Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa
File:                     326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier:          QbPYWXWOIK6i/lnbINjQYVsO8X2c+gFN2A3RuxiRGJc=
Subject key identifier:   1A:87:C4:40:7D:7C:9C:BB:78:5B:41:38:11:E5:B4:1A:EA:30:DD:97
Certificate issuer:       /CN=6F184C05E9A68EF8ED5B077D11D0A9D93084A508
Certificate serial:       6ADEDB304956D93B0D62913717F0D5579FD8C65B
Authority key identifier: 6F:18:4C:05:E9:A6:8E:F8:ED:5B:07:7D:11:D0:A9:D9:30:84:A5:08
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa
Signing time:             Tue 25 Feb 2025 01:40:00 +0000
ROA not before:           Tue 25 Feb 2025 01:35:00 +0000
ROA not after:            Tue 24 Feb 2026 01:40:00 +0000
asID:                     152368
IP address blocks:        2a14:7584:3000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:de:db:30:49:56:d9:3b:0d:62:91:37:17:f0:d5:57:9f:d8:c6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F184C05E9A68EF8ED5B077D11D0A9D93084A508
        Validity
            Not Before: Feb 25 01:35:00 2025 GMT
            Not After : Feb 24 01:40:00 2026 GMT
        Subject: CN=1A87C4407D7C9CBB785B413811E5B41AEA30DD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f5:2f:cf:55:86:31:5a:63:1c:4f:92:79:05:
                    5a:eb:f4:9e:1a:4e:1d:1c:d0:f7:cc:cc:1f:61:c1:
                    57:f6:dc:36:ac:b7:34:5d:ae:50:53:84:f5:40:13:
                    07:40:04:1e:15:fb:57:a8:79:dd:df:32:f8:8b:2e:
                    6c:be:94:79:8d:fb:b6:10:88:f8:a3:e2:5f:e3:33:
                    c0:66:d6:cf:ba:a8:51:e9:93:2f:a8:82:9e:6b:b9:
                    01:f4:79:25:57:95:e9:94:f5:f6:01:20:30:19:46:
                    d7:13:02:fb:ea:34:d6:09:9d:73:f2:e3:18:72:e3:
                    d7:7f:dd:45:c5:fa:f4:67:ab:84:9e:d8:e6:1e:fa:
                    14:5e:3f:67:01:a5:2b:34:76:8f:2e:9d:bc:4a:a4:
                    b3:ac:88:29:f9:0f:fd:73:3c:12:c4:c1:7b:35:3f:
                    ac:bc:fe:e3:db:9b:62:57:fb:9e:50:f2:d7:b5:fb:
                    80:f7:42:94:e5:39:bb:1c:15:cd:90:be:2a:af:64:
                    b4:0f:c7:b8:fe:3e:e8:2f:dd:c6:34:b9:3b:b6:10:
                    ec:56:04:dc:ad:5c:14:f0:fa:a9:e8:62:61:df:3a:
                    3f:22:ed:a5:5f:5c:04:aa:1f:9d:00:56:ce:45:e6:
                    a0:d2:59:5b:28:da:02:ba:e6:3e:87:51:68:3c:8d:
                    ff:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:87:C4:40:7D:7C:9C:BB:78:5B:41:38:11:E5:B4:1A:EA:30:DD:97
            X509v3 Authority Key Identifier:
                keyid:6F:18:4C:05:E9:A6:8E:F8:ED:5B:07:7D:11:D0:A9:D9:30:84:A5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:ea:19:0c:e4:de:4e:24:c5:10:7e:0e:2b:4b:08:6c:26:00:
         49:80:3b:d7:ae:2e:d4:72:d5:4a:f4:2b:dc:bc:e2:1b:b7:90:
         4b:c3:19:36:9a:3e:3d:9b:e7:35:d1:f6:5f:7b:6c:49:ef:3e:
         ed:a9:bd:61:5b:3c:2f:4c:ad:ca:fd:86:ba:92:38:cb:35:32:
         c2:80:39:df:6a:a7:0b:83:59:0a:60:31:88:12:a6:3e:66:00:
         df:0f:89:c3:0b:f0:fd:c9:e3:9e:16:71:c2:f0:b3:68:fa:6f:
         56:60:28:a4:51:a9:dc:d8:9d:27:25:77:6e:88:d5:b0:14:ad:
         96:e5:89:04:1b:82:72:e5:92:1b:ed:88:65:46:be:e5:4f:64:
         78:38:40:30:7d:aa:b3:a6:f9:0e:4e:62:27:8f:2f:14:1d:f6:
         f8:23:2c:37:4a:43:7b:e9:46:ec:23:20:bc:07:61:94:c0:3a:
         7f:e0:f3:8c:c6:92:3a:00:92:f8:71:5a:34:66:2f:81:b0:fd:
         d9:98:23:7b:03:0c:20:40:59:ae:d7:4b:5a:f6:64:e0:3b:b1:
         36:cb:f9:bf:12:83:f0:2a:17:df:fc:fd:56:f7:3f:cb:e6:48:
         8a:24:af:f7:79:9a:37:7e:65:52:a1:d8:c7:3e:0a:78:3a:58:
         4f:87:3e:2f
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUat7bMElW2TsNYpE3F/DVV5/YxlswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYxODRDMDVFOUE2OEVGOEVENUIwNzdEMTFEMEE5RDkz
MDg0QTUwODAeFw0yNTAyMjUwMTM1MDBaFw0yNjAyMjQwMTQwMDBaMDMxMTAvBgNV
BAMTKDFBODdDNDQwN0Q3QzlDQkI3ODVCNDEzODExRTVCNDFBRUEzMEREOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9S/PVYYxWmMcT5J5BVrr9J4a
Th0c0PfMzB9hwVf23DastzRdrlBThPVAEwdABB4V+1eoed3fMviLLmy+lHmN+7YQ
iPij4l/jM8Bm1s+6qFHpky+ogp5ruQH0eSVXlemU9fYBIDAZRtcTAvvqNNYJnXPy
4xhy49d/3UXF+vRnq4Se2OYe+hReP2cBpSs0do8unbxKpLOsiCn5D/1zPBLEwXs1
P6y8/uPbm2JX+55Q8te1+4D3QpTlObscFc2QviqvZLQPx7j+Pugv3cY0uTu2EOxW
BNytXBTw+qnoYmHfOj8i7aVfXASqH50AVs5F5qDSWVso2gK65j6HUWg8jf+NAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUGofEQH18nLt4W0E4EeW0Guow3ZcwHwYDVR0j
BBgwFoAUbxhMBemmjvjtWwd9EdCp2TCEpQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjBmNWFjYTktZGMyOC00NTkyLTk3MTItNDA4NGRlOWM5
NDIxLzYvNkYxODRDMDVFOUE2OEVGOEVENUIwNzdEMTFEMEE5RDkzMDg0QTUwOC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82RjE4NEMwNUU5QTY4RUY4RUQ1QjA3N0Qx
MUQwQTlEOTMwODRBNTA4LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mMGY1YWNhOS1kYzI4LTQ1OTItOTcxMi00MDg0ZGU5Yzk0MjEvNi8zMjYxMzEz
NDNhMzczNTM4MzQzYTMzMzAzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz
NTMyMzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hDAAMA0GCSqGSIb3DQEBCwUAA4IBAQDQ
6hkM5N5OJMUQfg4rSwhsJgBJgDvXri7UctVK9CvcvOIbt5BLwxk2mj49m+c10fZf
e2xJ7z7tqb1hWzwvTK3K/Ya6kjjLNTLCgDnfaqcLg1kKYDGIEqY+ZgDfD4nDC/D9
yeOeFnHC8LNo+m9WYCikUanc2J0nJXduiNWwFK2W5YkEG4Jy5ZIb7YhlRr7lT2R4
OEAwfaqzpvkOTmInjy8UHfb4Iyw3SkN76UbsIyC8B2GUwDp/4POMxpI6AJL4cVo0
Zi+BsP3ZmCN7AwwgQFmu10ta9mTgO7E2y/m/EoPwKhff/P1W9z/L5kiKJK/3eZo3
fmVSodjHPgp4OlhPhz4v
-----END CERTIFICATE-----