Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6564303a3a2f34342d3438203d3e20323136333836.roa
File:                     326130373a323438363a6564303a3a2f34342d3438203d3e20323136333836.roa (raw, json)
Hash identifier:          9vDn6XtE+SySLfcQMmr+MRHoSuqS5YzSFmb4Vv8zuoc=
Subject key identifier:   26:FB:9F:4E:C3:4D:32:55:74:9D:EA:69:8D:BF:C0:A2:57:11:93:85
Certificate issuer:       /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial:       17D6E899BA3B1BD8E734028113D5FF64DAE30F86
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6564303a3a2f34342d3438203d3e20323136333836.roa
Signing time:             Fri 28 Jun 2024 21:24:59 +0000
ROA not before:           Fri 28 Jun 2024 21:19:59 +0000
ROA not after:            Fri 27 Jun 2025 21:24:59 +0000
asID:                     216386
IP address blocks:        2a07:2486:ed0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d6:e8:99:ba:3b:1b:d8:e7:34:02:81:13:d5:ff:64:da:e3:0f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
        Validity
            Not Before: Jun 28 21:19:59 2024 GMT
            Not After : Jun 27 21:24:59 2025 GMT
        Subject: CN=26FB9F4EC34D3255749DEA698DBFC0A257119385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:11:db:e8:9c:d4:b5:2e:ab:15:3d:38:b1:
                    eb:fd:58:42:72:50:eb:97:c5:b5:50:23:2e:24:d4:
                    ef:8d:1a:1c:f7:24:7b:22:cf:41:e7:06:ba:df:16:
                    84:0e:6f:80:35:8b:d7:58:f2:3b:8e:fb:ee:1f:be:
                    f9:a3:1c:15:d6:c4:aa:71:39:cb:39:e7:e2:b1:7b:
                    f7:f3:34:18:76:d0:e1:e8:e6:39:82:f8:5c:04:db:
                    73:2a:a8:74:fc:68:85:6a:5f:d5:c8:4e:82:00:2f:
                    c8:99:9e:bf:60:d2:1d:96:b7:a6:61:a7:aa:57:a1:
                    16:51:28:e8:f2:3a:72:eb:02:6d:35:03:3b:2e:3c:
                    24:45:46:c8:04:05:89:ae:96:4c:60:6c:fb:aa:c4:
                    d8:72:c7:0b:37:e7:9c:6b:6d:57:af:a6:58:70:43:
                    b4:34:06:f3:e7:91:be:e5:04:3a:8a:2a:ff:e1:b3:
                    95:e8:d7:33:c9:6c:01:3b:02:28:85:25:1b:a6:74:
                    ae:0d:04:bc:c6:a5:f6:15:ed:3b:60:1c:85:e1:6d:
                    ad:4b:12:19:07:01:27:cc:4a:c6:20:62:ee:94:84:
                    c4:7c:ce:28:11:67:76:8f:fe:32:72:c7:f1:66:e4:
                    af:6d:bb:81:6f:bf:d6:c0:57:d0:e6:c6:79:52:58:
                    45:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FB:9F:4E:C3:4D:32:55:74:9D:EA:69:8D:BF:C0:A2:57:11:93:85
            X509v3 Authority Key Identifier:
                keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6564303a3a2f34342d3438203d3e20323136333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2486:ed0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2c:98:0f:f8:19:4a:9d:68:e6:d1:e1:80:fd:53:0c:7f:8b:87:
         04:cc:ac:e1:11:b6:f2:aa:74:12:07:42:67:bc:d5:5c:ca:fe:
         a7:17:e4:82:43:7c:cb:25:77:6f:35:f0:59:eb:79:db:c9:ec:
         9b:44:46:86:4b:58:21:f6:1e:e3:4d:c0:76:9f:67:b2:7b:43:
         3f:29:97:2f:87:59:39:f7:c8:a1:4d:5b:4e:75:77:47:46:77:
         42:4e:35:99:d8:15:9e:2d:9b:36:3b:4f:ce:71:6b:61:fc:3d:
         08:57:00:b9:a2:f0:ad:c3:53:4c:62:37:09:36:d0:00:d7:b2:
         30:ec:c9:b8:de:5b:af:63:0a:a6:1f:5f:f8:96:bc:1a:fb:55:
         bb:31:10:8b:e9:b1:ba:b5:90:9d:c8:92:3c:a3:97:93:68:fe:
         c8:cc:38:ac:90:1a:64:20:be:2e:d9:d8:7f:90:60:04:fb:e9:
         5a:36:2f:88:30:93:52:60:50:5d:2c:85:9b:a4:63:35:9e:79:
         b4:a4:c3:42:b9:c8:6a:b6:e8:20:6b:54:e0:19:09:f6:5c:46:
         0f:8a:02:6e:a0:41:7d:5d:93:93:fc:2c:26:ce:8b:4b:53:a7:
         50:32:9c:1e:ef:ef:43:f6:5d:c3:32:4c:d9:c5:eb:d0:a3:2c:
         31:70:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----