Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566653a3a2f34372d3438203d3e20323134383138.roa
File:                     326131343a373538303a656566653a3a2f34372d3438203d3e20323134383138.roa (raw, json)
Hash identifier:          or3U3p+naZTN1+AtddZ98ojKl4BAXyP/qX22IanYkN0=
Subject key identifier:   D8:DB:61:56:F6:B5:47:78:7D:8B:8B:0B:35:99:AD:CE:3A:4C:E1:83
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       5C7CF369FB2C8420E9921FE0D4B101F366211FAD
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566653a3a2f34372d3438203d3e20323134383138.roa
Signing time:             Thu 13 Feb 2025 18:47:29 +0000
ROA not before:           Thu 13 Feb 2025 18:42:29 +0000
ROA not after:            Thu 12 Feb 2026 18:47:29 +0000
asID:                     214818
IP address blocks:        2a14:7580:eefe::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7c:f3:69:fb:2c:84:20:e9:92:1f:e0:d4:b1:01:f3:66:21:1f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Feb 13 18:42:29 2025 GMT
            Not After : Feb 12 18:47:29 2026 GMT
        Subject: CN=D8DB6156F6B547787D8B8B0B3599ADCE3A4CE183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:74:bc:f1:f0:a4:46:8c:95:97:a9:a4:c9:c4:
                    c6:14:cc:2a:d3:ef:c4:15:43:fa:cd:0d:1f:6b:cf:
                    9f:36:26:d1:85:08:f2:b6:33:a6:03:9a:e9:ea:b7:
                    b5:02:5f:20:1d:2b:0b:ed:39:46:67:9e:c0:92:2b:
                    c1:d4:e0:62:38:fe:ef:cd:9f:64:59:e9:a9:a9:64:
                    14:c8:cd:e8:21:38:19:8a:67:b2:ac:34:f4:cf:99:
                    3f:86:f8:da:3b:db:70:27:a1:74:89:a0:07:38:f8:
                    b3:4a:40:48:fd:25:80:41:6d:4c:c1:30:c1:cb:e0:
                    94:1c:45:e6:77:7b:7f:50:c1:8e:38:2e:05:bd:3f:
                    40:b7:00:14:c5:dd:84:44:f0:30:04:1a:c2:33:71:
                    70:bd:31:b9:b5:3a:a4:c8:10:ad:8f:02:23:30:b0:
                    e4:d5:0c:fd:fe:39:00:df:5c:ee:1f:95:81:8b:e2:
                    04:7c:1f:fa:d1:1d:03:8d:6e:75:c1:2a:aa:95:88:
                    9b:1e:20:20:62:e9:e9:7c:35:bc:f8:07:39:61:32:
                    55:f0:35:a7:ee:fb:af:b8:3b:11:2b:d1:6a:47:11:
                    7d:f1:ef:c8:82:f3:2f:65:24:b3:f0:2e:0b:50:e2:
                    66:c4:18:7a:cf:65:91:95:80:d3:7b:15:e3:8a:af:
                    82:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DB:61:56:F6:B5:47:78:7D:8B:8B:0B:35:99:AD:CE:3A:4C:E1:83
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566653a3a2f34372d3438203d3e20323134383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:eefe::/47

    Signature Algorithm: sha256WithRSAEncryption
         ae:1f:b0:ed:43:89:7d:65:0e:26:3e:34:e9:41:7b:bd:27:0a:
         75:5e:72:c0:95:90:17:9f:c0:77:08:cb:6f:43:f3:b6:91:96:
         bf:02:ed:5c:11:ff:64:a8:0f:3f:9d:1c:89:f5:4d:1a:96:89:
         91:0c:e7:a5:bb:a1:ec:17:2b:36:1c:17:4a:60:10:06:64:df:
         24:d0:1d:38:0a:28:4a:85:4a:89:1b:64:3e:b5:4a:0d:4a:91:
         06:e6:07:e7:b7:52:06:84:6d:00:8a:25:7b:01:31:7f:f2:b0:
         c4:1e:df:41:e5:f8:ec:ee:23:26:80:7f:af:21:4a:dc:40:44:
         3f:2a:89:3a:1c:4b:99:9e:09:23:d2:96:46:81:69:ab:3e:88:
         b3:9c:33:54:19:fc:5d:d6:fc:41:ed:7c:b4:68:4f:b6:c9:ba:
         76:f5:e5:a8:d2:9d:dd:c4:0e:13:9c:ee:c5:9e:70:45:a1:18:
         82:88:41:2a:59:e2:0a:a8:c4:b7:6d:c8:83:2b:7d:4f:0b:4b:
         fa:30:ef:dd:27:3c:d0:bf:70:ee:e0:c3:eb:71:db:0f:5a:d0:
         b9:fb:0f:4b:bd:61:33:e9:32:37:f5:10:bd:57:76:c2:15:2c:
         ef:11:2d:49:4b:2b:1b:7b:ef:83:36:b7:38:11:6c:a8:2a:bc:
         30:93:f2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----