Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3730303a3a2f34342d3438203d3e20313938303235.roa
File:                     326131343a373538303a3730303a3a2f34342d3438203d3e20313938303235.roa (raw, json)
Hash identifier:          orXDGZpZewmm2cgZ3cCh9RPPGbfjRmGDLeNXhnBe+xs=
Subject key identifier:   1E:37:6C:91:94:7A:3B:F1:A4:7E:1F:C0:09:19:1F:31:F7:33:3B:3B
Certificate issuer:       /CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
Certificate serial:       10AF147403296CBBB1F37E3442EF61E240C09EDA
Authority key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3730303a3a2f34342d3438203d3e20313938303235.roa
Signing time:             Fri 29 Aug 2025 21:50:36 +0000
ROA not before:           Fri 29 Aug 2025 21:45:36 +0000
ROA not after:            Fri 28 Aug 2026 21:50:36 +0000
asID:                     198025
IP address blocks:        2a14:7580:700::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:af:14:74:03:29:6c:bb:b1:f3:7e:34:42:ef:61:e2:40:c0:9e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
        Validity
            Not Before: Aug 29 21:45:36 2025 GMT
            Not After : Aug 28 21:50:36 2026 GMT
        Subject: CN=1E376C91947A3BF1A47E1FC009191F31F7333B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ee:21:67:6c:76:c1:a6:af:27:15:85:51:79:
                    9b:81:a1:67:28:16:3b:c2:ab:85:8a:fc:a9:42:44:
                    85:6d:60:ed:d5:bb:2c:49:47:b7:65:f8:73:7a:5c:
                    d9:e4:df:eb:c8:68:0d:35:2d:78:cd:da:45:98:4e:
                    e7:0c:22:65:a7:f7:94:c8:d4:d6:17:e5:40:fd:fe:
                    9c:60:9c:02:f4:c0:0c:40:4e:72:ef:d5:c3:5d:59:
                    c1:67:b5:6e:19:48:c4:bd:07:86:f5:7c:82:1a:6b:
                    7f:45:1f:35:a8:5b:24:83:33:fd:31:13:4b:9f:71:
                    5f:f0:c1:c6:51:96:53:64:9b:40:fc:7b:1b:94:d8:
                    58:c9:88:f3:52:89:93:5e:f1:f6:be:76:27:9a:d6:
                    b0:bc:06:41:7e:eb:0e:b1:09:70:57:6e:bb:3a:a2:
                    7e:44:fe:16:6b:a2:4d:b8:01:ca:11:f6:81:9b:68:
                    63:6c:28:de:2a:d2:7d:e5:38:f6:13:3e:04:15:34:
                    ae:f7:1a:82:47:1e:e5:e4:21:b1:75:22:7f:31:3d:
                    1d:f4:ac:7c:c0:84:1c:62:b7:ff:2f:86:bc:9b:7e:
                    71:ca:57:4d:92:4a:67:d7:09:57:20:81:a9:3d:f6:
                    b2:d7:d5:84:81:9d:d3:01:5a:e8:b5:8a:cf:23:0c:
                    e7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:37:6C:91:94:7A:3B:F1:A4:7E:1F:C0:09:19:1F:31:F7:33:3B:3B
            X509v3 Authority Key Identifier:
                keyid:1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3730303a3a2f34342d3438203d3e20313938303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:700::/44

    Signature Algorithm: sha256WithRSAEncryption
         c2:cc:6d:df:b2:79:56:d8:7a:8b:1f:2f:84:71:6e:d2:6a:43:
         6c:ea:9b:80:32:2a:32:79:81:3f:dc:1e:0d:1c:3c:d7:de:4d:
         4b:84:09:31:b9:16:b7:0e:a7:91:41:27:34:69:13:5c:9b:1f:
         30:74:ad:ca:bc:5b:b8:a9:c5:92:80:eb:f1:74:c8:ff:86:0c:
         7e:05:19:71:20:68:77:9e:8b:46:e0:99:d6:3a:c5:6c:10:6c:
         92:a4:d5:da:ad:7e:8c:8d:a5:ce:ff:02:4b:4c:e0:ed:32:7d:
         a5:92:53:3b:2d:3e:35:76:f0:0d:4e:06:ee:54:a3:9d:d7:fd:
         be:a6:f8:33:56:c6:d0:d9:e8:20:7e:06:37:7d:e0:74:09:39:
         8e:01:bf:3e:34:bb:cc:2f:95:fe:26:b4:1c:ee:5a:6d:02:6b:
         35:c0:7a:95:9a:2c:28:e9:de:69:72:e5:9c:b5:a9:6d:88:09:
         b4:58:ad:51:96:48:f6:59:96:58:16:40:82:b5:65:ef:0a:00:
         01:94:f9:9a:e5:b4:e5:b8:b0:d8:5b:11:61:b7:0f:29:6e:fa:
         24:df:e9:47:a1:4c:f5:5f:4e:16:0b:ab:e6:dc:80:73:90:22:
         b0:3b:54:53:d5:ec:3b:30:9a:12:ef:b6:19:38:45:a3:1e:fa:
         b3:56:ae:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----