Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa
File:                     326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (raw, json)
Hash identifier:          Ea0kmDKgD8dNYeRb/sBCUSSg7EkNTcOYT4JeHBqpNLU=
Subject key identifier:   B4:87:4F:44:C8:A9:25:BB:46:70:9B:A5:EE:5E:AF:FE:5F:A4:6F:0D
Certificate issuer:       /CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
Certificate serial:       059E252021F64ECFF3C3AA61D4775E37AC0523A2
Authority key identifier: 5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa
Signing time:             Tue 21 Jan 2025 17:05:09 +0000
ROA not before:           Tue 21 Jan 2025 17:00:09 +0000
ROA not after:            Tue 20 Jan 2026 17:05:09 +0000
asID:                     209735
IP address blocks:        2a0a:6044:b343::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9e:25:20:21:f6:4e:cf:f3:c3:aa:61:d4:77:5e:37:ac:05:23:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
        Validity
            Not Before: Jan 21 17:00:09 2025 GMT
            Not After : Jan 20 17:05:09 2026 GMT
        Subject: CN=B4874F44C8A925BB46709BA5EE5EAFFE5FA46F0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:5f:ae:95:8c:e0:3d:ce:59:0e:fb:c9:27:
                    07:0a:61:73:3f:86:af:01:81:eb:a2:45:66:39:f6:
                    6b:51:60:e7:a2:c2:2c:5c:04:3e:55:f4:17:8b:29:
                    87:67:fb:09:0b:a3:62:f0:0e:bb:22:f6:e9:3a:e5:
                    37:65:4f:e0:dc:4a:ab:8f:f0:c7:ed:fe:70:62:3d:
                    d5:0a:7c:9c:38:8c:a8:5d:2a:5d:9c:7d:3b:ae:52:
                    09:33:bb:9c:62:a6:b2:92:05:8d:27:27:34:2d:1b:
                    0c:e7:50:4e:b9:eb:9f:28:eb:35:d5:66:fd:e6:2c:
                    e8:0f:7e:14:89:08:4f:4f:95:f8:3c:ea:44:57:cc:
                    bd:94:3f:af:26:d0:75:94:17:8a:0b:5c:e1:72:67:
                    2a:82:51:38:7c:c4:67:46:0b:cd:3c:e1:df:f8:38:
                    54:63:37:9a:9c:6d:c1:54:71:42:d3:8d:aa:c9:b4:
                    e9:36:d3:9a:c0:35:3d:9d:32:cc:d9:70:32:f6:69:
                    f8:2f:1f:a2:07:67:5a:24:ea:ac:b4:d6:54:ca:93:
                    eb:6d:fe:c4:19:46:33:89:6c:d1:d1:f4:2e:a2:f7:
                    3c:3a:3c:8c:aa:c6:a1:e9:fe:8f:13:8f:d6:5b:0e:
                    48:b1:d5:3c:1c:3d:02:3f:e5:f3:5a:aa:d7:03:0c:
                    d6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:87:4F:44:C8:A9:25:BB:46:70:9B:A5:EE:5E:AF:FE:5F:A4:6F:0D
            X509v3 Authority Key Identifier:
                keyid:5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b343::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:08:df:c2:8d:88:be:c7:8d:77:c1:d5:32:d8:8c:11:be:
         b2:2d:72:83:cc:a0:32:d3:10:ed:4b:78:eb:2e:4e:58:dc:4d:
         27:59:b5:9e:62:ec:f2:a5:4d:de:51:6d:63:4a:b7:06:cc:e5:
         37:a8:66:8f:67:4c:47:b8:2c:0f:e1:e5:dd:9d:c9:90:d4:89:
         1e:40:57:f8:d1:62:01:96:98:93:fb:fd:ea:61:5c:4f:d0:4c:
         f3:e1:b9:69:e3:27:7c:45:16:03:8f:25:20:82:6b:37:df:59:
         ac:52:f8:c1:af:09:ec:ba:e7:56:0c:c1:50:21:ce:b1:d3:df:
         ba:b2:5f:26:fd:4f:62:de:a7:35:f6:73:42:02:f0:1b:44:e5:
         eb:8c:4b:95:6b:ea:c9:45:ce:54:6b:b1:b6:8a:ae:ae:5f:3b:
         c0:49:dd:4b:15:d5:5a:db:9b:f1:dc:33:12:0e:16:d8:43:85:
         55:c2:d9:7a:01:f8:62:7f:df:44:8f:47:f0:c2:89:89:52:df:
         69:24:d4:01:9b:78:0b:c1:8e:9c:98:48:b9:9c:c9:8f:a1:82:
         b4:28:e5:57:e8:e2:fe:67:3f:89:03:fe:6f:3b:6a:b0:f6:58:
         36:f9:ef:0c:9b:e5:9a:8d:70:8b:e4:5e:2b:31:7c:e6:c2:8a:
         e5:12:ad:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----