Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530393a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530393a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          6v7YHQEBoQVfuwMJAl/sJlUgUSOmCeYgNy1gAXazKI0=
Subject key identifier:   24:52:2F:EE:A8:AA:CD:C8:D9:2C:42:1A:C6:35:F9:78:F3:B3:FC:F5
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       6B4FA8931D3C364F7137238EBB3552F4838A6CC9
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530393a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Fri 07 Mar 2025 23:45:15 +0000
ROA not before:           Fri 07 Mar 2025 23:40:15 +0000
ROA not after:            Fri 06 Mar 2026 23:45:15 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee09::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4f:a8:93:1d:3c:36:4f:71:37:23:8e:bb:35:52:f4:83:8a:6c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar  7 23:40:15 2025 GMT
            Not After : Mar  6 23:45:15 2026 GMT
        Subject: CN=24522FEEA8AACDC8D92C421AC635F978F3B3FCF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:43:9d:15:f7:7f:86:00:bd:88:4c:82:22:
                    c6:cc:6d:4d:01:69:09:75:81:82:32:65:c2:1a:69:
                    a3:7c:b2:46:9a:76:0e:0c:60:e4:23:fd:94:f3:9f:
                    c9:b7:88:d2:78:8a:b8:7a:3d:75:a6:d9:f2:f8:9b:
                    6f:51:53:5b:01:aa:30:3b:2c:07:f3:f5:42:1d:71:
                    33:eb:af:dc:80:be:f6:7b:7e:a9:de:48:6a:ad:c3:
                    51:fd:3e:4e:44:9b:31:8b:25:d8:d7:30:57:f9:69:
                    97:92:cb:10:03:7f:87:0e:10:b2:51:18:97:8d:18:
                    68:69:33:eb:02:1d:69:17:2b:f3:8d:9e:61:fa:db:
                    c5:db:5b:9e:45:ed:d7:49:2e:a8:0c:a4:b4:e5:99:
                    57:63:2d:2e:76:30:a0:31:21:9f:3d:40:78:2d:85:
                    31:7b:25:c4:ac:8a:2e:18:8f:f2:a7:ef:e9:d2:68:
                    f4:45:9b:96:2e:6e:a6:aa:d1:b8:01:72:7d:86:e5:
                    da:fc:31:3b:0a:47:9c:78:1f:e7:e0:88:ef:fd:74:
                    f1:41:4b:e8:b9:75:ab:04:b0:a8:98:d4:2c:8a:09:
                    53:3c:32:fc:1e:e5:4e:11:81:48:a2:97:ec:fc:b8:
                    25:8a:28:bf:2b:c0:41:f7:67:b5:f4:11:1b:73:1c:
                    89:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:52:2F:EE:A8:AA:CD:C8:D9:2C:42:1A:C6:35:F9:78:F3:B3:FC:F5
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530393a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee09::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:6b:42:07:40:f1:f5:b8:37:ad:4b:32:4a:be:ef:d7:ca:3f:
         3a:32:80:88:c0:3d:5e:01:57:4d:49:8d:84:d1:85:e6:ab:9b:
         f9:53:aa:d4:72:91:03:63:34:82:73:b7:c3:59:05:5a:90:77:
         a0:21:d6:6a:70:93:7b:b9:c5:e6:68:09:e4:8e:e9:ee:4d:ac:
         12:a0:11:c3:25:72:68:c1:00:0e:7d:6e:04:10:5b:5b:38:51:
         7f:62:cb:a0:af:34:49:42:b2:b3:35:d9:c3:db:37:fb:3f:6a:
         fc:cd:7f:68:45:3b:3e:a6:40:d2:9a:67:b2:40:d5:c8:ce:4d:
         11:71:cb:fd:d7:b6:21:b1:65:97:5e:0e:18:99:77:0f:cf:e9:
         46:38:90:9f:9f:de:a5:8c:4f:a9:cd:69:4d:cf:26:b7:b6:8f:
         95:88:44:ae:03:24:27:88:b5:b8:92:6e:fc:0a:4a:1a:05:0b:
         73:3a:19:15:4f:e1:c7:fc:83:8a:8d:36:14:01:bc:f0:69:46:
         ae:51:a6:3e:c3:b0:29:96:ca:f4:64:eb:59:e1:f5:56:84:a3:
         bf:d9:ac:2a:de:62:26:78:e3:dd:1e:64:45:60:19:d5:1d:21:
         59:fb:87:55:6b:75:18:4e:95:6a:4f:a4:ba:e9:6b:85:ef:8f:
         05:7c:df:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----