Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530343a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613530343a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          moQRMMBvj0UyBoQCz+mK9nd5oVfhCSQremQkc7t5MpY=
Subject key identifier:   7F:F4:3D:AD:9E:E9:0E:9F:1C:DE:0E:8A:DF:28:96:81:EB:75:EF:EE
Certificate issuer:       /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial:       02F3D2B65FAEFE89416D659157B27AD5A4EF83FE
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530343a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sat 08 Feb 2025 19:35:58 +0000
ROA not before:           Sat 08 Feb 2025 19:30:58 +0000
ROA not after:            Sat 07 Feb 2026 19:35:58 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a504::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f3:d2:b6:5f:ae:fe:89:41:6d:65:91:57:b2:7a:d5:a4:ef:83:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
        Validity
            Not Before: Feb  8 19:30:58 2025 GMT
            Not After : Feb  7 19:35:58 2026 GMT
        Subject: CN=7FF43DAD9EE90E9F1CDE0E8ADF289681EB75EFEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:e9:1e:4e:4a:ea:a1:e6:68:1c:a5:29:a8:
                    a1:8c:7e:ab:f1:34:af:af:9e:fc:f5:7d:e0:ad:05:
                    d6:64:1d:8f:2a:70:23:c3:b3:7b:ee:32:43:c2:98:
                    ce:86:50:07:77:84:27:f9:32:51:9f:28:6a:84:1f:
                    2f:98:63:7d:ce:71:81:1b:ce:10:4c:a9:58:06:55:
                    e7:1e:bf:c5:9d:3e:cf:c9:25:21:2d:56:ce:34:f4:
                    ef:9e:f3:c1:50:b1:ee:28:ac:97:73:45:8e:09:0c:
                    1a:cc:08:3d:ca:28:48:db:b3:d7:31:d9:22:39:e4:
                    27:1d:4f:81:b7:a3:95:be:b8:e7:a6:c0:a7:1d:75:
                    19:d0:15:38:cb:a2:94:36:56:03:40:85:3a:bb:a0:
                    06:a8:9f:d2:30:96:6a:f8:81:b0:d2:6a:25:ee:c5:
                    fb:71:05:29:13:04:6a:c3:2c:7a:e3:fd:a2:04:c2:
                    a3:e9:32:4b:53:50:8d:d1:2b:39:84:16:23:c5:25:
                    cb:be:cb:06:ed:94:d2:dc:a5:b5:6e:ea:6b:78:cb:
                    55:e3:7d:37:8d:cd:55:61:02:5c:b2:41:fe:ba:2f:
                    16:0f:b3:a8:5d:5f:a2:e0:90:51:5d:1c:22:50:d8:
                    d9:27:2f:07:15:80:e1:21:f5:11:0f:78:31:52:75:
                    ac:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F4:3D:AD:9E:E9:0E:9F:1C:DE:0E:8A:DF:28:96:81:EB:75:EF:EE
            X509v3 Authority Key Identifier:
                keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530343a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a504::/46

    Signature Algorithm: sha256WithRSAEncryption
         3f:c2:48:52:c2:64:de:f7:ed:df:90:c2:08:3c:58:2d:9c:3f:
         2b:ab:a4:33:c9:1f:29:48:f5:30:7f:36:7d:57:45:6a:c4:64:
         81:b0:a7:2c:e5:02:e5:fd:af:40:5d:72:f0:11:84:0b:57:8a:
         34:81:36:4e:76:aa:ad:13:01:5c:01:58:26:99:f9:40:71:80:
         c6:69:ca:0b:3b:91:c6:55:0b:82:89:29:a2:99:03:94:c4:80:
         e6:00:2b:cf:f4:0c:0a:f0:4d:93:38:97:8b:7f:74:ed:e7:c7:
         49:47:f4:b4:73:f4:13:83:64:23:22:86:4a:a3:de:84:ef:56:
         ae:bf:63:92:f6:da:86:eb:51:2f:de:34:39:a7:20:04:21:29:
         8e:9a:ea:b8:5f:be:21:89:32:a4:6c:7d:36:d2:14:04:04:2b:
         93:79:5a:56:97:5b:30:ad:23:43:5b:cd:77:a1:05:5f:cd:05:
         82:02:ba:4d:6c:23:5c:8d:c8:2b:ed:ce:44:f3:0c:07:88:a7:
         00:8c:a3:2a:13:45:1a:be:a0:ae:1f:1c:ed:3a:e3:a5:46:18:
         d6:9e:70:a9:84:c0:14:30:66:11:58:91:47:f2:a9:74:f5:da:
         87:10:4e:88:f2:3f:f7:7f:f7:d3:86:0b:c6:be:65:a0:f9:01:
         71:06:95:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----