Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530623a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530623a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          Q/t+wpX8bpFQ1sbt2j5mtLHaFTWrRLaj576adhqyqTA=
Subject key identifier:   61:55:88:14:78:F6:9B:32:33:A9:9A:7E:13:BA:77:2E:B2:09:36:FD
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       50B092F788F8DE95DD3FF8E8A19B211BA2381206
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530623a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Fri 07 Mar 2025 23:45:49 +0000
ROA not before:           Fri 07 Mar 2025 23:40:49 +0000
ROA not after:            Fri 06 Mar 2026 23:45:49 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee0b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b0:92:f7:88:f8:de:95:dd:3f:f8:e8:a1:9b:21:1b:a2:38:12:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar  7 23:40:49 2025 GMT
            Not After : Mar  6 23:45:49 2026 GMT
        Subject: CN=6155881478F69B3233A99A7E13BA772EB20936FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:27:18:e1:63:57:bf:5c:67:48:73:35:92:
                    18:2b:53:ba:31:e1:23:ae:8c:23:11:0b:8d:7f:ce:
                    86:be:42:b4:17:cb:cd:fb:d2:37:b0:5d:77:5e:f8:
                    92:43:39:9f:0c:8f:80:6b:a0:37:ad:60:37:78:c8:
                    9d:a2:de:65:ab:0e:db:c9:00:8b:eb:29:f8:3b:27:
                    3b:8a:fc:4e:9a:f7:88:c5:bc:27:b5:b2:95:13:e4:
                    ad:08:ef:c1:0d:b7:a0:2f:1e:52:7c:33:0b:db:50:
                    a0:5e:31:4f:20:d4:75:0d:7c:9e:41:85:95:ec:70:
                    ef:3a:38:21:1a:d9:69:16:83:f9:9e:a5:d4:04:53:
                    5f:dd:3c:b1:0d:92:37:51:d5:d6:ea:19:19:8a:c8:
                    1e:8b:e8:dc:40:51:60:e2:2c:c1:3e:f4:19:ec:5c:
                    02:e3:1c:49:2c:1a:60:7e:ef:9e:d0:c8:68:d3:94:
                    44:e9:27:98:7c:c8:6d:3d:cc:89:c8:81:d7:2d:fb:
                    ca:39:c9:95:11:ca:2b:76:a3:58:45:20:cc:80:17:
                    5a:cb:2c:13:b3:88:7f:6e:f2:b5:3d:1e:51:d2:c0:
                    fa:42:b7:5d:c9:44:54:d8:49:fc:53:17:49:85:5e:
                    dd:01:67:30:31:a9:18:ae:b5:70:1c:2e:7e:55:e1:
                    9a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:55:88:14:78:F6:9B:32:33:A9:9A:7E:13:BA:77:2E:B2:09:36:FD
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530623a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:b3:49:b8:19:7b:74:a8:2b:c2:43:dc:a2:e5:54:64:b8:86:
         1e:90:db:fb:7a:15:72:30:d4:66:15:ee:af:3d:ee:e5:86:cd:
         d6:10:fc:4d:6a:13:a7:c2:4f:5e:90:93:1e:fb:4c:16:86:76:
         e0:d1:51:68:42:95:a9:3b:05:d1:44:d4:4c:a0:94:9c:5c:11:
         3f:e4:e5:2d:f7:b2:39:fd:22:78:f3:84:7a:08:a4:7e:6a:90:
         f7:e5:87:39:7d:6c:12:e2:76:69:e4:e1:dc:45:1c:84:0a:26:
         63:f4:d5:ac:6e:f8:f2:18:6d:b2:e5:72:19:db:6d:fa:dd:82:
         bd:40:06:ad:2a:b7:51:7f:ab:9e:cb:c5:d2:ea:4e:57:46:13:
         bc:66:d1:07:4d:31:e5:e2:e1:5a:6d:35:8f:e3:a8:77:f4:6d:
         f0:53:9f:7b:fe:c0:6d:71:6e:e3:b4:59:f0:86:7c:cf:04:4d:
         f6:25:1c:6f:58:e9:7a:5d:70:cf:86:77:10:17:ab:06:35:86:
         8f:63:17:bb:ef:7c:45:90:b1:7e:6e:8a:da:3a:c5:4d:e2:9c:
         45:c3:e5:07:b2:1c:6d:55:e0:d4:ce:a6:11:5e:5f:52:67:ea:
         f1:df:27:8e:d4:57:9a:4d:ca:51:36:83:f0:d6:3b:93:42:c6:
         5e:74:db:a2
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUULCS94j43pXdP/jooZshG6I4EgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNTAzMDcyMzQwNDlaFw0yNjAzMDYyMzQ1NDlaMDMxMTAvBgNV
BAMTKDYxNTU4ODE0NzhGNjlCMzIzM0E5OUE3RTEzQkE3NzJFQjIwOTM2RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt5CcY4WNXv1xnSHM1khgrU7ox
4SOujCMRC41/zoa+QrQXy8370jewXXde+JJDOZ8Mj4BroDetYDd4yJ2i3mWrDtvJ
AIvrKfg7JzuK/E6a94jFvCe1spUT5K0I78ENt6AvHlJ8MwvbUKBeMU8g1HUNfJ5B
hZXscO86OCEa2WkWg/mepdQEU1/dPLENkjdR1dbqGRmKyB6L6NxAUWDiLME+9Bns
XALjHEksGmB+757QyGjTlETpJ5h8yG09zInIgdct+8o5yZURyit2o1hFIMyAF1rL
LBOziH9u8rU9HlHSwPpCt13JRFTYSfxTF0mFXt0BZzAxqRiutXAcLn5V4ZrJAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUYVWIFHj2mzIzqZp+E7p3LrIJNv0wHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjUzMDYyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gO4LMA0GCSqGSIb3DQEBCwUAA4IBAQBL
s0m4GXt0qCvCQ9yi5VRkuIYekNv7ehVyMNRmFe6vPe7lhs3WEPxNahOnwk9ekJMe
+0wWhnbg0VFoQpWpOwXRRNRMoJScXBE/5OUt97I5/SJ484R6CKR+apD35Yc5fWwS
4nZp5OHcRRyECiZj9NWsbvjyGG2y5XIZ22363YK9QAatKrdRf6uey8XS6k5XRhO8
ZtEHTTHl4uFabTWP46h39G3wU597/sBtcW7jtFnwhnzPBE32JRxvWOl6XXDPhncQ
F6sGNYaPYxe773xFkLF+boraOsVN4pxFw+UHshxtVeDUzqYRXl9SZ+rx3yeO1Fea
TcpRNoPw1juTQsZedNui
-----END CERTIFICATE-----