Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/3/326130623a346530373a6362343a3a2f34362d3438203d3e20323134333933.roa
File:                     326130623a346530373a6362343a3a2f34362d3438203d3e20323134333933.roa (raw, json)
Hash identifier:          /yqC4r+7alOxM0Uk83lNV5Lvn1iFb5U0wqZHi1iZVTM=
Subject key identifier:   37:5B:54:C5:85:2C:F5:70:16:42:CB:48:9F:58:1E:EA:9A:A8:44:70
Certificate issuer:       /CN=DD6503836A2A3384674C6B0501E95B0AA2A381C9
Certificate serial:       79CCA9441F478BD44A2F3E2B554CF1B514E2F7CE
Authority key identifier: DD:65:03:83:6A:2A:33:84:67:4C:6B:05:01:E9:5B:0A:A2:A3:81:C9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/DD6503836A2A3384674C6B0501E95B0AA2A381C9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/3/326130623a346530373a6362343a3a2f34362d3438203d3e20323134333933.roa
Signing time:             Mon 26 Aug 2024 13:37:01 +0000
ROA not before:           Mon 26 Aug 2024 13:32:01 +0000
ROA not after:            Mon 25 Aug 2025 13:37:01 +0000
asID:                     214393
IP address blocks:        2a0b:4e07:cb4::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:cc:a9:44:1f:47:8b:d4:4a:2f:3e:2b:55:4c:f1:b5:14:e2:f7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD6503836A2A3384674C6B0501E95B0AA2A381C9
        Validity
            Not Before: Aug 26 13:32:01 2024 GMT
            Not After : Aug 25 13:37:01 2025 GMT
        Subject: CN=375B54C5852CF5701642CB489F581EEA9AA84470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:7f:20:16:b4:f7:70:df:89:b6:9a:47:f5:
                    32:e8:77:fa:56:fa:ee:bc:02:e5:fe:32:38:f6:ab:
                    e1:59:87:1c:86:1e:a6:bc:50:7a:13:31:30:ea:67:
                    17:76:3b:ea:81:35:1a:8d:95:ec:62:d9:01:9e:0a:
                    04:29:b5:31:ea:46:f3:61:59:51:83:24:71:ab:5a:
                    bb:d3:53:0b:41:1a:9c:43:11:92:88:26:85:94:ef:
                    ed:04:14:92:af:08:5e:d6:90:85:5c:fa:88:31:84:
                    14:4f:a4:ce:5a:99:aa:a6:3d:2c:b5:77:38:76:f7:
                    2b:dc:9e:3a:20:5a:6c:ec:76:81:d3:c4:97:28:62:
                    2f:10:25:20:e6:6b:d2:71:da:70:f3:f8:c1:99:8e:
                    72:a3:01:ee:39:7e:fc:e2:aa:ba:3e:68:2b:ca:0b:
                    3f:41:ea:b3:2b:e5:6c:8c:95:fa:a1:2e:75:86:68:
                    c3:10:f4:4b:98:1e:05:f4:5e:4c:9d:e5:15:41:d7:
                    17:a0:c5:79:7c:c6:26:dd:bb:1e:ad:78:98:08:bc:
                    ac:48:54:c8:51:2d:ce:c9:e5:36:cc:01:20:94:48:
                    99:1a:a1:f6:40:2e:d7:ae:d0:c1:df:b6:64:2c:6b:
                    38:8a:25:be:2d:31:7b:24:57:62:25:b8:84:d6:27:
                    24:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5B:54:C5:85:2C:F5:70:16:42:CB:48:9F:58:1E:EA:9A:A8:44:70
            X509v3 Authority Key Identifier:
                keyid:DD:65:03:83:6A:2A:33:84:67:4C:6B:05:01:E9:5B:0A:A2:A3:81:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/3/DD6503836A2A3384674C6B0501E95B0AA2A381C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/DD6503836A2A3384674C6B0501E95B0AA2A381C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/3/326130623a346530373a6362343a3a2f34362d3438203d3e20323134333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:cb4::/46

    Signature Algorithm: sha256WithRSAEncryption
         1c:5f:db:3b:ed:bd:42:53:db:4c:a4:e4:ed:8d:48:ab:f7:9f:
         17:a6:9b:6a:54:f2:83:39:90:25:c0:5d:51:9e:6f:09:ae:ac:
         d2:1b:de:e7:80:ef:fb:b6:77:db:88:04:a6:04:69:57:fd:1f:
         a1:9c:ff:44:86:ae:18:8f:cb:7a:de:e8:3b:a7:53:d8:4d:30:
         07:a6:b7:5d:d0:41:0d:af:8b:6d:02:d4:51:0b:c4:0f:c3:84:
         e0:bf:a5:f2:32:35:53:c5:05:f1:1d:f6:d6:36:14:ee:86:b6:
         ef:a9:44:7e:c4:2c:5d:4d:2e:dd:b8:91:4a:3b:d8:bc:91:a5:
         be:4f:5f:21:23:57:7f:c8:eb:60:dc:53:44:89:9e:d8:af:b3:
         b4:aa:07:b1:7c:b3:7c:6a:e3:b4:5e:2a:95:10:3a:92:d9:86:
         91:0d:ef:df:96:13:a6:4a:0a:86:90:3b:37:76:e0:c4:ba:73:
         aa:df:24:bc:cc:08:9a:aa:2f:38:26:a9:3d:b3:03:58:43:55:
         b0:95:60:69:d4:eb:1b:19:30:cb:05:72:81:4b:35:ef:2c:0d:
         d2:9d:3f:04:b3:0d:ee:e5:8c:99:c4:8e:6e:50:79:a5:a0:a0:
         8c:63:4d:4e:6d:29:96:57:0e:f6:b6:60:65:2a:00:f7:3f:c9:
         02:a7:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----