Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa
File:                     326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa (raw, json)
Hash identifier:          FM0l0GsSFWfP+GryHoMisBlPo4gQdw/sz996XRvQEgQ=
Subject key identifier:   C1:0A:6C:39:39:E8:BB:DC:0D:B8:33:4E:13:5B:45:B6:37:05:E9:0C
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       493367DD8A5B175142E528A997D3D81EABDC01CC
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa
Signing time:             Thu 28 Mar 2024 16:42:15 +0000
ROA not before:           Thu 28 Mar 2024 16:37:15 +0000
ROA not after:            Thu 27 Mar 2025 16:42:15 +0000
asID:                     215203
IP address blocks:        2a14:7c0:d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:33:67:dd:8a:5b:17:51:42:e5:28:a9:97:d3:d8:1e:ab:dc:01:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 28 16:37:15 2024 GMT
            Not After : Mar 27 16:42:15 2025 GMT
        Subject: CN=C10A6C3939E8BBDC0DB8334E135B45B63705E90C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:71:e2:0b:5e:1f:ac:c6:a6:7d:b9:be:b7:
                    c5:14:65:33:25:c1:98:97:0e:3a:d9:7d:3b:06:63:
                    e9:eb:9b:41:e7:6b:f8:2c:3f:ed:8a:5a:78:b3:da:
                    95:9b:18:7c:b3:16:e0:21:c1:63:82:e7:c6:31:01:
                    0f:79:40:66:10:9d:af:7a:1c:32:cd:19:77:c1:42:
                    1f:63:53:ae:e4:d7:f7:52:a5:19:fa:35:34:89:c8:
                    c2:07:04:1e:ca:9b:99:63:6e:b9:38:32:e5:87:d3:
                    7c:18:42:10:fc:4d:80:48:6d:a2:87:e4:7a:a8:c5:
                    25:86:51:c6:f2:6c:60:66:ec:95:6c:9f:f3:cf:90:
                    4c:76:c7:0c:f5:ad:1f:d1:57:61:f6:d2:26:af:07:
                    c4:25:b3:9c:c3:fd:38:e2:93:11:ed:5e:fb:6c:05:
                    0f:47:81:2a:79:cb:71:e9:6c:e7:c2:25:e1:00:35:
                    c3:5c:34:ba:be:42:21:c1:ff:ca:3c:f3:97:aa:e2:
                    4f:e3:a2:17:b8:78:8a:5f:cf:72:23:1d:15:1e:ad:
                    af:82:37:96:fa:83:77:b3:7a:a5:c1:77:7a:ef:6b:
                    d6:f2:2a:b7:16:65:8f:65:ac:99:1a:d9:19:c1:d6:
                    a1:d4:49:21:2c:ae:b0:f1:02:f5:69:e4:39:62:30:
                    15:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0A:6C:39:39:E8:BB:DC:0D:B8:33:4E:13:5B:45:B6:37:05:E9:0C
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         78:ea:d8:e7:6f:ef:f8:22:fa:12:67:c4:6a:1f:af:15:a3:70:
         c6:df:1b:3c:c8:ac:3b:78:f8:89:b4:f9:9e:fe:c6:f1:9a:29:
         0f:b0:36:45:46:47:74:69:9b:c0:06:c9:41:12:00:d6:1c:bf:
         7c:44:c6:fa:e6:b7:da:67:d8:06:ea:fe:5f:52:1b:d8:8e:83:
         68:6a:40:56:b4:cc:68:bb:5a:d7:4d:60:d7:7b:e2:88:f4:18:
         1c:0e:02:9a:04:23:8d:4e:2d:90:e7:2b:09:c3:d1:f4:75:6c:
         85:e1:c2:d4:38:e6:74:59:c6:71:2a:a6:b9:e1:d0:77:a5:11:
         3b:06:f5:84:86:63:be:63:13:b0:c4:16:12:02:4e:10:7f:7b:
         69:88:40:24:59:b7:b1:6c:4c:13:29:33:45:6a:75:91:3f:78:
         08:9e:c3:ea:f3:c9:24:98:05:64:1d:1e:3e:d4:7b:35:aa:87:
         98:e0:1e:3e:58:11:bf:1c:a4:3d:75:82:aa:11:96:de:42:13:
         59:26:66:79:0b:e4:9a:54:0d:94:41:77:df:12:99:72:be:95:
         26:c3:6f:4a:96:25:e3:b9:17:37:a6:e5:8a:50:2e:77:c4:4d:
         b9:ad:de:01:ec:20:7b:c7:4a:3d:cd:b4:36:ca:a2:c9:98:e9:
         06:2e:9a:9d
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUSTNn3YpbF1FC5Sipl9PYHqvcAcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAzMjgxNjM3MTVaFw0yNTAzMjcxNjQyMTVaMDMxMTAvBgNV
BAMTKEMxMEE2QzM5MzlFOEJCREMwREI4MzM0RTEzNUI0NUI2MzcwNUU5MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCupnHiC14frMamfbm+t8UUZTMl
wZiXDjrZfTsGY+nrm0Hna/gsP+2KWniz2pWbGHyzFuAhwWOC58YxAQ95QGYQna96
HDLNGXfBQh9jU67k1/dSpRn6NTSJyMIHBB7Km5ljbrk4MuWH03wYQhD8TYBIbaKH
5HqoxSWGUcbybGBm7JVsn/PPkEx2xwz1rR/RV2H20iavB8Qls5zD/TjikxHtXvts
BQ9HgSp5y3HpbOfCJeEANcNcNLq+QiHB/8o885eq4k/johe4eIpfz3IjHRUera+C
N5b6g3ezeqXBd3rva9byKrcWZY9lrJka2RnB1qHUSSEsrrDxAvVp5DliMBWVAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUwQpsOTnou9wNuDNOE1tFtjcF6QwwHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMDNh
NjQzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzEzNTMyMzAzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHBCoUB8AA0DANBgkqhkiG9w0BAQsFAAOCAQEAeOrY52/v+CL6EmfEah+vFaNw
xt8bPMisO3j4ibT5nv7G8ZopD7A2RUZHdGmbwAbJQRIA1hy/fETG+ua32mfYBur+
X1Ib2I6DaGpAVrTMaLta101g13viiPQYHA4CmgQjjU4tkOcrCcPR9HVsheHC1Djm
dFnGcSqmueHQd6UROwb1hIZjvmMTsMQWEgJOEH97aYhAJFm3sWxMEykzRWp1kT94
CJ7D6vPJJJgFZB0ePtR7NaqHmOAePlgRvxykPXWCqhGW3kITWSZmeQvkmlQNlEF3
3xKZcr6VJsNvSpYl47kXN6blilAud8RNua3eAewge8dKPc20NsqiyZjpBi6anQ==
-----END CERTIFICATE-----