Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431303a3a2f34362d3438203d3e20323135393536.roa
File:                     326131343a373538303a656431303a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          excrlDWSPl4YwX4GrZXWpcrM9BUCiV9b1rbaeAdMSnQ=
Subject key identifier:   78:AD:5A:29:8A:E0:8F:21:EB:38:49:21:B7:3D:30:B2:E4:A7:D9:50
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       78AC2F705E4955FB024122343278301C5B90A11A
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431303a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sun 02 Mar 2025 23:54:41 +0000
ROA not before:           Sun 02 Mar 2025 23:49:41 +0000
ROA not after:            Sun 01 Mar 2026 23:54:41 +0000
asID:                     215956
IP address blocks:        2a14:7580:ed10::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ac:2f:70:5e:49:55:fb:02:41:22:34:32:78:30:1c:5b:90:a1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar  2 23:49:41 2025 GMT
            Not After : Mar  1 23:54:41 2026 GMT
        Subject: CN=78AD5A298AE08F21EB384921B73D30B2E4A7D950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6e:70:e7:0c:93:6a:6b:46:54:b0:66:a5:70:
                    5f:17:fb:90:ef:21:20:46:e8:c4:b9:b8:01:a0:99:
                    3a:07:bb:97:47:f9:5c:23:f8:c1:e6:99:18:1d:ee:
                    60:f3:03:32:a7:65:3d:e8:3d:7f:a5:5f:c8:05:15:
                    1a:81:db:22:01:cd:e3:c0:6c:64:a1:ff:d7:bf:72:
                    f6:64:0b:15:20:c5:5e:ee:4a:2a:21:37:7b:1a:27:
                    f2:91:93:eb:04:07:ab:7a:56:e1:f3:3b:3e:27:a6:
                    84:f9:50:68:72:49:7d:79:10:59:54:1a:4e:52:da:
                    3d:09:e0:0b:99:2c:ec:26:76:92:64:de:ba:b9:73:
                    18:4d:69:7b:83:6b:d9:53:12:3d:80:45:ad:5f:83:
                    a8:84:89:fa:7d:3f:5a:e4:fc:34:80:5f:b5:fb:7e:
                    a5:ee:96:c1:90:0b:69:ce:4e:6b:33:3d:5d:e6:fd:
                    01:33:45:ec:f9:86:ce:5b:00:ef:6c:d2:d7:db:45:
                    9a:6d:06:70:1d:63:22:50:2b:91:90:eb:26:f8:15:
                    7e:6c:95:4e:28:0b:3e:29:e1:56:97:f1:51:02:8d:
                    3b:b3:12:89:e7:3e:66:92:ae:06:f7:54:b4:e1:f9:
                    75:39:62:45:ae:f4:50:4f:ff:31:ba:a4:5a:5c:00:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AD:5A:29:8A:E0:8F:21:EB:38:49:21:B7:3D:30:B2:E4:A7:D9:50
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431303a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ed10::/46

    Signature Algorithm: sha256WithRSAEncryption
         23:ae:a1:2c:55:5c:f3:31:7f:38:f4:0c:0e:66:70:88:41:14:
         a6:82:8b:aa:cd:63:94:dc:b5:6c:73:54:3f:66:37:eb:08:ac:
         92:da:90:4c:8e:28:38:2e:bd:49:15:f8:5d:fd:a4:3e:f2:94:
         a6:a4:6f:cf:86:83:fe:71:49:66:bf:d4:01:cf:5b:a5:4b:e3:
         fc:bd:03:17:69:d5:dd:06:cf:5b:2e:3a:19:85:77:aa:57:5e:
         3e:05:65:76:2e:14:24:1c:c6:43:6e:1d:6b:f3:3a:1f:c9:29:
         83:9e:f6:26:48:47:3f:e1:c7:f4:b5:d1:f4:3a:a8:64:c8:c9:
         73:9e:e1:b7:60:96:78:7a:12:ca:10:9b:bb:d9:eb:b8:21:a1:
         18:0e:c0:40:f9:a6:54:7c:ed:dc:45:d8:0c:48:5f:3a:e6:6b:
         ea:59:ee:43:42:e4:35:ab:c9:a3:71:a8:0d:9d:a2:74:e9:bd:
         43:89:ad:a1:a8:dc:7a:37:16:5b:1a:97:4b:11:0c:34:99:d4:
         d2:36:34:05:34:98:e6:7b:88:26:55:7c:bd:f9:3b:c0:af:93:
         a6:b8:51:89:97:10:59:b8:a4:85:2e:e7:ab:2d:a9:ef:b1:92:
         31:4f:28:39:a1:42:2e:2f:46:f9:d2:52:52:c9:4c:da:1c:87:
         ad:e6:71:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----