Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234303a3a2f34342d3434203d3e20323035333239.roa
File:                     326131323a646434373a383234303a3a2f34342d3434203d3e20323035333239.roa (raw, json)
Hash identifier:          zXAmC8wvvHuACSSZuy7al3hP8J3Tj6qOKDsK/M2pE+Y=
Subject key identifier:   F7:36:F4:DA:0E:50:C1:EA:F1:E1:D5:49:42:14:5D:85:8C:61:3D:AA
Certificate issuer:       /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial:       7A521D76F93D9BE3BE16A53C5F0585482AF0F922
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234303a3a2f34342d3434203d3e20323035333239.roa
Signing time:             Fri 13 Sep 2024 20:09:37 +0000
ROA not before:           Fri 13 Sep 2024 20:04:37 +0000
ROA not after:            Fri 12 Sep 2025 20:09:37 +0000
asID:                     205329
IP address blocks:        2a12:dd47:8240::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:52:1d:76:f9:3d:9b:e3:be:16:a5:3c:5f:05:85:48:2a:f0:f9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
        Validity
            Not Before: Sep 13 20:04:37 2024 GMT
            Not After : Sep 12 20:09:37 2025 GMT
        Subject: CN=F736F4DA0E50C1EAF1E1D54942145D858C613DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:0d:52:21:49:18:10:cc:b1:0b:9f:a9:63:
                    d8:2e:f7:fa:64:a2:bb:2e:10:57:c7:0c:cb:aa:f2:
                    86:b8:62:d0:1e:8b:b1:8e:43:76:70:7b:fe:e5:9d:
                    9c:c0:6a:9f:de:c6:4c:6e:e7:bc:0e:2d:fc:45:4f:
                    5e:66:28:77:8e:ed:05:8c:da:93:1a:5c:cb:a4:4e:
                    b7:a9:5d:31:a9:1c:96:59:7f:b9:49:13:86:69:fe:
                    74:57:6a:70:1c:6b:98:1e:b9:74:7a:78:ae:f1:d0:
                    3c:f3:0a:46:7f:fb:e7:d5:80:2b:ab:c4:76:56:0b:
                    8c:8b:96:3f:99:dd:3f:ca:50:35:ef:24:ee:e2:0a:
                    b5:72:77:62:6a:bd:c7:53:1a:54:5e:63:58:23:1a:
                    f7:cd:2b:32:64:84:d0:ea:62:4a:e0:0b:f2:b2:8d:
                    ec:d5:97:7e:db:26:38:2f:f7:c1:bb:7f:4e:25:87:
                    8c:24:91:3c:54:d3:d6:e3:9e:13:3c:35:e1:18:36:
                    ba:46:5e:62:6c:0f:fc:bb:5d:e0:4d:7e:8f:4a:40:
                    51:dc:5b:bf:df:db:24:3f:a0:89:f8:07:e4:26:b6:
                    2b:5f:33:82:4d:35:0c:3a:67:3d:2c:16:17:50:fd:
                    49:b4:44:65:f6:07:45:74:a1:af:2b:32:9f:4e:e0:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:36:F4:DA:0E:50:C1:EA:F1:E1:D5:49:42:14:5D:85:8C:61:3D:AA
            X509v3 Authority Key Identifier:
                keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234303a3a2f34342d3434203d3e20323035333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8240::/44

    Signature Algorithm: sha256WithRSAEncryption
         e9:68:7b:58:3f:4b:80:ee:88:e2:2d:29:26:ed:7c:d7:8b:fc:
         92:34:a8:01:52:fb:35:1f:5e:55:64:f1:7a:91:6d:15:c8:48:
         40:a6:81:38:01:63:e7:2a:9d:91:a7:03:52:49:7c:67:31:70:
         6e:9f:93:9b:fe:e5:df:bb:18:7e:a6:0a:c7:8b:db:5a:1f:cf:
         d5:8a:ac:f9:a4:8e:2c:dd:92:64:b7:ab:b4:39:57:58:7b:a4:
         40:74:72:71:4d:d6:d1:51:6f:70:af:82:a4:97:d0:11:2d:e1:
         e5:b6:21:90:12:65:fd:f1:c7:3f:02:44:1d:ca:f0:64:ff:de:
         72:31:c9:1c:62:22:37:c7:91:f3:76:10:34:8c:0b:60:8b:fa:
         a2:5f:34:90:f8:0c:cb:f5:d3:d9:ef:1f:c2:21:d7:21:bb:bb:
         31:02:31:38:8a:04:9e:77:57:cf:dc:01:2e:4b:19:62:de:91:
         97:64:de:29:5a:1c:98:7f:97:9a:4a:02:30:3a:52:84:0e:7a:
         fb:ba:55:41:1b:79:75:1e:f5:9f:ce:c9:43:91:57:0b:8e:b8:
         34:9e:37:52:e3:a8:3e:19:c8:38:65:e5:a0:3c:b8:7d:59:40:
         4a:a3:64:02:0d:15:3f:f2:49:e1:2d:36:f2:50:91:a1:d8:96:
         49:b4:66:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----