Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566633a3a2f34372d3438203d3e20323134383138.roa
File:                     326131343a373538303a656566633a3a2f34372d3438203d3e20323134383138.roa (raw, json)
Hash identifier:          US56dZR1qg2QIsnKlWMaAYdRfGahXOn5eBs2iKqc1/Q=
Subject key identifier:   FE:1A:85:2B:C8:3F:F5:EB:17:FC:06:24:3A:19:D0:12:A1:62:72:20
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       53EE002B02032BE5007254100D1139432A5A0ECE
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566633a3a2f34372d3438203d3e20323134383138.roa
Signing time:             Thu 13 Feb 2025 18:47:08 +0000
ROA not before:           Thu 13 Feb 2025 18:42:08 +0000
ROA not after:            Thu 12 Feb 2026 18:47:08 +0000
asID:                     214818
IP address blocks:        2a14:7580:eefc::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ee:00:2b:02:03:2b:e5:00:72:54:10:0d:11:39:43:2a:5a:0e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Feb 13 18:42:08 2025 GMT
            Not After : Feb 12 18:47:08 2026 GMT
        Subject: CN=FE1A852BC83FF5EB17FC06243A19D012A1627220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:78:d8:5a:dd:6f:03:d7:3b:b0:74:d4:ce:
                    a3:a2:a7:d5:6d:f2:a1:da:a4:95:d6:03:89:f6:4f:
                    12:59:93:d0:38:9a:31:58:d5:75:2e:ba:06:f5:18:
                    6c:d7:14:d6:2d:4f:65:95:49:5d:ea:4a:93:9f:15:
                    64:33:42:e8:04:20:03:32:a0:77:38:69:2d:90:0b:
                    ff:b9:41:21:62:3e:b4:0c:fc:6f:aa:1d:1b:ab:84:
                    79:ac:16:ba:c6:9e:86:39:6d:01:de:79:af:91:85:
                    4f:39:29:cc:a6:97:a4:66:d9:24:44:52:0b:ac:7d:
                    53:35:e3:ad:03:1d:a8:29:4a:5a:4c:d5:30:81:2d:
                    17:d1:53:6e:9b:32:f2:14:b5:fb:83:e7:c6:d9:54:
                    e0:eb:f5:53:0f:ac:d3:44:33:82:de:c8:90:6a:c5:
                    3e:6e:57:d2:56:19:01:3a:ee:55:46:4e:4a:17:e7:
                    c9:b7:fd:10:34:05:a6:a7:f3:30:d2:35:16:e4:90:
                    04:a8:24:34:24:85:ed:56:fa:86:a2:15:22:8e:ed:
                    b1:5d:12:a9:1e:09:ac:d4:1a:1a:bf:d1:88:e7:bd:
                    91:18:96:6d:0e:ca:ef:9b:ce:26:88:0c:c3:70:5c:
                    db:ab:90:99:b2:34:aa:de:ab:f8:1b:af:4c:11:a1:
                    ad:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1A:85:2B:C8:3F:F5:EB:17:FC:06:24:3A:19:D0:12:A1:62:72:20
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566633a3a2f34372d3438203d3e20323134383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:eefc::/47

    Signature Algorithm: sha256WithRSAEncryption
         50:bc:80:bd:73:2f:41:2e:87:92:72:0c:ab:62:a9:12:83:87:
         a0:e9:3b:99:6c:de:e8:2b:91:73:f8:0f:34:46:16:dd:7f:ac:
         ac:6a:77:fc:f3:2a:80:b2:76:40:4c:64:1c:0c:3e:d5:5f:11:
         6c:3a:76:aa:c8:e7:9e:0b:f6:90:d5:26:dd:8c:37:18:2a:5a:
         21:59:81:c3:1c:d2:68:69:fd:38:f0:ca:04:2f:bb:31:04:c7:
         da:9b:b5:56:85:ac:3d:61:b0:c3:30:ce:0b:5f:e9:95:f0:c4:
         d3:db:aa:1b:71:d0:58:b7:61:fd:fc:b8:63:5b:83:43:44:4e:
         06:f7:2c:4c:fe:7c:32:b9:d7:a3:21:57:a5:0d:bb:c9:30:2f:
         f4:3e:9f:91:07:2f:59:92:09:af:75:53:b1:7e:2a:8f:5d:8e:
         42:91:3b:8a:46:41:e1:17:b3:f3:62:b7:7c:cd:66:fe:cc:67:
         b9:83:50:9f:2e:a1:27:67:3f:f4:af:c7:54:53:88:8a:74:a6:
         c6:61:40:06:af:be:dc:a4:4a:8a:98:5f:87:43:1a:06:5f:50:
         6b:4f:0e:f2:c8:77:1a:eb:98:9c:d9:d2:b5:8a:69:31:07:9f:
         02:d9:7d:7e:89:b5:b1:d0:c9:14:9b:fb:0d:6b:b9:8e:10:d7:
         5c:ed:d5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----