Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa
File:                     323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa (raw, json)
Hash identifier:          TvLJ1Uq1huTW719GR2EFzXXRM09Tw7H6kbirhRZMWCE=
Subject key identifier:   0F:2C:24:CD:77:F7:96:97:F9:37:0B:11:24:51:1C:97:FF:2F:1A:12
Certificate issuer:       /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial:       74E6CC51A6AD322490F83476CEE57E8648462F3C
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa
Signing time:             Wed 24 Dec 2025 07:03:23 +0000
ROA not before:           Wed 24 Dec 2025 06:58:23 +0000
ROA not after:            Wed 23 Dec 2026 07:03:23 +0000
asID:                     214933
IP address blocks:        2602:f92a:a46f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e6:cc:51:a6:ad:32:24:90:f8:34:76:ce:e5:7e:86:48:46:2f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
        Validity
            Not Before: Dec 24 06:58:23 2025 GMT
            Not After : Dec 23 07:03:23 2026 GMT
        Subject: CN=0F2C24CD77F79697F9370B1124511C97FF2F1A12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:30:49:db:26:21:6e:29:80:f5:ee:77:22:
                    36:44:8d:f7:14:88:51:f7:90:0c:81:3f:04:e5:c9:
                    c3:9f:e5:7c:fc:3a:f0:32:60:94:13:8a:a4:f0:ed:
                    92:73:6b:02:79:9a:32:d9:2c:2c:71:c1:73:5f:fd:
                    71:cb:88:fd:db:e3:41:17:c7:a1:ec:61:19:4f:e3:
                    7a:fd:d6:2a:92:9f:08:f6:6c:53:14:17:52:8f:ab:
                    ce:0e:20:e7:eb:dc:9c:bd:7d:d0:2b:24:a8:ea:56:
                    ce:b6:11:13:8d:a9:94:4e:ae:a7:40:93:b1:40:06:
                    01:cd:5e:a6:92:37:a0:ab:16:07:61:8f:8c:23:fc:
                    b4:2d:16:7b:63:a6:05:f2:c1:4e:79:28:ab:8d:f6:
                    c5:0c:37:e2:46:46:bd:25:53:1c:cf:e9:40:fb:b8:
                    2d:27:2e:45:f7:c8:d7:bf:5c:e8:20:73:ea:37:b4:
                    2a:f8:74:a3:29:92:5c:30:8e:28:36:21:09:ba:6f:
                    2b:e4:b2:f9:c7:e8:1e:e5:bc:7e:65:98:e8:2b:dd:
                    80:b1:d6:9f:b9:29:ec:22:f5:9f:0c:23:d5:bf:51:
                    69:73:c1:43:df:56:96:6b:d7:ea:42:9d:d6:73:5d:
                    09:b9:8e:01:28:e3:04:66:6c:99:53:1d:50:cf:be:
                    3b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2C:24:CD:77:F7:96:97:F9:37:0B:11:24:51:1C:97:FF:2F:1A:12
            X509v3 Authority Key Identifier:
                keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a46f::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:30:0b:80:f9:7b:df:a7:17:f1:83:3d:e7:fc:05:0e:46:3e:
         c5:12:7d:36:15:c8:9c:1e:11:d2:e3:e9:80:ef:51:e0:bc:14:
         09:be:f9:ed:10:9f:11:c4:1a:d0:86:55:42:08:10:08:33:6a:
         15:e5:13:2e:3d:57:fa:47:65:78:f8:2d:73:a5:51:e8:00:32:
         2b:50:a0:c8:16:85:76:ca:69:6d:81:11:5b:68:d1:4d:83:6a:
         89:bd:ec:cd:e9:56:7e:c6:c6:6c:a2:5a:0b:8c:b8:10:6c:af:
         63:76:94:b8:81:e2:87:07:b2:22:d4:c0:3e:3e:4a:30:57:7c:
         14:49:96:62:a5:c9:e8:fe:e3:2c:60:d5:e7:27:96:82:bc:8f:
         93:df:6d:22:86:62:64:d3:05:e3:a2:9a:89:11:e7:36:d6:dd:
         ca:63:dc:56:17:44:ea:fd:b1:a1:5c:b4:6e:bb:54:00:e3:61:
         f3:79:c3:c0:84:ce:3f:c4:dc:7f:58:9b:ff:da:60:0b:35:8a:
         6f:95:09:8c:6a:d0:eb:a0:f1:56:4e:42:de:3c:fd:83:57:e6:
         f4:d0:35:ad:83:5e:b2:eb:6d:96:91:ed:67:5f:c6:a5:d3:68:
         a2:8c:03:a0:ee:ac:d2:5f:79:27:e4:aa:18:07:1a:10:b9:1e:
         ce:78:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----