Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/326131343a373538313a396663303a3a2f34342d3434203d3e20323133343330.roa
File:                     326131343a373538313a396663303a3a2f34342d3434203d3e20323133343330.roa (raw, json)
Hash identifier:          Ahb7jSQzD02m+l5Huwj04pp4P7jOkGjSvihPKhxaWXc=
Subject key identifier:   A7:22:A0:5B:FA:A2:0C:FD:21:69:3D:3A:FC:EC:0E:78:8F:6C:15:DD
Certificate issuer:       /CN=BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6
Certificate serial:       62D138492A96C05F6E36FB3F7D89BE8748979B54
Authority key identifier: BD:8F:16:9B:24:F2:8F:F7:FF:47:FC:60:2D:29:0C:BA:7B:DA:AB:F6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/326131343a373538313a396663303a3a2f34342d3434203d3e20323133343330.roa
Signing time:             Sat 15 Feb 2025 07:11:20 +0000
ROA not before:           Sat 15 Feb 2025 07:06:20 +0000
ROA not after:            Sat 14 Feb 2026 07:11:20 +0000
asID:                     213430
IP address blocks:        2a14:7581:9fc0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d1:38:49:2a:96:c0:5f:6e:36:fb:3f:7d:89:be:87:48:97:9b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6
        Validity
            Not Before: Feb 15 07:06:20 2025 GMT
            Not After : Feb 14 07:11:20 2026 GMT
        Subject: CN=A722A05BFAA20CFD21693D3AFCEC0E788F6C15DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:f2:0b:14:5d:08:cd:10:93:e9:d4:40:c3:
                    9d:85:3d:ec:54:b2:79:3f:0e:bb:a9:83:b3:b4:03:
                    98:82:fc:49:fe:7b:96:65:ad:e3:04:ea:9c:d9:ba:
                    23:4d:c2:89:44:f5:9b:18:27:90:d2:01:63:da:f0:
                    87:36:66:51:b0:f8:10:fc:8e:8d:52:7b:6d:17:aa:
                    78:b9:75:0c:87:00:7f:f6:43:d0:6a:48:1a:d1:d9:
                    e7:be:c6:16:d1:99:18:26:e0:97:d1:e7:b9:ee:83:
                    29:a2:f4:ad:5c:2c:cf:5a:57:55:69:f9:b9:b8:f0:
                    83:35:96:56:18:6d:1f:a5:fb:b6:c5:7e:91:ce:6d:
                    5d:b2:49:32:7b:36:09:ae:0d:b1:5c:a6:c1:1a:ea:
                    0d:48:c8:4d:50:7a:e0:1c:dd:22:3e:fa:c7:90:03:
                    89:82:94:45:54:4e:07:c2:22:4d:90:28:af:d9:00:
                    7a:24:16:c0:6a:b3:91:7c:db:5b:eb:64:1d:a3:0c:
                    ba:77:23:a8:58:7b:9d:58:44:e3:5d:d4:99:6f:75:
                    4a:1c:ab:f5:df:f8:d9:ce:b8:38:d2:3d:f6:87:b7:
                    cd:5b:2c:3f:8f:93:17:32:f3:35:bf:f1:47:7f:2d:
                    76:80:b5:34:5e:72:a6:5b:b6:b9:a5:46:1c:63:b9:
                    64:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:22:A0:5B:FA:A2:0C:FD:21:69:3D:3A:FC:EC:0E:78:8F:6C:15:DD
            X509v3 Authority Key Identifier:
                keyid:BD:8F:16:9B:24:F2:8F:F7:FF:47:FC:60:2D:29:0C:BA:7B:DA:AB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/326131343a373538313a396663303a3a2f34342d3434203d3e20323133343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:9fc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         ca:99:a8:49:c6:bd:cc:c8:03:91:eb:c6:92:d6:31:1c:72:a1:
         7f:f4:39:76:f2:2a:20:01:6e:42:2e:f9:08:29:af:39:2f:ce:
         37:e6:4b:74:1e:a1:9d:c3:96:38:66:ea:0b:60:ce:6e:2e:43:
         9c:f6:86:fd:ff:66:54:a5:29:0c:f7:ab:84:19:6d:3d:f2:5f:
         9d:1f:93:c3:61:69:58:08:d0:c8:39:99:d7:1e:2e:b4:c7:db:
         9a:5d:f2:77:a3:78:8a:4e:6b:65:71:d6:81:82:41:21:d4:64:
         cf:c1:19:2b:45:e1:f5:0d:5f:b3:61:f0:9f:be:17:b3:f0:2e:
         50:8d:b4:aa:a9:ba:2b:bd:5e:d3:1f:bf:9b:86:53:3d:4b:22:
         d6:48:2f:81:f9:d1:45:73:43:7b:09:d9:a0:81:d8:cd:d8:5b:
         76:3f:74:6e:b1:6a:84:23:0d:1a:d1:0c:f9:06:6d:2b:1d:07:
         e7:ff:ba:03:39:c3:78:9d:cc:f9:63:8c:bb:dc:66:6c:65:89:
         6f:0a:55:44:ae:b0:3b:d7:5f:81:e6:eb:d3:f8:ae:8d:6a:e1:
         22:a3:74:9f:e2:26:a5:81:7d:b5:05:c2:fa:54:9e:24:c9:67:
         18:b2:3d:27:8a:ce:90:3f:40:09:da:5f:6f:d4:58:99:16:61:
         3c:bf:ce:74
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUYtE4SSqWwF9uNvs/fYm+h0iXm1QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ4RjE2OUIyNEYyOEZGN0ZGNDdGQzYwMkQyOTBDQkE3
QkRBQUJGNjAeFw0yNTAyMTUwNzA2MjBaFw0yNjAyMTQwNzExMjBaMDMxMTAvBgNV
BAMTKEE3MjJBMDVCRkFBMjBDRkQyMTY5M0QzQUZDRUMwRTc4OEY2QzE1REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUvILFF0IzRCT6dRAw52FPexU
snk/Drupg7O0A5iC/En+e5ZlreME6pzZuiNNwolE9ZsYJ5DSAWPa8Ic2ZlGw+BD8
jo1Se20Xqni5dQyHAH/2Q9BqSBrR2ee+xhbRmRgm4JfR57nugymi9K1cLM9aV1Vp
+bm48IM1llYYbR+l+7bFfpHObV2ySTJ7NgmuDbFcpsEa6g1IyE1QeuAc3SI++seQ
A4mClEVUTgfCIk2QKK/ZAHokFsBqs5F821vrZB2jDLp3I6hYe51YRONd1JlvdUoc
q/Xf+NnOuDjSPfaHt81bLD+Pkxcy8zW/8Ud/LXaAtTRecqZbtrmlRhxjuWQhAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUpyKgW/qiDP0haT06/OwOeI9sFd0wHwYDVR0j
BBgwFoAUvY8WmyTyj/f/R/xgLSkMunvaq/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTdhYmE5ZTktZWVjOC00OTViLTllMjAtZDZiM2NjZWJk
ZTQ1LzEvQkQ4RjE2OUIyNEYyOEZGN0ZGNDdGQzYwMkQyOTBDQkE3QkRBQUJGNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CRDhGMTY5QjI0RjI4RkY3RkY0N0ZDNjAy
RDI5MENCQTdCREFBQkY2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS85N2FiYTllOS1lZWM4LTQ5NWItOWUyMC1kNmIzY2NlYmRlNDUvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTM5NjY2MzMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz
MTMzMzQzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gZ/AMA0GCSqGSIb3DQEBCwUAA4IBAQDK
mahJxr3MyAOR68aS1jEccqF/9Dl28iogAW5CLvkIKa85L8435kt0HqGdw5Y4ZuoL
YM5uLkOc9ob9/2ZUpSkM96uEGW098l+dH5PDYWlYCNDIOZnXHi60x9uaXfJ3o3iK
TmtlcdaBgkEh1GTPwRkrReH1DV+zYfCfvhez8C5QjbSqqborvV7TH7+bhlM9SyLW
SC+B+dFFc0N7CdmggdjN2Ft2P3RusWqEIw0a0Qz5Bm0rHQfn/7oDOcN4ncz5Y4y7
3GZsZYlvClVErrA711+B5uvT+K6NauEio3Sf4ialgX21BcL6VJ4kyWcYsj0nis6Q
P0AJ2l9v1FiZFmE8v850
-----END CERTIFICATE-----