Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa
File:                     326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa (raw, json)
Hash identifier:          +LTmhbW+a3Tzy8jvAsJ9nWb11Lcm6hh/lMBLNqi54EY=
Subject key identifier:   97:82:4A:F3:EC:08:30:93:CD:97:12:74:4F:7E:01:35:F0:B6:DF:7B
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       5D86536251FA8EEF8AA171317C5698110B9E12F5
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa
Signing time:             Fri 05 Apr 2024 11:53:59 +0000
ROA not before:           Fri 05 Apr 2024 11:48:59 +0000
ROA not after:            Fri 04 Apr 2025 11:53:59 +0000
asID:                     215158
IP address blocks:        2a14:7c0:2400::/38 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:86:53:62:51:fa:8e:ef:8a:a1:71:31:7c:56:98:11:0b:9e:12:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Apr  5 11:48:59 2024 GMT
            Not After : Apr  4 11:53:59 2025 GMT
        Subject: CN=97824AF3EC083093CD9712744F7E0135F0B6DF7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:f9:b2:fe:06:ca:3d:65:02:05:c8:3d:15:
                    be:28:e3:ef:2c:0e:a0:12:a0:37:ec:97:66:5f:92:
                    41:42:68:99:d5:04:71:a2:85:54:68:51:4c:50:ef:
                    d0:96:03:17:52:1e:d8:e7:1d:d3:e2:ab:08:48:33:
                    9d:9a:fe:81:f1:8b:08:9b:f1:c8:02:29:5a:a9:d2:
                    c9:96:65:85:64:b9:fd:6f:ad:d3:56:7d:f8:ae:56:
                    2a:a7:16:7d:a6:7d:aa:3f:52:d3:2f:c3:46:1b:b4:
                    bb:3e:5f:23:bc:fa:09:b5:e6:a8:16:e8:b3:69:69:
                    53:75:e4:5c:75:a4:e5:8b:f8:ca:83:b7:c8:1b:4b:
                    da:be:ee:4f:a8:82:ae:8e:86:04:0d:21:ea:a2:d3:
                    9e:72:38:42:3f:03:57:58:73:6f:03:cf:8c:77:49:
                    ab:7c:26:6b:df:1e:ad:5c:78:37:55:79:4f:37:bd:
                    29:95:8d:ee:7a:33:76:e3:b4:80:43:c5:ea:6a:18:
                    46:67:cb:e2:07:4d:1f:5e:50:d1:44:cf:e9:98:bf:
                    c0:29:da:b2:e6:ba:40:8b:1c:30:8c:19:77:6c:8a:
                    43:43:74:2b:21:50:02:89:89:e6:fb:db:0a:f4:0e:
                    d5:4b:d8:0c:0b:b0:83:6f:12:b7:2d:9d:a3:a9:88:
                    ec:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:82:4A:F3:EC:08:30:93:CD:97:12:74:4F:7E:01:35:F0:B6:DF:7B
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:2400::/38

    Signature Algorithm: sha256WithRSAEncryption
         33:74:d0:e2:3f:14:81:d3:b2:09:bc:aa:6d:68:23:d7:51:b4:
         d7:35:6e:b2:7f:84:c1:7c:40:32:4f:83:62:0d:01:df:e1:b2:
         32:aa:17:0e:13:03:38:1d:20:45:6e:94:fa:53:ec:b1:d8:ca:
         e3:b6:f8:4b:e2:3e:bf:dc:35:88:6a:13:54:4d:14:5a:98:66:
         1c:f2:ef:78:42:e1:8e:3a:ae:68:1b:c2:f7:a9:9a:70:09:10:
         66:34:ae:27:29:a5:2e:89:db:3e:1c:d5:42:49:de:1b:5e:ed:
         01:78:10:b8:27:91:f4:44:3a:6d:d5:ea:97:d0:38:45:b9:87:
         f0:6d:14:5f:d6:0d:5d:9f:88:a4:4e:a1:c9:62:9c:03:8a:ee:
         dc:34:2d:16:51:6b:69:91:ce:46:3b:c9:bf:bb:12:2e:f5:f9:
         65:71:7f:1f:7f:7c:0a:d1:41:ec:19:aa:02:10:84:a0:5c:b4:
         34:51:bf:fe:60:3d:02:75:30:d1:d0:f3:e9:77:cd:28:1b:fa:
         4a:d2:c1:ac:5b:fa:2f:67:13:b6:6b:e9:11:da:a4:d1:c6:c6:
         3b:b1:f5:bb:c1:e9:c9:75:27:ac:88:29:e6:c0:6d:da:02:07:
         17:ad:be:e6:17:03:3e:c5:4b:b2:c5:46:13:00:5f:11:08:8d:
         45:15:ec:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----