Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/326130663a383563313a3336323a3a2f34382d3438203d3e20323135363334.roa
File:                     326130663a383563313a3336323a3a2f34382d3438203d3e20323135363334.roa (raw, json)
Hash identifier:          htyqyXi7idZLGqx/IEVeWERSMbeQ7T1QlHNct8qG2r4=
Subject key identifier:   50:FF:59:E0:E5:61:0E:89:6E:B1:64:EE:E4:8A:EF:C6:FA:82:0B:A8
Certificate issuer:       /CN=FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027
Certificate serial:       7111F6CD5CDBFF1E68DA4A5CDF2518539F2AE87B
Authority key identifier: FB:DF:5C:81:A0:D6:F7:9C:3D:FB:8B:4E:DF:29:66:F3:52:60:60:27
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/326130663a383563313a3336323a3a2f34382d3438203d3e20323135363334.roa
Signing time:             Fri 14 Feb 2025 13:38:41 +0000
ROA not before:           Fri 14 Feb 2025 13:33:41 +0000
ROA not after:            Fri 13 Feb 2026 13:38:41 +0000
asID:                     215634
IP address blocks:        2a0f:85c1:362::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:11:f6:cd:5c:db:ff:1e:68:da:4a:5c:df:25:18:53:9f:2a:e8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027
        Validity
            Not Before: Feb 14 13:33:41 2025 GMT
            Not After : Feb 13 13:38:41 2026 GMT
        Subject: CN=50FF59E0E5610E896EB164EEE48AEFC6FA820BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:1f:24:05:cc:d8:57:9c:1c:7c:c9:6a:d8:
                    3d:48:a2:81:15:10:4c:80:bb:e3:fe:19:76:61:3a:
                    8d:38:7a:3b:11:16:18:ca:ae:2b:e2:c4:7f:91:50:
                    d5:50:0d:60:31:80:99:2b:3b:e6:a1:11:41:78:5a:
                    d2:05:c6:65:ab:3c:6d:19:ce:99:e6:3e:7a:59:6f:
                    d3:47:30:75:00:94:97:9d:aa:7c:25:ec:2e:a9:2e:
                    45:6b:6c:f9:1e:fd:23:d7:bd:fb:51:b6:f7:93:e4:
                    8a:15:5e:19:16:21:25:ed:4c:9a:dc:25:6b:99:0e:
                    16:98:68:d0:cf:27:0b:ea:6a:ac:d4:a3:f4:79:4a:
                    ba:dc:e6:25:8a:b7:06:bf:cf:00:df:cb:91:43:82:
                    b3:2f:e5:36:4a:f2:8c:15:18:e6:2a:6b:31:31:70:
                    27:a3:d7:e2:68:f4:6c:b5:28:55:80:fe:2b:4f:7c:
                    76:2e:9d:d6:0a:21:58:b9:e4:39:f9:cc:bd:bb:58:
                    fc:25:dc:4d:ab:54:4c:25:f5:60:43:b9:93:b4:41:
                    b5:f6:44:2a:c8:0f:b8:3d:b0:56:d6:39:a4:6f:fc:
                    5a:65:81:49:93:50:e1:fb:f3:70:2b:50:ab:58:f9:
                    58:85:06:07:07:01:75:91:3a:f3:2e:94:11:d6:d6:
                    a0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FF:59:E0:E5:61:0E:89:6E:B1:64:EE:E4:8A:EF:C6:FA:82:0B:A8
            X509v3 Authority Key Identifier:
                keyid:FB:DF:5C:81:A0:D6:F7:9C:3D:FB:8B:4E:DF:29:66:F3:52:60:60:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/326130663a383563313a3336323a3a2f34382d3438203d3e20323135363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:362::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:d9:db:0c:7f:bc:b9:d4:9d:00:5d:c9:0e:37:06:4b:7b:52:
         64:a4:cd:c6:33:82:6a:8a:ef:cd:f0:e4:af:69:ee:a7:a1:32:
         be:bf:fc:e0:05:10:db:c6:0f:49:37:ad:82:14:57:6f:a8:8a:
         af:13:1b:97:ec:29:af:b8:5d:11:fa:93:e8:13:c5:87:85:91:
         09:49:42:3e:9a:38:95:6d:49:bc:72:19:5a:ea:6a:2d:7f:19:
         e4:09:6a:ac:50:7c:87:cc:c4:67:8d:46:bf:37:31:7f:4a:02:
         94:ee:ea:c6:85:d9:37:27:e1:c1:80:49:62:48:2a:46:bd:7b:
         ad:08:1d:e5:39:0b:a4:0c:9e:6d:d1:ab:04:2f:3f:6c:92:9b:
         94:a2:28:93:e5:5f:9a:74:33:78:4e:26:6e:dc:0c:5d:c1:cd:
         e0:6c:dc:9a:b3:4b:ce:a5:f3:97:ca:68:a0:2f:99:08:e5:5c:
         f4:32:6d:7f:e7:27:20:80:b8:75:74:17:c9:40:9a:0e:cb:b9:
         5c:34:7b:30:cf:fa:e6:34:09:f6:b8:01:64:70:51:4d:87:82:
         2e:01:dc:90:ff:93:ec:77:07:00:22:69:92:44:26:e3:72:59:
         8f:44:b2:46:f5:32:18:a1:1a:dc:e1:23:15:92:98:6c:17:b0:
         51:26:05:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----