Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a626230313a3a2f34382d3438203d3e20323135393536.roa
File:                     326130613a363034343a626230313a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          RFiiU4kvMGN6UIoCxMQPeZUXhnHyduQ+F6WK2DIWkls=
Subject key identifier:   73:E6:C3:40:49:7A:B0:9D:15:FC:F7:F7:31:CB:74:65:0D:31:18:9E
Certificate issuer:       /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial:       4E8BF0E61CB0E060E7BB1336FF049F45E7A00B1A
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a626230313a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Wed 12 Feb 2025 06:31:35 +0000
ROA not before:           Wed 12 Feb 2025 06:26:35 +0000
ROA not after:            Wed 11 Feb 2026 06:31:35 +0000
asID:                     215956
IP address blocks:        2a0a:6044:bb01::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8b:f0:e6:1c:b0:e0:60:e7:bb:13:36:ff:04:9f:45:e7:a0:0b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
        Validity
            Not Before: Feb 12 06:26:35 2025 GMT
            Not After : Feb 11 06:31:35 2026 GMT
        Subject: CN=73E6C340497AB09D15FCF7F731CB74650D31189E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:ca:ff:42:57:d3:29:31:ac:12:28:34:b2:
                    87:77:ae:76:e2:04:07:59:19:e3:7f:3d:4e:a9:53:
                    d1:3b:24:c7:6d:49:27:3f:2e:0b:f6:42:dc:cd:7e:
                    39:31:60:ef:cf:6f:a1:eb:18:0d:e9:9a:6b:45:94:
                    36:b1:84:62:56:d8:db:b0:18:f2:c3:ae:89:e9:41:
                    85:b8:4a:79:f5:69:fe:ba:bc:6b:bb:49:79:21:55:
                    5a:93:a1:88:4e:7b:e4:53:e3:a7:c8:fd:64:20:ac:
                    9d:55:e1:e8:a1:1b:d6:e9:c7:08:38:9d:1b:ca:d6:
                    57:03:d8:aa:42:fd:89:9e:da:32:19:86:1a:c4:fb:
                    fa:08:f1:cd:90:a7:96:d4:af:18:60:4b:56:07:80:
                    04:80:d7:9f:8d:d5:7a:0e:dd:2b:9e:16:cf:2a:93:
                    37:cf:cb:d9:8b:c7:09:2d:79:94:99:2c:89:2d:24:
                    99:75:90:da:5b:cc:b8:b6:18:a6:71:88:af:df:ce:
                    c4:d0:d6:1e:57:13:bb:f9:33:eb:cd:8a:24:eb:90:
                    67:3e:b1:86:08:dd:c4:fb:38:6b:5d:74:93:f6:32:
                    cc:83:f7:10:30:1b:ab:3b:05:a0:16:7d:b7:80:43:
                    ae:55:3b:a3:bb:cb:bc:52:de:29:87:61:a5:f0:d7:
                    3a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E6:C3:40:49:7A:B0:9D:15:FC:F7:F7:31:CB:74:65:0D:31:18:9E
            X509v3 Authority Key Identifier:
                keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a626230313a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bb01::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:eb:01:00:8d:5a:82:c1:e5:07:76:a5:ad:e3:50:e2:ec:f1:
         64:a5:c7:a2:17:d1:0d:78:f0:f9:20:37:8d:d1:f4:19:6b:7b:
         b9:30:db:ec:79:fa:cf:9c:38:c5:1d:e3:5b:5f:55:54:eb:79:
         1b:d9:e4:12:62:2e:85:11:7f:3d:3d:19:c5:3f:2b:29:c2:1e:
         61:cf:0a:eb:6d:61:8f:c0:b4:4e:b4:2b:84:da:c8:eb:df:98:
         dd:d6:fd:a7:ae:bc:63:b1:ce:6e:85:6a:e9:90:46:4b:83:46:
         cc:cf:7b:c9:6a:a7:72:ed:4b:4c:60:93:89:86:7b:fe:27:2a:
         be:6f:f5:32:4f:6e:80:4e:5b:b4:a7:3a:73:02:e8:25:3b:67:
         6a:b5:e4:be:3c:55:10:93:ba:3b:f6:05:d9:07:0f:e4:d0:eb:
         e8:92:52:9b:17:2f:8b:14:cf:c4:d3:9f:aa:b0:00:94:cc:23:
         5a:77:15:e3:32:4a:e4:a3:89:be:2f:cb:11:7a:41:b2:5f:9d:
         c4:46:d6:3c:2a:dc:03:31:fd:f4:72:75:9d:08:5c:05:d4:3f:
         c2:35:06:dd:5a:b2:23:7a:39:38:a9:78:b3:6a:07:4c:08:07:
         7c:0a:52:5b:13:a6:c9:02:b1:a9:32:f0:9b:84:18:92:89:fc:
         08:ff:bc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----