Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030333a3a2f34382d3438203d3e203134363138.roa
File:                     326130393a353463363a653030333a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          xJvnxdFsPFPJTFLa5lvHbOIyE2E6mI2Kt0jGvbQzNns=
Subject key identifier:   D0:37:DD:A8:7B:1A:05:D6:88:2B:D4:E4:EF:B8:9E:5A:87:46:96:4D
Certificate issuer:       /CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
Certificate serial:       4E931318CE8C4ADB7BFC3C1311ED205604DBCD9F
Authority key identifier: 1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030333a3a2f34382d3438203d3e203134363138.roa
Signing time:             Sun 08 Sep 2024 13:25:33 +0000
ROA not before:           Sun 08 Sep 2024 13:20:33 +0000
ROA not after:            Sun 07 Sep 2025 13:25:33 +0000
asID:                     14618
IP address blocks:        2a09:54c6:e003::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:93:13:18:ce:8c:4a:db:7b:fc:3c:13:11:ed:20:56:04:db:cd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
        Validity
            Not Before: Sep  8 13:20:33 2024 GMT
            Not After : Sep  7 13:25:33 2025 GMT
        Subject: CN=D037DDA87B1A05D6882BD4E4EFB89E5A8746964D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:00:96:26:3b:58:e6:f4:e6:3a:18:3b:06:
                    99:0b:7b:b0:ce:c7:ef:12:81:36:17:97:c2:e3:95:
                    c5:a9:f5:4f:83:8c:04:4d:66:19:d3:6d:a3:60:df:
                    34:da:19:3e:11:a7:4d:5c:27:38:da:d7:b7:9a:9e:
                    2c:1c:50:9b:50:2f:6f:b3:59:88:bf:55:1c:cb:08:
                    8d:62:be:64:ad:21:67:bb:cf:99:2b:96:1f:2a:6c:
                    49:a9:e7:a0:5f:bd:ab:d4:8a:30:12:e6:36:24:84:
                    db:28:ba:3b:6c:a6:70:9b:e6:d0:32:79:46:c2:2c:
                    62:f2:b1:a5:54:44:49:bd:f4:78:bd:02:e4:0e:9d:
                    a2:9e:ee:0e:c3:8a:ca:6b:f7:37:fb:7f:55:8f:d7:
                    ae:21:62:b7:41:67:60:f8:0d:8c:fe:86:b0:3e:f9:
                    2a:e7:07:a6:3e:6d:64:34:25:32:34:e4:a9:76:f3:
                    b7:da:8e:50:ca:34:af:2f:f7:2e:6a:c8:88:62:e7:
                    73:05:47:1b:83:6a:97:4f:86:b3:4a:34:58:47:3f:
                    82:89:8f:14:f9:56:34:3a:a6:14:18:31:0c:5d:81:
                    ab:be:81:44:ab:82:4f:1e:25:44:59:f6:ba:85:17:
                    cb:b2:34:35:33:79:27:98:39:c5:41:19:ea:3c:5a:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:37:DD:A8:7B:1A:05:D6:88:2B:D4:E4:EF:B8:9E:5A:87:46:96:4D
            X509v3 Authority Key Identifier:
                keyid:1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030333a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:e003::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:21:c7:b8:a8:72:62:ff:33:92:ba:7a:b0:9b:18:40:b0:dd:
         6f:02:c2:75:f2:a6:d7:70:54:97:b2:b3:91:f4:16:77:e6:9e:
         27:d1:ac:6e:db:dc:7f:30:c3:69:9f:2d:90:10:81:da:72:e1:
         b1:bb:72:32:d4:f5:ce:a4:f9:c7:bf:e6:fb:32:d0:a6:67:ca:
         13:b5:7b:61:db:9f:d1:0f:0a:e7:35:61:bb:e7:c6:f3:c0:91:
         3d:d8:c4:5b:01:5e:49:50:55:1f:7c:62:53:62:1c:7c:74:0d:
         a7:98:8d:a8:e7:14:55:86:95:f9:02:52:e4:4c:9d:53:47:69:
         a7:c5:2d:49:b2:0f:1e:1c:cb:fb:11:e5:8c:d3:7b:07:69:6c:
         a0:83:28:ca:b9:b7:f5:d9:f1:6f:9f:5c:24:a7:00:d6:f1:b7:
         c8:21:06:df:a8:02:74:1e:cb:61:cd:49:18:b7:7a:91:ae:a1:
         de:40:54:3a:3b:19:e8:d8:dc:b9:08:20:71:57:81:f1:df:2a:
         c1:26:7b:be:a3:88:be:29:fb:31:28:2f:fd:c3:33:9c:2e:22:
         ed:9f:86:b7:01:f1:64:43:45:45:43:b2:96:36:b2:b0:52:e9:
         ac:dd:90:1c:14:8c:2b:b5:bd:7b:cd:15:cd:33:b9:7e:5d:61:
         5c:b7:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----