Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430383a3a2f34362d3438203d3e20323135393536.roa
File:                     326131343a373538303a656430383a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          I7/hoAr63LhpXqLplSqJknUsgybSvD4+7U40EM7iCdw=
Subject key identifier:   A1:4F:37:41:6E:39:D4:01:E0:26:26:DB:EC:1F:9C:9A:F2:B2:70:46
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       6FCFBE8FA68C1B298FAA3C55B0C7F8711BDA9439
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430383a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Thu 13 Feb 2025 23:36:06 +0000
ROA not before:           Thu 13 Feb 2025 23:31:06 +0000
ROA not after:            Thu 12 Feb 2026 23:36:06 +0000
asID:                     215956
IP address blocks:        2a14:7580:ed08::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cf:be:8f:a6:8c:1b:29:8f:aa:3c:55:b0:c7:f8:71:1b:da:94:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Feb 13 23:31:06 2025 GMT
            Not After : Feb 12 23:36:06 2026 GMT
        Subject: CN=A14F37416E39D401E02626DBEC1F9C9AF2B27046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1a:0b:6e:37:28:32:dc:1b:b7:f9:39:eb:1f:
                    fa:ab:2f:27:b6:53:a7:11:e2:11:b9:07:76:51:96:
                    83:60:04:88:8d:8d:82:54:1e:af:51:a7:c5:00:b8:
                    3a:6e:71:11:ad:68:d1:e6:17:1f:b1:2d:9c:f5:7d:
                    2f:26:62:59:79:3a:fa:16:26:10:74:01:78:3e:cd:
                    11:0e:50:8c:de:9b:56:df:ec:f9:9c:5b:63:a4:dd:
                    55:51:21:29:8c:2c:c4:fb:d8:8c:4d:d6:e3:06:89:
                    83:84:b6:7f:84:2b:3b:55:f2:8b:a1:4f:c3:ed:3c:
                    81:f9:d5:53:8c:8b:92:73:54:21:8b:64:c0:ae:36:
                    43:aa:36:f7:dd:08:11:45:c8:67:20:ca:46:7f:b4:
                    f1:ca:c8:b5:be:b1:85:d1:9a:e3:22:1b:af:6f:1e:
                    a2:1d:b1:94:40:f4:f3:a3:b8:b3:80:b2:f1:29:3d:
                    a1:ed:17:0b:74:2e:57:8f:d3:1a:5a:54:5e:ba:75:
                    ea:3e:27:9e:e5:ff:fa:61:d3:d4:b6:71:e2:e9:3d:
                    ef:df:b9:19:1c:ea:58:f5:57:d8:be:53:6d:a3:e3:
                    73:d3:a2:07:13:28:79:c4:40:2b:9e:c7:45:8c:12:
                    73:fd:b1:ad:36:63:0c:33:e0:12:ef:9c:a7:8a:15:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4F:37:41:6E:39:D4:01:E0:26:26:DB:EC:1F:9C:9A:F2:B2:70:46
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430383a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ed08::/46

    Signature Algorithm: sha256WithRSAEncryption
         1c:14:86:80:09:f2:6e:cd:38:39:2f:81:f8:63:9b:ec:39:fc:
         3d:a5:b9:38:fa:be:93:ed:a5:c9:b9:e4:72:97:0f:22:24:84:
         b1:85:7a:df:74:09:9c:dd:5e:20:99:d6:8b:2e:b9:7f:3c:94:
         6b:5f:7f:58:ff:4b:fe:77:23:ea:65:09:82:8d:40:c4:bf:25:
         b6:a3:5c:3f:0d:15:36:fa:40:74:66:f1:9d:0d:ae:0b:4c:9b:
         a9:5c:55:e4:f7:14:32:df:48:1f:c0:08:65:98:bf:20:01:68:
         55:5a:8d:be:f9:93:2d:82:98:49:2a:77:de:27:b7:57:79:50:
         59:f0:0f:7c:28:05:bf:f4:dc:38:b5:7c:01:c8:db:40:ed:ed:
         1f:f6:37:d5:eb:8d:a6:ed:a0:09:7f:13:52:0b:16:f1:cc:1f:
         42:54:b2:b7:e6:13:e4:76:c1:03:5c:52:5f:e0:67:49:1f:6d:
         de:c7:d0:4f:d8:00:04:d5:17:c9:59:ef:4b:ca:4f:e2:7f:07:
         bd:53:35:f8:60:a9:46:d5:4d:9b:09:59:af:cd:bb:ec:6f:73:
         c5:83:24:7f:ce:03:6b:90:d0:32:45:6e:45:11:21:d6:dc:1f:
         e9:25:ef:e1:03:f8:ea:de:00:b0:23:11:9f:3c:27:de:94:39:
         69:9e:fe:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----