Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656466373a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656466373a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          pHloe8YosfoBBrVMhHLgUb2VMCQe36k5f7JvBPjf+4g=
Subject key identifier:   CB:49:D3:4F:6C:48:60:05:91:15:5A:3E:BA:21:C4:87:3A:02:F8:E3
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       4BE2802CAB8498D6DE82AB69D5B0E0E4A5B795A4
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656466373a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Thu 13 Feb 2025 22:27:13 +0000
ROA not before:           Thu 13 Feb 2025 22:22:13 +0000
ROA not after:            Thu 12 Feb 2026 22:27:13 +0000
asID:                     215956
IP address blocks:        2a14:7580:edf7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e2:80:2c:ab:84:98:d6:de:82:ab:69:d5:b0:e0:e4:a5:b7:95:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Feb 13 22:22:13 2025 GMT
            Not After : Feb 12 22:27:13 2026 GMT
        Subject: CN=CB49D34F6C48600591155A3EBA21C4873A02F8E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:16:bd:e1:84:da:2a:f7:85:c5:f6:c2:00:
                    3e:89:fd:ec:d6:b3:57:1b:ab:3a:8f:c3:7e:fb:50:
                    57:40:1a:ef:35:7f:98:6c:bd:6a:df:3a:9e:e6:b6:
                    9b:17:e7:1f:c6:80:2e:ac:f6:53:2f:6f:e0:0d:64:
                    2a:35:aa:0f:1d:c6:74:6e:bb:30:0b:9d:2f:bd:88:
                    80:03:e1:90:c3:7c:de:9f:c2:50:d8:29:df:d3:f0:
                    3a:66:aa:1b:ae:c9:e3:ae:a0:ab:39:27:19:8f:be:
                    52:e4:08:eb:6f:9a:16:a6:09:f8:64:40:d1:61:20:
                    05:47:65:cf:f3:81:1f:4b:5d:2c:13:23:e1:5c:fb:
                    12:eb:e3:63:eb:54:00:13:4b:e9:ae:89:4e:22:2b:
                    3f:88:bc:7d:9b:83:4f:fa:3b:0d:d7:e9:f6:c8:c9:
                    08:7f:ca:36:69:0d:59:3b:d5:19:84:11:97:15:38:
                    fb:64:dc:05:4e:4b:30:1a:a2:5f:54:5d:93:04:92:
                    cf:cb:06:c0:79:1d:f4:de:b0:61:ad:15:8e:7c:7c:
                    8e:b8:e6:d1:d0:be:6a:19:37:a7:05:b0:99:72:01:
                    eb:43:9d:ac:29:66:26:3d:4d:65:26:06:d9:3f:fc:
                    60:4a:06:c7:36:68:a4:8e:3d:09:72:92:7a:6d:83:
                    0f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:49:D3:4F:6C:48:60:05:91:15:5A:3E:BA:21:C4:87:3A:02:F8:E3
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656466373a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:edf7::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:11:ba:c6:00:4b:e7:85:4a:ad:0a:d5:6b:1f:66:31:b5:df:
         80:5e:1d:7d:31:e0:a3:3c:9d:6e:81:28:64:c3:b4:c4:92:17:
         62:e2:56:52:76:a9:74:87:3d:a4:d4:ba:ae:7f:2f:50:5a:0b:
         b1:82:9c:1e:02:c4:66:31:e1:ce:bf:1a:a3:ba:ed:6d:ea:74:
         6f:0d:37:ca:86:f6:2e:b1:16:08:5c:8f:cc:d8:9c:3f:4a:af:
         ea:61:79:6b:de:95:cf:fc:80:a5:05:80:b9:e3:0c:72:74:6f:
         b5:70:6e:be:cf:a5:39:5e:7d:09:7f:6e:29:64:8b:17:00:76:
         13:d2:c1:6c:b8:52:fd:64:f8:2b:fc:53:8d:27:ce:58:82:ae:
         85:7c:d7:b5:9b:59:c5:99:1e:dc:2b:33:5e:9e:a8:42:3d:ea:
         c9:02:3e:ab:e9:10:2a:c7:39:58:3b:03:24:d5:0a:50:ee:d1:
         e3:93:e0:f6:48:04:ec:29:6f:4e:d0:bd:c6:c1:d7:8e:af:7c:
         1a:da:02:10:e3:74:64:0e:ee:1a:8b:f7:a4:59:2f:4c:27:56:
         9c:e7:7e:eb:39:3a:ea:7b:90:be:ce:b0:d3:60:53:f8:ff:7a:
         1f:cf:e9:36:06:61:18:ab:6d:3a:90:43:aa:20:3f:5a:a2:dc:
         09:5d:e4:19
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUS+KALKuEmNbegqtp1bDg5KW3laQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNTAyMTMyMjIyMTNaFw0yNjAyMTIyMjI3MTNaMDMxMTAvBgNV
BAMTKENCNDlEMzRGNkM0ODYwMDU5MTE1NUEzRUJBMjFDNDg3M0EwMkY4RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15ha94YTaKveFxfbCAD6J/ezW
s1cbqzqPw377UFdAGu81f5hsvWrfOp7mtpsX5x/GgC6s9lMvb+ANZCo1qg8dxnRu
uzALnS+9iIAD4ZDDfN6fwlDYKd/T8DpmqhuuyeOuoKs5JxmPvlLkCOtvmhamCfhk
QNFhIAVHZc/zgR9LXSwTI+Fc+xLr42PrVAATS+muiU4iKz+IvH2bg0/6Ow3X6fbI
yQh/yjZpDVk71RmEEZcVOPtk3AVOSzAaol9UXZMEks/LBsB5HfTesGGtFY58fI64
5tHQvmoZN6cFsJlyAetDnawpZiY9TWUmBtk//GBKBsc2aKSOPQlyknptgw+vAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUy0nTT2xIYAWRFVo+uiHEhzoC+OMwHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjQ2NjM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gO33MA0GCSqGSIb3DQEBCwUAA4IBAQCT
EbrGAEvnhUqtCtVrH2Yxtd+AXh19MeCjPJ1ugShkw7TEkhdi4lZSdql0hz2k1Lqu
fy9QWguxgpweAsRmMeHOvxqjuu1t6nRvDTfKhvYusRYIXI/M2Jw/Sq/qYXlr3pXP
/IClBYC54wxydG+1cG6+z6U5Xn0Jf24pZIsXAHYT0sFsuFL9ZPgr/FONJ85Ygq6F
fNe1m1nFmR7cKzNenqhCPerJAj6r6RAqxzlYOwMk1QpQ7tHjk+D2SATsKW9O0L3G
wdeOr3wa2gIQ43RkDu4ai/ekWS9MJ1ac537rOTrqe5C+zrDTYFP4/3ofz+k2BmEY
q206kEOqID9aotwJXeQZ
-----END CERTIFICATE-----