Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          6GugewgKSNLp+8rRFrQKP7s7/YHd1bibLmWrKXIIhps=
Subject key identifier:   48:EE:6A:0A:B9:D1:92:2C:73:19:38:8B:D1:18:4B:2C:18:71:67:CA
Certificate issuer:       /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial:       5CFCEB14B40F901B6F87E5CF308A4BEE26621FA8
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sat 08 Feb 2025 19:35:57 +0000
ROA not before:           Sat 08 Feb 2025 19:30:57 +0000
ROA not after:            Sat 07 Feb 2026 19:35:57 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a514::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:fc:eb:14:b4:0f:90:1b:6f:87:e5:cf:30:8a:4b:ee:26:62:1f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
        Validity
            Not Before: Feb  8 19:30:57 2025 GMT
            Not After : Feb  7 19:35:57 2026 GMT
        Subject: CN=48EE6A0AB9D1922C7319388BD1184B2C187167CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:39:f7:4e:13:e4:97:f9:bb:fe:f8:23:99:
                    a6:28:02:c5:7d:d3:27:d1:5b:3f:30:d1:e3:bb:33:
                    f2:67:7c:ed:0b:6d:49:a9:33:77:3d:ab:4d:68:bd:
                    9e:1f:aa:72:55:cd:b5:c7:ce:f6:30:fe:2f:d6:b9:
                    29:d9:d8:84:12:4a:a9:aa:0b:b8:cb:3c:d1:a5:fe:
                    3b:f6:e2:15:24:39:e0:4b:0d:a2:51:87:2e:ed:83:
                    68:24:17:1c:8a:de:16:11:9f:d6:c6:33:37:47:8b:
                    b2:22:a5:ff:36:39:6f:a8:c3:a2:c1:03:16:c4:88:
                    33:89:2d:c2:fb:8b:27:c4:ae:57:00:c2:ab:01:dc:
                    81:41:5e:17:bf:c2:fc:76:e9:5c:71:5f:06:87:39:
                    9d:92:21:4f:37:c2:44:c7:de:9a:f6:78:01:0f:1e:
                    a2:c3:26:fd:ec:d0:43:f9:e0:fa:b8:ea:83:f7:44:
                    2e:ac:fb:5e:c1:a8:e9:42:94:56:13:a7:37:7c:17:
                    5d:3f:7a:2a:03:6a:28:f8:8d:e8:f8:e9:c2:ce:07:
                    af:16:26:ad:27:10:54:9c:a2:58:d2:6b:d9:1c:a9:
                    d6:cb:b8:40:05:95:5c:ed:da:46:d0:28:f9:3e:03:
                    63:d6:e3:7f:02:5d:b7:96:1d:8c:06:09:a1:5c:85:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EE:6A:0A:B9:D1:92:2C:73:19:38:8B:D1:18:4B:2C:18:71:67:CA
            X509v3 Authority Key Identifier:
                keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a514::/46

    Signature Algorithm: sha256WithRSAEncryption
         7d:ec:1a:18:70:b3:2b:6b:34:5c:27:5d:2a:b5:ae:b7:64:fd:
         73:ec:8e:f3:65:af:57:19:aa:91:f3:89:b2:4e:25:32:91:2a:
         10:04:c8:10:9e:e7:4b:a2:e7:60:8c:6b:e0:21:35:32:90:30:
         87:37:01:08:5f:b2:98:bb:f1:b8:95:d3:30:7b:3f:69:cd:ee:
         5b:2d:6f:6a:fc:a2:8d:49:8c:c7:a5:a2:f2:06:28:c4:db:c6:
         dc:14:01:92:0e:f6:44:25:27:dc:d1:05:40:81:ef:b0:36:3a:
         ee:1b:1a:ce:8f:4b:11:29:a2:e8:a1:58:eb:4d:5c:07:d1:2a:
         e0:38:8b:da:60:04:82:42:5f:41:a0:d7:15:d9:95:94:0d:b0:
         9a:8a:39:48:f9:3e:5d:88:94:c1:68:61:50:4e:39:ba:bd:fe:
         7f:e5:75:a9:de:37:2b:be:2e:11:a0:78:93:d6:87:f1:d5:5e:
         cd:62:13:3b:6b:91:0a:6d:d4:1c:87:69:f6:cf:c0:4d:5b:34:
         41:09:e2:00:83:a3:85:fe:80:1f:c9:6f:e7:fa:89:01:80:ad:
         11:36:c2:e1:1f:fb:84:28:06:cb:bb:cf:6b:be:3b:6b:14:a6:
         97:ec:06:ca:e3:33:73:22:4b:30:d2:68:c9:5e:aa:ae:cb:d2:
         96:ac:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----