Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393430303a3a2f34302d3438203d3e20313430393135.roa
File:                     326131343a373538303a393430303a3a2f34302d3438203d3e20313430393135.roa (raw, json)
Hash identifier:          wA4E0FIdt7aInTrqUSykGSjMBC6fkGgI15Sx9VWpQ1U=
Subject key identifier:   98:8E:4C:01:59:56:C6:7A:D3:6D:CE:6B:CC:57:5B:8B:8F:5E:8E:EE
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       5A17FBA1DB14F3F8298B5C94E0DF5C0336958BB1
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393430303a3a2f34302d3438203d3e20313430393135.roa
Signing time:             Thu 19 Dec 2024 18:13:26 +0000
ROA not before:           Thu 19 Dec 2024 18:08:26 +0000
ROA not after:            Thu 18 Dec 2025 18:13:26 +0000
asID:                     140915
IP address blocks:        2a14:7580:9400::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:17:fb:a1:db:14:f3:f8:29:8b:5c:94:e0:df:5c:03:36:95:8b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Dec 19 18:08:26 2024 GMT
            Not After : Dec 18 18:13:26 2025 GMT
        Subject: CN=988E4C015956C67AD36DCE6BCC575B8B8F5E8EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:99:60:df:28:49:13:78:38:91:aa:b3:54:2f:
                    2d:dd:d2:11:63:ec:4b:55:dd:dd:9e:f9:d3:ea:33:
                    54:20:7c:ec:68:9a:2c:18:6b:fb:ea:b3:34:6b:4a:
                    10:68:fb:f0:73:31:fa:87:59:6d:98:13:8e:9e:fc:
                    ce:35:ca:15:fb:d7:8d:96:93:3e:f7:fd:67:d4:39:
                    b9:6f:7f:81:25:f1:5d:28:a8:93:41:14:82:27:50:
                    89:fd:1d:1f:f1:01:f4:f6:f3:42:4d:fe:e8:cd:42:
                    ba:cf:49:8c:97:cc:fd:de:0e:e8:27:51:9f:1e:8e:
                    f2:68:af:cc:0e:59:0d:17:24:3f:5b:4c:a3:4a:e9:
                    1d:e2:94:85:6c:14:40:0a:8c:ad:5c:4f:f6:30:91:
                    48:73:1c:ea:13:01:60:3a:cb:e3:ec:a1:63:c7:aa:
                    58:7d:8c:50:89:90:74:5c:46:88:23:4b:8d:21:0e:
                    b2:25:ed:f9:e6:6b:85:11:e0:d7:c8:ba:ec:6a:52:
                    53:71:d6:b0:fc:9d:56:23:02:94:54:d1:53:fb:72:
                    6d:09:9d:1d:6a:63:44:1a:d9:5c:8e:2a:05:9c:f3:
                    f6:1c:ed:71:95:d6:d8:b5:21:73:42:db:e8:45:cd:
                    3f:83:20:92:63:ad:35:74:3d:91:45:b5:32:14:73:
                    5a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8E:4C:01:59:56:C6:7A:D3:6D:CE:6B:CC:57:5B:8B:8F:5E:8E:EE
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393430303a3a2f34302d3438203d3e20313430393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:9400::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:67:81:e0:76:f4:87:b3:dd:a1:86:fa:77:b6:f0:af:8f:7c:
         7a:33:12:fa:83:c8:08:e0:5f:c2:aa:32:8c:43:d4:8f:48:a9:
         f4:6d:4b:22:6b:ba:e3:93:bd:36:99:71:9f:b6:c9:fa:b5:5e:
         61:61:2f:4d:cd:06:ea:7d:57:b0:e2:bb:8d:51:b9:99:c7:36:
         52:70:d7:9c:d8:0d:41:57:2a:e0:c3:59:3c:d1:84:82:b4:7a:
         6a:c6:89:84:b9:3c:84:a3:73:42:b7:e4:bc:30:ca:3b:49:cd:
         20:e0:31:79:97:9a:d4:13:43:6e:e6:90:c5:f5:63:bc:a1:8d:
         e9:bb:69:24:e3:e9:fd:fa:fe:a7:d4:35:e6:e3:ee:99:09:5d:
         96:a2:cd:86:74:4d:74:04:31:4c:76:34:7d:c3:f6:10:7f:13:
         1d:18:1c:1d:0c:fe:06:a3:51:7c:0d:e9:38:c6:da:55:19:2e:
         11:91:43:3d:6b:fb:80:f4:3e:78:3b:2c:50:1f:26:fb:6f:54:
         76:e7:01:9a:54:db:16:f8:b6:b2:0d:02:19:36:52:bd:4f:c9:
         46:dc:1c:9d:4d:86:ad:00:68:44:e5:67:5e:86:4e:ca:b1:36:
         1a:2f:4d:a5:ba:9e:36:b1:38:76:fb:9f:6b:aa:88:b4:c3:25:
         36:9a:b6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----