Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323132313439.roa
File:                     326131343a3763373a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier:          o8dM8QB8S9bGVg3vGev0XqjyeUE6XqHNPq2DL+Jkkog=
Subject key identifier:   A0:D2:95:FF:3A:E4:4A:B9:A2:97:DA:AB:D1:64:6B:33:31:36:8A:62
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       36E433DF2B52D65FF92B2D35DA4A8AB5DDA1BCC1
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time:             Wed 21 Feb 2024 15:38:16 +0000
ROA not before:           Wed 21 Feb 2024 15:33:16 +0000
ROA not after:            Wed 19 Feb 2025 15:38:16 +0000
asID:                     212149
IP address blocks:        2a14:7c7:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e4:33:df:2b:52:d6:5f:f9:2b:2d:35:da:4a:8a:b5:dd:a1:bc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Feb 21 15:33:16 2024 GMT
            Not After : Feb 19 15:38:16 2025 GMT
        Subject: CN=A0D295FF3AE44AB9A297DAABD1646B3331368A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:f8:dd:75:1c:69:c0:b4:a9:d3:25:be:75:
                    3c:5a:9f:ff:20:45:52:bc:66:0a:be:cf:be:d9:42:
                    47:58:df:5d:34:25:ef:3e:a7:c9:d1:cf:76:25:f3:
                    ea:43:ff:6a:02:4b:d8:3b:aa:16:1a:68:23:df:13:
                    cf:24:65:c5:ff:d5:85:b1:2c:ba:42:7c:a2:6e:42:
                    b2:fd:d7:fb:f7:7f:f2:fb:99:a4:f6:4e:10:0a:cb:
                    63:f3:37:d7:0a:04:f6:8f:73:18:a6:d8:a7:b8:81:
                    f1:b4:ac:d0:22:e6:02:15:ac:43:3c:9b:04:4b:8e:
                    52:ee:73:23:76:fc:db:08:e6:4d:35:b1:d3:09:46:
                    32:0d:94:81:2b:f0:f4:d0:56:c7:f1:c6:c1:a9:7d:
                    fb:e6:36:6a:31:ca:88:7e:1a:f9:b5:8a:f7:99:82:
                    4c:ac:a4:55:f5:17:6b:0e:ce:3d:fb:bf:3a:62:7f:
                    ac:63:ac:68:7f:a0:a9:81:cc:b6:55:dc:4a:2a:17:
                    e4:76:bd:04:d3:af:ae:8e:60:59:e5:a4:d7:fd:ee:
                    40:99:31:72:4f:f4:7f:a5:52:87:8e:b0:9e:fe:f8:
                    a2:ee:4c:87:2b:ce:2d:1d:f5:17:8f:22:b8:18:f5:
                    7b:0e:1b:a3:bb:3a:e3:ca:3d:88:38:d3:88:6e:9b:
                    27:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D2:95:FF:3A:E4:4A:B9:A2:97:DA:AB:D1:64:6B:33:31:36:8A:62
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323132313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c7:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:30:71:f2:2b:70:71:ea:8d:c2:ba:a8:19:ef:e7:16:3e:6a:
         62:d4:01:fa:f5:90:1d:76:48:bd:74:1a:71:c4:4d:e1:be:2d:
         ef:60:d3:eb:54:e5:de:61:d6:bd:80:99:86:5c:93:27:c6:50:
         af:da:93:ab:88:e9:20:ca:e5:b2:23:4d:c4:8f:85:24:c0:66:
         b4:54:32:e0:74:93:34:16:ee:2b:a5:cf:c6:60:cf:e2:ce:1d:
         5b:3e:17:98:ed:98:fc:ca:b6:f9:41:bf:9b:11:74:62:66:fd:
         40:9a:b4:c3:8b:2f:a7:ab:98:cc:c4:06:87:0b:52:6e:f4:44:
         fa:0f:af:c1:9e:04:72:81:8f:f6:81:98:25:61:b6:04:0d:3d:
         03:1a:7f:9f:8c:ad:69:b8:ad:32:91:d0:c2:a4:90:86:75:ea:
         b7:19:ce:b7:a3:22:4d:7d:8e:02:89:01:b7:a6:78:9b:e5:81:
         56:6f:bc:5c:46:92:17:72:95:7e:c8:84:19:0f:bd:04:5f:40:
         fe:18:52:2e:5b:55:55:34:61:ce:1c:5e:36:de:67:62:a6:97:
         43:23:8b:6e:c8:96:41:96:c9:41:00:b2:b9:6e:5d:85:d8:61:
         99:98:1c:be:2e:a7:0d:1a:55:1a:17:58:e1:5b:0e:15:96:28:
         40:4e:44:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----