Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa
File:                     323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa (raw, json)
Hash identifier:          ImhlVfCJc3FWLZQc/pm1n1pWEHtyCds9nQJVHDbb8vw=
Subject key identifier:   18:5E:B4:A3:C8:53:41:BB:07:9B:90:6A:1B:09:F3:BB:28:2A:8B:B3
Certificate issuer:       /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial:       431717E2A1DD8921DE38A2CF973259D9AFF9B9C6
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa
Signing time:             Wed 24 Dec 2025 06:52:32 +0000
ROA not before:           Wed 24 Dec 2025 06:47:32 +0000
ROA not after:            Wed 23 Dec 2026 06:52:32 +0000
asID:                     51087
IP address blocks:        2602:f92a:a46c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:17:17:e2:a1:dd:89:21:de:38:a2:cf:97:32:59:d9:af:f9:b9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
        Validity
            Not Before: Dec 24 06:47:32 2025 GMT
            Not After : Dec 23 06:52:32 2026 GMT
        Subject: CN=185EB4A3C85341BB079B906A1B09F3BB282A8BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:d0:cd:c3:49:6d:65:43:90:c4:64:37:71:
                    49:b9:b8:ae:5e:98:21:69:80:5d:4d:90:2b:65:6f:
                    5f:db:ce:7a:4c:d3:7e:f7:4e:7a:3c:ba:8f:24:88:
                    5d:04:db:95:47:bd:72:a5:f2:d7:42:e6:9b:ef:c3:
                    52:d6:2d:c9:87:e2:98:bc:6b:c3:be:7e:23:1b:61:
                    39:9a:9c:b4:9c:b9:33:f4:88:a7:23:15:35:0c:5b:
                    9d:81:cd:45:64:a1:47:aa:a6:94:57:4d:93:b0:34:
                    8f:a9:61:7a:31:1e:69:07:48:1b:bb:93:31:96:d8:
                    b2:18:9e:4e:f4:ed:40:82:8d:2d:1c:94:29:78:e5:
                    70:36:84:d6:53:8b:51:b0:2a:f9:4d:df:94:c0:c7:
                    57:34:87:f5:15:4d:bd:29:54:78:7e:5d:8c:bc:ca:
                    54:c8:7b:cc:b3:31:76:b1:ca:21:a7:dd:6a:d3:fe:
                    a2:58:67:1e:c8:ef:6e:ef:46:07:94:ec:58:69:5b:
                    ac:f9:59:8f:33:ba:42:b2:54:e8:b7:56:61:3d:99:
                    69:cf:69:81:d8:67:2f:c0:22:71:0e:18:7f:de:17:
                    21:59:8b:b3:72:9c:20:d6:8e:36:fe:30:b5:b2:41:
                    80:31:ff:e6:6f:36:27:03:02:5d:98:cc:9f:b2:49:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5E:B4:A3:C8:53:41:BB:07:9B:90:6A:1B:09:F3:BB:28:2A:8B:B3
            X509v3 Authority Key Identifier:
                keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a46c::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:a0:4e:b6:11:22:29:93:dd:3f:d7:d8:f2:e3:19:1c:08:1d:
         ff:f0:50:e6:21:95:ce:2a:23:49:9f:2e:1f:f0:e4:f2:ec:d7:
         60:7b:ca:ef:93:24:3c:82:91:f2:00:cf:6e:5f:d4:31:2d:54:
         15:a3:d0:0a:fa:e6:87:63:b1:ba:8e:13:20:44:4f:0c:40:90:
         2e:cf:5b:35:c5:b9:dc:c0:f4:58:59:28:b4:da:1c:ac:26:92:
         3f:1d:6d:1f:96:e8:f0:20:30:97:98:1f:fd:e9:76:6a:a4:67:
         af:2a:c7:f3:f6:22:42:df:fc:81:e5:92:35:45:59:81:a7:33:
         82:ee:ec:b5:d7:17:3b:a5:ac:b2:99:f4:56:a2:70:03:cc:76:
         c5:ff:6e:fb:1b:b7:aa:f2:9b:9e:d6:bd:e1:c7:70:80:f3:4b:
         06:18:82:90:22:82:c9:d1:f2:f4:03:1a:fa:b5:26:a2:27:47:
         29:21:71:d3:66:39:9a:74:a8:21:92:80:79:3d:a2:01:c0:ec:
         a5:91:ba:8b:99:ce:e7:ca:60:db:a8:e1:54:d3:c4:0c:d0:a5:
         72:38:eb:64:f9:53:1c:9c:af:51:1a:61:23:cb:fb:85:f2:0b:
         b7:3c:90:06:78:58:a5:91:8f:c9:79:37:40:9e:f7:b7:c6:2b:
         b5:e1:60:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----