Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/326131343a373538343a333030303a3a2f34382d3438203d3e203530313034.roa
File:                     326131343a373538343a333030303a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier:          2eUlfOyHgmU4D6Jh0JcmBvp2wwPjwOyZEtlMrKbtYMA=
Subject key identifier:   BF:BF:8A:36:19:64:04:24:6A:76:BB:40:70:DE:95:A9:69:A9:02:66
Certificate issuer:       /CN=6F184C05E9A68EF8ED5B077D11D0A9D93084A508
Certificate serial:       5B90420B8C4F57011BCD0B0B9A72FBDDA1F41B0A
Authority key identifier: 6F:18:4C:05:E9:A6:8E:F8:ED:5B:07:7D:11:D0:A9:D9:30:84:A5:08
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/326131343a373538343a333030303a3a2f34382d3438203d3e203530313034.roa
Signing time:             Sun 08 Dec 2024 11:28:50 +0000
ROA not before:           Sun 08 Dec 2024 11:23:50 +0000
ROA not after:            Sun 07 Dec 2025 11:28:50 +0000
asID:                     50104
IP address blocks:        2a14:7584:3000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:90:42:0b:8c:4f:57:01:1b:cd:0b:0b:9a:72:fb:dd:a1:f4:1b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F184C05E9A68EF8ED5B077D11D0A9D93084A508
        Validity
            Not Before: Dec  8 11:23:50 2024 GMT
            Not After : Dec  7 11:28:50 2025 GMT
        Subject: CN=BFBF8A36196404246A76BB4070DE95A969A90266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:6e:d6:26:f5:b6:e7:95:f0:09:6b:33:55:
                    71:e2:08:40:bb:19:bf:4d:1b:17:ef:5b:fd:a6:3b:
                    6a:84:ad:dd:e9:7b:24:0a:4c:d3:9a:5a:db:71:77:
                    8e:89:7e:e5:cf:bf:95:1b:0c:66:06:94:d7:18:ef:
                    4b:7e:49:f1:f2:67:cc:5d:a8:04:39:df:13:d6:bf:
                    8f:c7:3d:bd:44:77:fb:7e:c0:75:c1:ad:1f:c9:6d:
                    bf:2f:1d:8e:02:ee:de:8c:e8:09:01:44:e9:74:0f:
                    bc:82:72:ff:1f:de:78:56:4e:1d:50:85:77:e3:3b:
                    a6:eb:07:d0:4b:59:fb:94:c8:3c:4a:18:3a:95:66:
                    3f:85:2f:5f:9f:91:2e:68:1a:7f:a8:bc:a0:04:48:
                    09:51:88:1f:80:7d:7c:f3:f9:72:84:98:1e:0f:b2:
                    b6:c8:a5:be:56:00:a5:91:7d:4f:e3:5d:1d:98:90:
                    71:c8:4c:da:47:46:be:ef:76:74:78:6d:3f:e6:3a:
                    6e:3e:5a:ee:c1:8e:ae:ec:7f:dd:a4:b0:12:40:37:
                    de:d2:bd:dc:04:9a:b0:ef:18:d6:9b:06:a2:00:e0:
                    20:12:4f:0d:f9:e7:1c:18:4c:59:d2:20:2c:81:10:
                    59:67:32:ac:1a:31:67:87:48:6e:49:e9:9a:de:25:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BF:8A:36:19:64:04:24:6A:76:BB:40:70:DE:95:A9:69:A9:02:66
            X509v3 Authority Key Identifier:
                keyid:6F:18:4C:05:E9:A6:8E:F8:ED:5B:07:7D:11:D0:A9:D9:30:84:A5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6F184C05E9A68EF8ED5B077D11D0A9D93084A508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/6/326131343a373538343a333030303a3a2f34382d3438203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:64:64:06:59:c0:67:27:8c:00:3b:f8:67:f1:c1:73:51:f7:
         07:f6:b8:ad:e2:81:20:12:3e:99:f6:63:8f:86:b2:42:82:1a:
         7a:8d:89:2a:c0:b4:f5:b8:1a:80:a8:95:06:7e:cf:69:0f:18:
         89:e7:08:85:d2:fc:49:5e:f9:f7:bf:19:10:eb:1a:88:7a:54:
         b2:e4:f5:bc:e4:2b:26:cf:50:a6:fb:52:c9:1c:b0:71:7c:01:
         f6:d2:c0:9c:ce:5c:7c:1c:01:fa:7f:1b:40:95:95:5d:da:af:
         8b:92:21:e5:cf:88:0c:06:e0:01:01:cb:8a:cc:1b:34:d7:46:
         3d:21:01:c3:00:83:e0:35:a2:e9:ae:12:7f:bd:26:13:5c:46:
         42:93:9e:a3:62:6c:4f:c8:d7:62:a3:ee:3c:a6:9f:79:c5:2f:
         72:ca:df:4b:f2:a6:46:b0:e1:4d:d8:c3:3a:32:09:f7:27:f6:
         fe:d8:97:0f:5f:62:45:d7:a4:3a:1e:af:bd:39:66:56:1b:b7:
         74:1b:8f:3e:e4:e8:7c:6b:e0:74:51:d2:aa:f1:57:2c:35:02:
         be:e6:ad:ce:b9:80:d8:8e:f6:7a:33:30:fe:51:96:71:f3:39:
         c6:33:2c:6a:72:2d:c9:12:9c:19:63:33:e2:9f:c9:39:ce:18:
         af:3b:e0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----