Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613436653a3a2f34382d3438203d3e20323034353335.roa
File:                     323630323a663932613a613436653a3a2f34382d3438203d3e20323034353335.roa (raw, json)
Hash identifier:          9fJa1nPzLUFXwVfiFrnPGDDs+BHWdaQaTBmBJld2L/4=
Subject key identifier:   80:26:66:B0:C1:8B:8F:13:77:1F:8C:F8:E5:1F:E5:8D:1F:F7:E6:1B
Certificate issuer:       /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial:       51747C67485C3520CE95438811BD89DAF3DAD158
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613436653a3a2f34382d3438203d3e20323034353335.roa
Signing time:             Wed 24 Dec 2025 06:58:07 +0000
ROA not before:           Wed 24 Dec 2025 06:53:07 +0000
ROA not after:            Wed 23 Dec 2026 06:58:07 +0000
asID:                     204535
IP address blocks:        2602:f92a:a46e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:74:7c:67:48:5c:35:20:ce:95:43:88:11:bd:89:da:f3:da:d1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
        Validity
            Not Before: Dec 24 06:53:07 2025 GMT
            Not After : Dec 23 06:58:07 2026 GMT
        Subject: CN=802666B0C18B8F13771F8CF8E51FE58D1FF7E61B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b3:f6:f9:b0:42:fc:af:44:44:40:da:a8:f3:
                    09:95:98:65:e8:11:6b:1c:4a:5b:6b:6d:f8:92:c4:
                    1f:da:5e:a0:6e:c3:85:42:db:ef:5a:ad:3d:8e:bf:
                    b5:54:81:b8:74:a9:2f:d3:e4:c9:bc:e2:bb:10:2d:
                    c2:55:73:4e:fe:69:01:2c:74:23:78:ef:67:e2:ca:
                    ce:3f:74:2b:36:fc:98:f1:06:32:d4:86:d2:59:24:
                    76:a1:bb:60:6f:7e:60:e6:18:0e:b2:c0:ba:2e:57:
                    9d:b4:af:44:99:7e:20:fd:49:6f:e3:87:c1:56:0d:
                    a3:ee:df:8a:40:09:3b:8a:76:c1:9b:17:cb:e8:09:
                    a7:5e:eb:98:cf:60:ca:14:6c:06:a9:44:fe:0a:c3:
                    83:62:93:93:3a:1f:e7:3b:b5:23:d2:04:76:76:8a:
                    81:bd:d1:0d:0d:25:a0:e8:a1:4e:c7:13:7f:58:cc:
                    cf:10:e5:bb:e6:30:a2:0a:23:ed:d1:e9:23:ba:84:
                    f5:ec:41:74:90:08:fb:a5:bf:04:1f:93:90:6a:5c:
                    05:4a:26:b1:a7:a0:e5:6a:b5:a1:58:ee:68:93:ac:
                    26:0e:d0:0e:d5:e0:9a:76:b7:59:e5:a5:51:e4:ec:
                    72:ea:be:d0:53:12:37:ec:4d:e7:33:75:68:d6:f8:
                    9e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:26:66:B0:C1:8B:8F:13:77:1F:8C:F8:E5:1F:E5:8D:1F:F7:E6:1B
            X509v3 Authority Key Identifier:
                keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613436653a3a2f34382d3438203d3e20323034353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a46e::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:dd:49:77:2c:07:c8:0c:ce:06:0f:f6:3e:c9:5a:e3:91:b0:
         c9:e5:c5:97:df:ed:37:d2:d8:46:3d:9c:8a:26:2d:05:fe:f9:
         57:ae:7f:ab:59:4c:4d:82:c1:f7:e7:e7:33:ca:bc:bf:c1:a4:
         26:47:ac:42:52:2d:10:2d:cb:b2:3c:fa:68:5f:be:75:45:08:
         63:ca:8b:59:94:75:2b:2b:de:4e:c6:11:33:22:b0:b7:55:b7:
         29:cc:80:ae:49:ae:c2:f6:39:20:30:cf:1d:34:ba:19:74:1d:
         11:cd:12:f4:3b:d0:e1:18:19:82:bc:44:cd:66:b8:81:0c:b7:
         a1:b5:ab:a3:66:f0:f9:6a:7f:34:ef:34:d8:c9:79:80:0b:9b:
         f4:31:c5:10:e0:99:40:fa:40:94:75:38:78:81:65:5b:9f:7e:
         cb:1f:92:b9:5d:1e:ea:bb:7b:1d:7b:30:7e:7c:38:c5:f8:89:
         fd:46:76:66:17:d8:8f:9a:35:33:92:3c:d2:97:76:45:9d:41:
         4e:84:24:7b:10:52:f3:91:bf:99:50:ba:28:60:d1:c7:3c:30:
         ef:11:9c:5f:6c:0b:9c:18:20:87:03:17:21:a6:d0:e4:35:3d:
         b5:b7:99:9a:11:91:50:72:39:f0:ee:3c:93:89:5c:72:e6:0b:
         ae:1d:c2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----