Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa
File:                     326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (raw, json)
Hash identifier:          LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=
Subject key identifier:   1D:AD:B4:6C:FD:0B:D1:BA:65:31:BD:B5:99:3A:3E:D9:9E:61:FA:A8
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       5B1654B46CA00AC930680A98A7351BFD9669D684
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa
Signing time:             Mon 17 Mar 2025 18:56:44 +0000
ROA not before:           Mon 17 Mar 2025 18:51:44 +0000
ROA not after:            Mon 16 Mar 2026 18:56:44 +0000
asID:                     215242
IP address blocks:        2a0f:85c1:700::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:16:54:b4:6c:a0:0a:c9:30:68:0a:98:a7:35:1b:fd:96:69:d6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Mar 17 18:51:44 2025 GMT
            Not After : Mar 16 18:56:44 2026 GMT
        Subject: CN=1DADB46CFD0BD1BA6531BDB5993A3ED99E61FAA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:69:55:3f:3f:66:c0:3c:6c:fc:af:70:1a:c1:
                    e8:eb:10:fa:52:52:64:20:33:a2:01:fc:4e:3a:6d:
                    73:af:1e:8e:79:cb:a7:f4:1b:5a:fa:23:af:6c:83:
                    6d:f7:b1:ab:a4:c7:a2:de:6a:a8:8a:ee:ce:90:75:
                    6c:ae:96:71:32:82:0a:f3:81:f7:13:34:cf:3f:6c:
                    aa:dc:9c:e5:0e:46:04:44:e7:f6:48:42:c5:53:a0:
                    7d:3f:96:94:4e:5c:5f:f8:26:b5:68:fb:ba:63:20:
                    76:06:5d:0b:3a:84:3f:40:af:e5:66:fe:11:a9:ca:
                    ac:30:19:12:ac:08:69:00:e0:7b:2e:c7:ae:b9:ba:
                    a4:65:10:7b:34:65:e1:3d:53:64:01:bc:cc:7f:0f:
                    fb:65:a2:e2:64:97:cc:1f:21:08:e3:a1:43:c8:8b:
                    a7:d0:4b:f0:d9:c2:14:78:3e:33:e2:32:fd:a4:95:
                    7b:4c:5d:29:b9:b8:c6:aa:1e:b9:cf:fd:dc:4f:5f:
                    38:f2:39:ae:77:15:40:bb:6f:d8:f5:36:bf:d4:db:
                    94:97:b8:f9:ae:b5:c7:87:9c:b9:9b:4e:a4:16:fe:
                    ab:22:fb:3b:18:59:bf:b9:c9:ec:f2:3d:ce:9a:e4:
                    38:6e:71:0f:86:01:5d:28:b0:d1:9a:75:94:19:ad:
                    15:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AD:B4:6C:FD:0B:D1:BA:65:31:BD:B5:99:3A:3E:D9:9E:61:FA:A8
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:f4:c6:6f:4e:89:55:1d:47:cf:85:a2:59:5e:17:ae:9c:f1:
         cc:dd:79:81:63:cc:ea:0e:7a:4d:fd:25:e8:8f:2e:08:27:67:
         17:40:e4:70:0a:22:27:80:83:81:48:be:29:6d:f1:97:b6:79:
         9b:0a:3a:ca:bf:e4:52:c9:03:ea:46:c1:e9:e3:da:4d:4b:a8:
         4f:b7:1c:30:cb:2f:f0:99:3a:78:91:1d:5d:a5:c9:9d:88:e2:
         8c:2c:23:9e:58:27:c5:7c:5c:36:67:a2:44:62:8d:3b:89:ba:
         98:54:d9:7d:73:ba:aa:db:01:a9:fe:3c:4f:ee:4d:d9:f0:be:
         92:ba:8c:40:41:b5:94:f0:1c:5a:82:96:10:70:8a:c7:e6:d7:
         90:82:d7:c0:de:5e:aa:13:6c:a6:af:8e:d4:62:38:18:00:5c:
         92:96:5f:e0:e4:35:8a:c7:75:26:e1:fa:c3:ad:21:72:98:04:
         b7:7d:6c:c3:35:73:57:0a:df:1b:d6:24:29:b9:ec:98:22:7b:
         6b:7a:af:0a:5c:1b:4e:f1:28:bc:9f:14:c2:70:d8:5c:ae:40:
         b7:f9:e3:40:bf:62:f3:ac:61:8c:ed:8b:94:80:e8:82:45:fb:
         c4:d3:6b:4e:9e:7b:88:f5:5f:0a:63:c3:c9:2d:1b:16:b3:3e:
         26:33:58:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----