Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613532313a3a2f34382d3438203d3e20323135393536.roa
File:                     326130613a363034343a613532313a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          bW/xrssc+8uACS2tvLO0fdfLIb5BM+ar9CsqxPWiBY4=
Subject key identifier:   55:BF:AB:EB:5F:70:1C:25:50:A4:71:07:4B:CC:1E:D4:C4:F9:99:29
Certificate issuer:       /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial:       0F96AB5E97DDFD836B5D2F6A78B8B68F9A5523A1
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613532313a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sat 08 Feb 2025 19:35:59 +0000
ROA not before:           Sat 08 Feb 2025 19:30:59 +0000
ROA not after:            Sat 07 Feb 2026 19:35:59 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a521::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:96:ab:5e:97:dd:fd:83:6b:5d:2f:6a:78:b8:b6:8f:9a:55:23:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
        Validity
            Not Before: Feb  8 19:30:59 2025 GMT
            Not After : Feb  7 19:35:59 2026 GMT
        Subject: CN=55BFABEB5F701C2550A471074BCC1ED4C4F99929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:ed:a3:6b:3c:b2:40:c9:9e:71:4a:50:c7:
                    5f:98:79:d0:26:14:f9:6c:72:73:17:8e:ff:18:1f:
                    20:05:3e:d4:0c:5e:69:aa:3f:42:7d:02:60:32:28:
                    23:2f:f3:46:fe:8f:2f:85:46:d0:8a:f4:f0:33:03:
                    a1:69:3c:d9:8e:2a:64:ca:13:ec:8e:a8:65:8b:f4:
                    31:fd:cc:9b:04:43:3c:60:22:60:1d:22:c9:2c:6f:
                    49:46:fc:72:07:4c:9c:17:3c:42:f1:d9:8f:9c:ca:
                    45:3f:8d:ec:8b:ee:e0:77:ac:2c:66:53:8a:0a:d4:
                    1b:0c:6c:ae:07:d9:6d:1f:44:fa:a6:55:36:16:a8:
                    21:da:58:db:7e:f4:e1:f5:a3:dc:bc:c8:e2:e3:42:
                    ea:2d:e1:61:c5:b4:d6:a2:64:02:e3:1d:9e:9e:03:
                    51:bb:fc:24:19:d5:15:8a:b1:b3:ea:28:b0:0f:cd:
                    b0:78:54:b5:76:0d:25:34:97:34:9b:11:5c:f0:d3:
                    57:8a:0b:db:ad:3d:2a:b0:b1:e5:50:1a:1c:f7:67:
                    3d:07:24:00:fc:c1:00:a5:31:b2:14:0e:12:3c:73:
                    79:ba:33:2a:68:91:79:e2:8d:56:19:9c:28:65:73:
                    55:87:2d:81:ba:6a:04:ec:8f:61:a5:09:08:a0:9e:
                    4e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BF:AB:EB:5F:70:1C:25:50:A4:71:07:4B:CC:1E:D4:C4:F9:99:29
            X509v3 Authority Key Identifier:
                keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613532313a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a521::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:7e:57:79:cc:fa:2f:4c:bf:c9:32:26:9f:67:31:17:43:d9:
         a4:0e:26:e3:36:f2:9a:c0:9a:a8:0a:c2:53:cf:c5:21:28:98:
         31:4f:65:b8:cc:72:a2:0d:7a:bf:56:12:2a:32:8c:11:87:ae:
         34:1b:7c:e1:6e:3a:7a:59:e4:05:74:1e:85:5d:cb:dd:58:0b:
         31:6f:29:50:93:ae:89:50:23:3a:c4:52:fd:21:1f:40:38:4e:
         85:15:23:56:18:43:d3:e1:45:5e:77:4a:ad:82:8b:73:7c:c0:
         ea:df:4f:57:e4:ed:13:d2:b8:fb:4e:c6:71:6c:39:32:64:8c:
         cb:e0:d2:93:bc:b1:a2:78:bc:03:58:68:1a:e5:ff:e3:18:94:
         f6:ea:4f:81:b3:3d:11:30:b9:6e:54:56:14:ad:66:4b:b9:4d:
         f3:53:45:0a:a7:e8:98:47:38:e8:2d:be:b5:41:82:8c:7e:59:
         22:9a:f3:40:f9:37:2f:88:73:59:07:ff:f6:26:dc:2a:15:f7:
         96:1d:7e:d9:7a:89:3e:c7:53:4b:7b:ba:2d:12:c3:5b:7b:ce:
         cc:f1:0a:0d:20:dd:f1:05:43:78:b1:0d:86:09:94:9f:d7:a5:
         81:06:28:5f:90:13:47:0c:9e:df:44:1b:08:f9:6f:7b:c9:c5:
         da:0e:45:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----