Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a3230303a3a2f34302d3438203d3e203437323732.roa
File:                     326130613a363034343a3230303a3a2f34302d3438203d3e203437323732.roa (raw, json)
Hash identifier:          DToeFVRij7k7udhjn/8/S/TXhvdpogw/E7MSr2ofUKs=
Subject key identifier:   F3:00:86:70:9C:77:1E:B9:B4:0B:83:92:A2:6F:29:58:29:3A:1C:13
Certificate issuer:       /CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Certificate serial:       46494197AF40D2DC24119FAE4F3D26BACD955872
Authority key identifier: 63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a3230303a3a2f34302d3438203d3e203437323732.roa
Signing time:             Sat 25 Nov 2023 07:52:33 +0000
ROA not before:           Sat 25 Nov 2023 07:47:33 +0000
ROA not after:            Sat 23 Nov 2024 07:52:33 +0000
asID:                     47272
IP address blocks:        2a0a:6044:200::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:49:41:97:af:40:d2:dc:24:11:9f:ae:4f:3d:26:ba:cd:95:58:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
        Validity
            Not Before: Nov 25 07:47:33 2023 GMT
            Not After : Nov 23 07:52:33 2024 GMT
        Subject: CN=F30086709C771EB9B40B8392A26F2958293A1C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:f2:ef:e7:5c:23:2b:d3:43:43:db:78:7d:
                    42:04:e1:47:c4:42:cb:64:9e:0d:89:d8:e2:b9:46:
                    ed:b7:df:b6:4b:88:92:2a:81:c4:da:78:da:c1:30:
                    97:1b:f1:80:c6:86:be:bf:13:65:fd:16:c9:9a:66:
                    18:64:34:7c:11:80:96:d9:5d:77:7e:93:6c:f9:98:
                    c4:64:97:cc:ca:ba:fb:33:05:4a:ac:26:7c:1d:3d:
                    35:ef:74:db:af:85:c4:ae:66:de:92:a0:76:73:a4:
                    83:fc:f9:29:f2:e2:31:f8:5c:0c:54:d8:4c:7a:a6:
                    10:67:82:4f:74:40:51:a9:57:46:19:de:f8:73:1f:
                    50:e8:4e:c2:ed:1e:c9:f2:7b:3f:83:55:fb:c5:1d:
                    e1:4e:40:e9:1c:7e:4a:99:16:8a:cd:4f:61:2f:07:
                    9c:61:39:ac:bd:fb:18:90:7e:9a:c8:7b:c7:05:b2:
                    24:17:e6:ed:31:94:33:72:39:6d:e0:5a:8c:7e:76:
                    4a:0e:53:05:8f:27:58:6c:5a:8c:65:20:a9:fa:d3:
                    e6:3a:51:a8:95:40:1f:a2:03:e1:75:e8:37:6b:4e:
                    ed:d0:72:39:77:c7:55:f7:90:0b:16:3e:38:0c:ae:
                    78:e2:ff:bc:59:7e:76:02:3f:74:6f:32:87:59:5f:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:00:86:70:9C:77:1E:B9:B4:0B:83:92:A2:6F:29:58:29:3A:1C:13
            X509v3 Authority Key Identifier:
                keyid:63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a3230303a3a2f34302d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:9b:be:b8:db:1c:cd:b1:27:9d:60:da:76:db:17:df:5c:
         fd:cc:cb:05:13:2f:bd:e4:25:cc:cb:ba:b7:6b:a6:5d:9a:9e:
         72:b9:8b:2a:51:35:ab:0e:9b:84:38:f4:9c:e4:9c:13:87:c9:
         e7:e2:0c:29:47:0b:6d:9c:62:35:a6:e6:1e:d8:62:6d:72:c0:
         79:a6:bd:ff:8a:47:3b:63:81:bc:65:27:59:46:c8:6e:ca:95:
         b8:d0:dd:80:8b:fa:93:b2:aa:91:58:54:68:0a:7b:9a:82:7e:
         22:c3:53:20:ef:67:98:1b:80:b8:9d:c0:4c:44:f5:9c:81:e3:
         d5:09:71:aa:0e:c0:0e:10:1d:59:34:f5:de:f2:ea:08:12:6b:
         08:85:d0:cf:81:a6:89:b2:e7:36:bb:a3:62:14:fe:ab:8c:b8:
         9d:ff:33:71:41:bd:3b:18:53:29:a5:7b:66:97:f8:aa:36:7a:
         c1:40:0c:d8:cb:c7:04:af:b0:50:eb:4a:77:87:06:88:21:a9:
         16:dc:46:7c:81:28:82:83:94:e3:28:2a:b3:cb:45:36:1c:d6:
         5d:b8:d4:63:67:6c:1d:f8:32:c6:ce:a5:66:53:2c:03:82:81:
         b9:23:1e:3f:09:8e:fe:f1:94:66:8b:14:ae:65:9a:58:0a:43:
         d8:3d:a1:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:59 2025 by rpki-client