Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3731303a3a2f34342d3438203d3e20313938303235.roa
File:                     326131343a373538303a3731303a3a2f34342d3438203d3e20313938303235.roa (raw, json)
Hash identifier:          +8ynHAIMD3AEXEczkPArTvY7SURyY22ed99aIe/np84=
Subject key identifier:   4C:0D:5C:86:A5:A9:73:2E:1D:14:1C:C5:D5:E1:5C:42:C2:95:8D:E9
Certificate issuer:       /CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
Certificate serial:       671B1A6A5D1CCE48E929740B08621B4B3AAC0D99
Authority key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3731303a3a2f34342d3438203d3e20313938303235.roa
Signing time:             Wed 27 Aug 2025 21:15:56 +0000
ROA not before:           Wed 27 Aug 2025 21:10:56 +0000
ROA not after:            Wed 26 Aug 2026 21:15:56 +0000
asID:                     198025
IP address blocks:        2a14:7580:710::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1b:1a:6a:5d:1c:ce:48:e9:29:74:0b:08:62:1b:4b:3a:ac:0d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
        Validity
            Not Before: Aug 27 21:10:56 2025 GMT
            Not After : Aug 26 21:15:56 2026 GMT
        Subject: CN=4C0D5C86A5A9732E1D141CC5D5E15C42C2958DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:75:b9:c1:5e:42:60:82:74:f8:2c:62:e0:
                    1d:99:e4:55:cf:94:08:67:e1:c5:56:fa:54:5d:9f:
                    9c:9c:74:42:a8:fc:39:66:03:ca:fe:5a:d3:a9:de:
                    ab:b6:62:9d:12:a2:21:e9:55:37:50:54:30:6c:e6:
                    6b:16:80:2b:cc:e0:9a:77:b8:96:59:69:11:91:45:
                    7a:97:6b:06:f5:f6:da:00:12:cb:9b:7f:09:68:6a:
                    ae:fb:ab:8f:bf:1b:aa:42:b2:73:e4:0a:d7:f5:10:
                    63:dd:d6:57:e8:76:5e:90:4a:ad:b4:df:e0:9f:f7:
                    1e:f1:dd:1d:c2:dc:af:67:f3:50:7e:78:19:cc:5a:
                    7c:44:92:6f:17:c2:0e:94:9e:06:c9:87:6d:fa:17:
                    5a:fb:46:a0:a8:d2:6e:a9:4b:c5:ce:bd:1c:68:e1:
                    ef:26:53:0f:e6:fc:09:b5:5e:0a:d9:2c:63:7e:56:
                    b1:cf:65:58:29:aa:3c:77:f1:7b:ec:fa:14:f5:9b:
                    fe:67:b1:9a:dc:8b:9f:b0:6b:d4:ba:cc:b6:85:a4:
                    0d:e7:38:a9:d3:76:31:ce:7b:86:9e:b8:81:8d:7e:
                    6b:9b:02:1e:3e:c6:0d:31:a1:55:c1:f2:ef:82:bc:
                    34:5a:8b:b4:9b:8b:06:eb:98:7f:b3:57:0b:71:07:
                    fc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0D:5C:86:A5:A9:73:2E:1D:14:1C:C5:D5:E1:5C:42:C2:95:8D:E9
            X509v3 Authority Key Identifier:
                keyid:1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3731303a3a2f34342d3438203d3e20313938303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:710::/44

    Signature Algorithm: sha256WithRSAEncryption
         b3:2e:38:bb:50:54:fb:0e:dc:ec:32:23:dd:de:29:36:44:73:
         77:95:8d:27:a7:48:2a:eb:fb:75:af:e5:77:8e:95:62:19:3c:
         2e:49:42:c4:b9:25:f1:2e:56:cc:81:e3:e9:d9:10:1b:ff:1a:
         8e:8b:48:43:b9:da:f2:ea:f9:f4:41:bb:4b:7e:f9:77:0b:99:
         f8:d3:51:00:53:53:02:a6:78:fb:8a:1a:ea:72:5b:b2:79:ef:
         14:e6:c9:71:1a:55:2b:08:71:42:5a:95:0c:c1:e4:05:da:d0:
         42:2a:f5:7e:e0:d7:92:8e:01:42:2c:5b:e9:47:73:a6:2a:57:
         62:4d:16:e1:31:49:80:01:6d:05:7a:43:d9:79:53:0a:06:df:
         4d:67:e2:c9:f8:dc:1c:a9:0e:16:46:a2:dd:a1:66:db:3d:d9:
         19:d0:31:3c:c6:a9:f1:53:93:c1:01:5a:b3:96:54:f0:f0:17:
         0f:c2:f2:4b:25:3c:43:71:4d:ff:29:8b:69:d0:4e:ee:61:e7:
         3e:bf:9a:59:6d:c6:b0:dd:2f:d7:db:f5:5a:55:46:50:6f:94:
         e7:ea:84:81:65:fb:b6:c8:ba:37:3e:ad:71:7e:61:b4:16:a0:
         33:af:52:43:c2:45:1b:fe:6d:15:b8:dc:17:b5:ac:01:46:59:
         27:b0:34:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----