Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323135363635.roa
File:                     326131343a3763313a623030623a3a2f34382d3438203d3e20323135363635.roa (raw, json)
Hash identifier:          PXnfVJtvPXNMJSkj45tr/YprfXcEaUtZnucdpA8g7Lo=
Subject key identifier:   AF:58:9C:05:F8:DB:66:42:25:39:5B:B7:62:9B:6F:4D:A4:5A:D8:3E
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       1E33680828F2D77CB79A2BEC1A2792A6168399CC
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323135363635.roa
Signing time:             Sun 17 Mar 2024 20:41:30 +0000
ROA not before:           Sun 17 Mar 2024 20:36:30 +0000
ROA not after:            Sun 16 Mar 2025 20:41:30 +0000
asID:                     215665
IP address blocks:        2a14:7c1:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:33:68:08:28:f2:d7:7c:b7:9a:2b:ec:1a:27:92:a6:16:83:99:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 17 20:36:30 2024 GMT
            Not After : Mar 16 20:41:30 2025 GMT
        Subject: CN=AF589C05F8DB664225395BB7629B6F4DA45AD83E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:2a:85:c4:59:b5:3a:fe:fb:f5:8f:ef:1e:
                    ef:f2:9c:31:28:01:0d:f4:97:91:23:9d:94:10:f5:
                    8b:79:0c:90:33:d5:81:b0:3f:23:9a:9d:d8:89:13:
                    5a:ca:84:f1:e1:6a:0e:46:36:f0:ca:94:9e:c5:1b:
                    cf:5b:8a:9d:67:4b:ca:be:10:9c:5e:d4:b4:aa:a7:
                    7a:2c:1b:c8:52:6a:b7:59:a8:de:5b:b8:41:a3:00:
                    c8:05:0c:63:5a:62:7a:5b:b8:fd:af:a6:87:d8:2b:
                    d9:46:f2:84:54:a8:48:a1:08:86:63:68:7f:ef:d8:
                    69:20:5f:b8:69:09:53:66:1c:f5:63:e8:01:66:f2:
                    32:06:4f:9c:83:aa:99:ac:97:a9:c2:4a:e0:3d:f9:
                    da:bc:76:87:32:03:b1:91:cf:3f:85:7e:42:4d:ee:
                    27:a0:58:bd:8d:67:51:fc:cd:69:35:b4:f3:bf:60:
                    78:23:fa:76:02:b5:3a:a1:cb:07:69:bc:72:1f:9e:
                    3e:42:0b:c9:60:50:e2:02:db:e6:df:41:28:9e:e0:
                    a4:49:31:99:7e:c1:29:20:22:2e:d2:35:89:49:8d:
                    e3:d4:6e:25:f6:d1:ef:9e:35:a3:0f:bd:30:79:b5:
                    53:b2:46:54:22:25:ef:9e:f3:02:bc:e3:80:15:75:
                    18:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:58:9C:05:F8:DB:66:42:25:39:5B:B7:62:9B:6F:4D:A4:5A:D8:3E
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323135363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c1:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:2f:cd:1d:ec:37:e2:00:b1:12:c8:13:6f:38:63:98:7b:f8:
         79:d4:3b:33:ca:59:a9:36:41:6f:79:e9:d1:6b:b5:c9:f5:dc:
         84:d0:9d:58:b1:ad:47:ae:b2:e6:ed:e1:d0:42:ea:a0:3e:fd:
         32:94:fe:db:83:47:f1:0e:73:c4:79:6b:f0:b2:d9:99:26:7b:
         84:14:e1:b0:2c:eb:af:4b:8a:f8:08:bc:27:da:8b:eb:aa:77:
         e4:b5:a5:be:63:38:ec:eb:8e:15:20:a2:ab:da:f3:b7:13:c3:
         c7:73:40:e1:c7:e6:f0:4c:00:a0:55:32:8d:5e:1a:8d:29:84:
         8a:61:15:96:5d:80:7f:0e:83:73:24:40:d6:a8:55:39:55:1f:
         f2:4f:71:73:56:f0:3a:c0:d6:e8:2f:53:9a:a5:0e:f2:12:77:
         12:25:e8:2e:16:9d:94:ca:e9:52:c1:0f:24:40:72:a4:61:36:
         86:ae:ce:99:fb:0c:63:21:f8:e2:48:d8:33:25:d3:2c:33:53:
         e3:f7:0f:2f:89:20:aa:92:1c:c4:cd:f2:34:59:59:da:24:81:
         cb:75:47:14:b6:aa:57:8f:85:0e:d5:8d:e8:c1:1e:c0:e5:a0:
         e6:ae:ef:d1:94:a9:9f:a6:b7:ce:14:ef:3a:18:62:7d:fc:68:
         06:ef:e8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----