Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530663a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530663a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          xQQdjDkSH738D1uz/GkR+yuqVH7Jd7OCJyN7cr6AbfI=
Subject key identifier:   50:11:80:90:23:85:EA:56:3C:DA:9D:79:13:93:19:EB:17:94:75:42
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       43EE06616C7B4DC7BC5DFECB4A0F7A5303AE81FE
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530663a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Fri 07 Mar 2025 23:47:06 +0000
ROA not before:           Fri 07 Mar 2025 23:42:06 +0000
ROA not after:            Fri 06 Mar 2026 23:47:06 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee0f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ee:06:61:6c:7b:4d:c7:bc:5d:fe:cb:4a:0f:7a:53:03:ae:81:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar  7 23:42:06 2025 GMT
            Not After : Mar  6 23:47:06 2026 GMT
        Subject: CN=501180902385EA563CDA9D79139319EB17947542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:35:61:36:1b:37:17:b4:c2:f4:2d:9c:32:f1:
                    07:de:e9:28:2c:6e:6e:1c:e7:d8:91:33:f4:33:55:
                    67:da:75:9d:b2:81:cc:ea:ce:4e:77:7d:b1:d1:32:
                    1f:e4:a1:ca:cf:2b:ec:0b:c8:e5:fc:5e:81:98:3c:
                    34:47:fc:58:3e:aa:67:a8:84:e0:90:78:f2:6d:dd:
                    c4:fc:5c:5a:26:5e:88:fe:6d:17:a9:62:ad:bd:17:
                    de:27:fa:b4:4a:21:8d:35:94:33:10:c2:bb:e2:45:
                    c4:3f:61:2a:9d:b4:fa:db:96:7e:4b:9b:7a:08:54:
                    ca:f5:fe:aa:2b:ec:d0:bc:a2:b9:5c:6a:e2:67:f4:
                    cd:98:f6:95:d5:e8:44:4d:8e:e3:36:97:a8:e0:99:
                    d6:20:ed:da:dd:67:f8:10:70:a3:39:72:c8:b5:cd:
                    f8:05:90:c4:83:46:c4:c3:44:b1:74:96:49:b3:64:
                    03:2e:f5:56:0f:d2:d3:00:d3:81:3c:55:0d:f7:60:
                    2c:19:1d:6c:bf:65:ae:e5:77:f2:14:44:72:ef:65:
                    2b:f3:a3:38:fb:7e:c9:d5:73:68:15:34:19:12:03:
                    9e:66:ba:a3:72:45:ea:f6:b4:a7:92:20:a5:c8:98:
                    37:f3:04:82:e7:53:a0:ca:04:35:44:9f:94:ea:22:
                    dd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:11:80:90:23:85:EA:56:3C:DA:9D:79:13:93:19:EB:17:94:75:42
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530663a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee0f::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:6a:66:83:05:18:ae:36:6e:23:c1:96:1d:bf:c6:d4:ea:ab:
         a0:b3:10:77:9c:db:3e:4d:b8:fd:4e:e6:c8:e7:7e:05:c6:c2:
         d6:83:c9:bb:34:07:21:f6:c9:b7:72:51:dc:1e:41:64:dd:53:
         6a:24:23:63:34:31:48:97:5e:fb:b2:8c:05:10:8a:ad:1f:1f:
         73:f1:a9:42:b2:de:8b:7f:cb:d2:1d:8a:d4:fb:c9:07:dd:df:
         62:7b:d7:a7:3c:1a:13:7f:7a:36:ca:61:aa:12:39:4e:44:c5:
         c5:37:16:ac:56:98:15:4f:e3:85:20:db:eb:04:e3:d9:cd:f9:
         b9:02:99:67:92:22:ed:4e:04:c5:55:d4:c0:4c:b9:cc:e9:84:
         c1:1e:2a:f0:a4:7d:88:37:cc:c9:ab:8b:33:1f:63:e2:00:1d:
         a6:9a:20:4b:fe:50:18:2b:7d:f7:9e:84:22:fb:55:1e:42:3c:
         1e:48:a4:00:d8:74:13:8a:e2:15:38:c1:8b:2e:76:a1:49:49:
         1f:02:ff:d4:55:29:3c:01:f2:4d:e0:28:bb:aa:ef:5d:11:e0:
         46:36:8f:e2:ed:2b:73:5a:c9:e4:63:d6:2f:e8:6c:20:8c:a2:
         7c:3b:6a:cb:ba:c6:67:7c:f5:71:f6:4d:23:0b:39:ce:2f:18:
         2d:92:d2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----