Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613531633a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613531633a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          KursmqG5XTqGLBeLciazUoQ8MhTNSAoU7LQ4SttRGvs=
Subject key identifier:   40:5E:70:78:57:33:DB:38:F3:58:53:9B:C8:DB:09:D7:8E:23:9E:5E
Certificate issuer:       /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial:       356BD0BD863DDF2DF0BF23026DBED4033DD9F1A8
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613531633a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sat 08 Feb 2025 19:36:00 +0000
ROA not before:           Sat 08 Feb 2025 19:31:00 +0000
ROA not after:            Sat 07 Feb 2026 19:36:00 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a51c::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6b:d0:bd:86:3d:df:2d:f0:bf:23:02:6d:be:d4:03:3d:d9:f1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
        Validity
            Not Before: Feb  8 19:31:00 2025 GMT
            Not After : Feb  7 19:36:00 2026 GMT
        Subject: CN=405E70785733DB38F358539BC8DB09D78E239E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:89:67:81:69:c1:1e:af:e4:33:2b:7b:3f:
                    6a:70:75:36:c2:7d:8e:67:1b:2d:58:f5:e4:5d:41:
                    ae:13:5e:ed:4a:af:bf:7b:89:4c:b3:0b:be:f7:fe:
                    42:a8:f7:ea:a0:99:8c:38:db:51:9c:82:ed:30:d3:
                    1b:31:7b:bb:28:d2:f7:dc:b1:5c:9e:bf:a0:c5:94:
                    f3:c4:67:76:ab:44:5d:92:c1:08:cd:d1:b7:b6:63:
                    73:47:71:58:af:e5:46:70:51:09:35:a3:34:a8:1d:
                    66:dd:0e:50:72:ee:c3:04:75:17:3a:cd:05:d6:bf:
                    48:13:17:25:f7:19:c1:c8:64:ff:ae:b9:30:66:4d:
                    f9:2d:54:e7:24:14:97:36:40:73:7e:65:d1:47:b1:
                    ac:16:7a:1e:c6:0e:56:35:90:5b:1a:04:bb:c9:56:
                    73:ce:4d:e1:45:b3:74:56:b1:d4:d3:f3:ee:30:70:
                    53:29:59:cc:96:9f:08:0a:cf:c8:3f:0c:76:dc:8b:
                    c2:d5:27:b5:e0:8f:32:45:38:bc:13:70:18:93:cc:
                    a5:e5:d8:92:83:76:a5:d9:f6:90:5b:85:b7:c8:5d:
                    25:8e:a3:8c:fc:3a:12:f5:6a:dd:d3:bc:83:65:a7:
                    a3:ec:db:23:9b:05:33:72:88:68:37:28:0f:73:4d:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5E:70:78:57:33:DB:38:F3:58:53:9B:C8:DB:09:D7:8E:23:9E:5E
            X509v3 Authority Key Identifier:
                keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613531633a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a51c::/46

    Signature Algorithm: sha256WithRSAEncryption
         39:48:98:8f:bc:cb:f8:6b:67:cb:3e:b1:55:a4:c8:c6:40:3f:
         4b:8d:25:af:f2:10:ae:16:8a:82:4c:87:de:41:88:d1:b0:3b:
         96:90:fe:09:4f:43:38:34:0a:ef:c6:42:53:3d:07:9e:09:b3:
         43:10:5d:17:ed:20:ce:71:33:60:39:9e:b1:d1:15:59:be:52:
         22:e4:26:16:0b:55:ce:11:b5:f8:d0:61:e4:c6:8c:5e:59:53:
         f2:c9:6a:63:87:9e:4b:b3:c1:ef:e0:95:4d:ad:5c:0d:be:a6:
         25:61:59:60:03:55:d7:6d:f4:50:1b:9e:86:31:49:eb:c6:18:
         57:08:fa:90:0d:ee:05:fa:66:b3:fb:e9:7e:9e:89:88:ab:9c:
         5a:3b:67:b4:dc:63:9b:22:8b:c7:88:23:5b:d7:ee:b6:63:8f:
         5c:4a:8d:e4:f9:17:48:c3:0d:21:65:d6:e6:44:f7:20:ac:de:
         9d:9e:28:41:66:b8:2f:a0:f8:5f:c8:b1:e9:5a:af:d0:83:c5:
         63:4c:3e:77:de:cc:49:36:55:29:13:f7:da:fb:07:91:a7:0b:
         0b:8a:06:31:22:b3:85:5a:b7:a0:06:7f:b7:e0:64:48:4d:16:
         2b:da:ed:88:27:18:62:02:50:6d:75:03:07:26:94:59:09:bb:
         ac:74:17:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----