a:84:8d:aa:47:19:f6:e6:80:a4:1a:
                    3e:0d:6f:f0:44:df:33:92:f6:3c:cc:14:6b:89:87:
                    bb:ef:ba:26:84:f1:ff:e4:b8:26:12:e8:17:78:59:
                    75:4d:04:2f:5d:f1:23:ad:ce:d9:d6:ad:f5:91:0d:
                    d2:36:6d:d9:2e:34:58:c8:6d:a0:dd:4a:3d:d4:25:
                    5d:e1:d3:df:23:96:8d:c3:d1:39:a8:ba:b0:66:9f:
                    ab:af:4a:0f:5f:a9:43:11:b2:6e:53:4e:7e:74:00:
                    cd:51:b0:ea:a5:1c:c1:eb:5a:6d:3c:a0:e5:32:9a:
                    e6:cd:f3:57:3c:c7:b3:3b:df:a3:b9:e0:a5:3b:79:
                    52:5b:da:8d:8e:38:0c:c9:22:3b:a8:27:79:15:b4:
                    fa:59:4d:80:a0:3d:81:92:84:d0:d9:f7:f1:c0:32:
                    ed:84:28:cc:74:0d:f4:9f:75:07:5f:51:95:47:7b:
                    46:50:7a:fa:c9:37:ef:cd:48:43:bc:bb:61:f1:1e:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BE:18:39:A9:A8:C6:54:0A:79:79:C9:0A:21:95:F3:EB:D4:74:A9
            X509v3 Authority Key Identifier:
                keyid:AF:F4:C2:C7:54:3A:73:C4:2D:FA:94:F9:95:0C:37:BD:C8:59:D2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc6:b110::/44

    Signature Algorithm: sha256WithRSAEncryption
         d0:da:6c:d0:63:e3:17:27:5e:fc:ad:21:08:94:47:c9:23:f8:
         d0:71:6c:83:fa:a8:fb:02:95:8a:40:9b:1a:16:a0:6b:c1:d5:
         30:0a:38:db:2a:34:b3:eb:d7:0d:01:7e:e7:88:4b:42:3e:d8:
         09:fb:98:9f:01:73:06:55:1e:d7:d9:a8:dc:de:3b:08:e3:00:
         6d:69:8a:ca:a9:38:c5:d9:c1:aa:83:b6:18:14:17:83:5f:62:
         35:1c:15:32:74:a5:1b:68:be:4e:64:f2:e4:89:6c:fd:67:f6:
         05:e6:b7:f9:50:d0:61:fb:a7:92:6e:72:f0:b7:f9:36:a2:c1:
         6a:54:55:81:0b:ce:77:1f:6c:cc:91:3f:86:be:6f:c5:e6:3b:
         30:e5:d9:8a:b1:9b:46:52:fe:c2:ee:c5:ab:ba:5c:55:b7:90:
         e7:c3:a3:af:b0:b7:71:6e:67:c2:ba:56:25:e5:2d:ef:0d:3d:
         b4:d8:a5:9f:43:4c:71:9f:48:ea:52:a9:14:b8:d3:a2:07:7f:
         3b:c6:0b:8d:7c:70:68:ab:82:1b:9f:e6:ad:40:78:5c:8c:bd:
         f1:df:f8:02:f7:98:97:17:3e:44:07:c5:df:a3:e9:38:99:20:
         94:94:55:56:83:b9:f4:bd:67:5b:a8:d9:fa:aa:4d:a0:c8:d4:
         e1:4e:d2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----