Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323135363635.roa
File:                     326131343a3763373a623030623a3a2f34382d3438203d3e20323135363635.roa (raw, json)
Hash identifier:          EOXpQ/cqXgjp6IyUyGjFg3Ge97Uj0QL9/D4zQ/Ua95c=
Subject key identifier:   EA:50:2F:5C:11:51:3D:4C:4B:5A:DD:B7:47:F9:9A:A1:2B:E9:74:72
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       4CB5FBCBB965DB4716F1194A47D699973C46F8EA
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323135363635.roa
Signing time:             Sun 17 Mar 2024 20:41:21 +0000
ROA not before:           Sun 17 Mar 2024 20:36:21 +0000
ROA not after:            Sun 16 Mar 2025 20:41:21 +0000
asID:                     215665
IP address blocks:        2a14:7c7:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b5:fb:cb:b9:65:db:47:16:f1:19:4a:47:d6:99:97:3c:46:f8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 17 20:36:21 2024 GMT
            Not After : Mar 16 20:41:21 2025 GMT
        Subject: CN=EA502F5C11513D4C4B5ADDB747F99AA12BE97472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c2:47:d2:72:ec:6e:84:1d:1f:2b:ed:7c:92:
                    0d:1c:3e:cc:18:0d:2a:13:5e:52:be:97:d9:cf:c2:
                    3b:1f:fe:a7:d0:91:18:38:89:64:c1:6f:e4:d3:af:
                    b0:d1:e6:3c:3f:a6:22:91:6e:54:da:72:24:94:c8:
                    1f:4b:d3:eb:07:5f:70:ce:fd:94:05:56:cd:5d:9a:
                    0b:36:f5:31:0a:fd:b3:3b:00:43:b5:5a:77:61:47:
                    6f:ae:f1:d6:31:6f:57:04:e9:32:d3:cf:6e:1e:f5:
                    c5:ad:37:ff:73:44:31:6c:11:36:55:42:33:cd:0a:
                    32:c0:be:3d:f4:0b:d9:34:8f:a4:8c:c4:03:0c:36:
                    73:40:49:66:0f:c9:48:3c:f9:83:30:ed:f1:72:ac:
                    cb:9f:ab:45:62:6a:06:42:6f:21:5e:4a:9f:e2:fd:
                    af:fc:08:65:aa:19:ac:b8:26:98:c6:68:80:68:d8:
                    df:40:b6:a8:4f:f7:21:73:25:1e:22:1d:cf:a4:f0:
                    ac:41:bf:23:83:04:67:77:75:eb:3c:9c:32:07:3f:
                    35:f8:3d:7c:71:cd:f3:45:22:07:a6:5e:8f:53:d9:
                    3b:fd:58:c1:d1:a8:ce:25:d3:f0:99:fd:5c:61:e0:
                    72:e5:13:19:99:26:7d:81:0f:57:8f:c0:d8:dd:69:
                    dc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:50:2F:5C:11:51:3D:4C:4B:5A:DD:B7:47:F9:9A:A1:2B:E9:74:72
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323135363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c7:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:7b:12:cc:bd:02:69:2a:83:46:b3:a0:57:ab:4c:7c:fb:38:
         a3:0b:e9:1e:69:5d:ba:9b:5a:0b:0b:2a:0c:79:a1:66:88:3b:
         8b:e2:ef:83:10:8c:fe:31:73:e7:33:67:73:b2:38:f9:69:3f:
         88:63:94:2b:47:30:c2:ae:84:6a:3c:1f:e8:bf:bc:80:a1:3e:
         3f:7e:05:f2:23:9b:6e:92:2d:3f:b4:0e:7e:65:3d:4c:6a:39:
         19:b5:13:c4:fe:9b:32:dc:2f:43:c9:84:1f:32:b1:11:e6:28:
         26:5a:84:8c:86:72:09:4d:4e:db:2c:e6:86:27:29:52:a8:5b:
         8e:3a:41:77:6a:32:4d:44:a2:b7:7e:59:7f:6b:04:0f:b1:bc:
         0d:8d:75:ea:09:c5:2c:3d:88:fb:cd:1b:b2:73:13:c6:61:e4:
         6e:03:4a:3c:af:8d:ae:cd:00:19:e1:85:45:78:da:bc:e2:06:
         7c:0f:1e:f5:36:a1:46:e1:a7:b8:ec:44:40:11:fc:5c:4a:1b:
         d6:0e:1a:9f:8e:08:f1:91:a2:73:04:2e:7c:d0:cb:63:eb:2c:
         de:bf:7d:9a:a0:80:a5:ba:bd:ed:08:99:c6:4f:c5:41:be:19:
         07:67:12:72:3d:fe:c8:37:e4:8f:05:dd:3c:34:93:38:28:12:
         bc:9e:eb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----