Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a613030303a3a2f33362d3438203d3e20323037303833.roa
File:                     326130393a353463363a613030303a3a2f33362d3438203d3e20323037303833.roa (raw, json)
Hash identifier:          lpvEvnmcMhpvTeku94JCMcGfqvVzydjCjQXyLlp8w3U=
Subject key identifier:   6F:45:02:1A:BD:5E:28:2F:D9:01:60:4A:8C:E4:23:85:AD:8F:82:87
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       458C78C46968D314CE6BAA9C23E5233774F879A7
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a613030303a3a2f33362d3438203d3e20323037303833.roa
Signing time:             Fri 21 Feb 2025 12:43:46 +0000
ROA not before:           Fri 21 Feb 2025 12:38:46 +0000
ROA not after:            Fri 20 Feb 2026 12:43:46 +0000
asID:                     207083
IP address blocks:        2a09:54c6:a000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8c:78:c4:69:68:d3:14:ce:6b:aa:9c:23:e5:23:37:74:f8:79:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Feb 21 12:38:46 2025 GMT
            Not After : Feb 20 12:43:46 2026 GMT
        Subject: CN=6F45021ABD5E282FD901604A8CE42385AD8F8287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:f1:66:93:12:2a:b6:2c:0d:11:4a:34:02:
                    5c:eb:06:d6:ad:fa:30:45:6c:09:33:fd:8f:37:a5:
                    29:8b:c3:ae:03:e1:e2:22:a1:44:56:c3:b8:2f:46:
                    aa:74:4c:eb:57:62:b0:4f:72:78:09:dd:ca:1c:d8:
                    4c:67:3f:f1:21:82:70:cf:a9:ca:c9:7d:9e:69:f3:
                    c1:09:28:ca:93:fc:f0:e5:86:c8:49:73:4c:5d:fc:
                    ad:01:c3:62:86:98:2a:94:1b:72:c4:0d:39:f8:c8:
                    15:52:a8:91:31:b5:46:cb:03:ac:fa:37:3e:e1:d0:
                    2e:92:6d:d3:fc:5f:cb:73:ad:20:a2:ca:e8:bd:9c:
                    c9:ce:72:bc:d5:6c:85:63:ba:29:5d:85:ff:b3:7a:
                    e4:74:cf:8e:e6:d9:0b:20:08:81:0e:ba:5c:4a:4a:
                    b8:ff:1f:9f:39:42:da:a4:80:07:ea:a6:0b:b6:67:
                    82:f2:19:89:7c:a5:68:3f:3c:e9:8a:a5:af:37:8d:
                    ed:86:84:73:3e:ce:c8:19:a1:b2:a1:c8:e6:6e:a8:
                    5e:17:fc:23:a0:0b:d1:ba:77:ab:9c:76:ed:44:d8:
                    81:0f:da:79:33:58:19:0a:a5:67:a3:08:30:0b:88:
                    2f:2a:f4:b1:ea:c1:6e:3a:d9:11:63:4f:ec:19:af:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:45:02:1A:BD:5E:28:2F:D9:01:60:4A:8C:E4:23:85:AD:8F:82:87
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a613030303a3a2f33362d3438203d3e20323037303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         63:70:9a:0d:63:5d:f9:f9:e9:0f:dc:0a:90:af:24:6c:82:33:
         61:45:c2:32:63:78:21:a8:03:08:88:a7:58:11:0d:aa:e1:ad:
         96:1a:c1:66:06:c1:cb:b7:05:35:9b:1f:39:be:de:26:40:ca:
         75:e2:e1:31:a8:bb:89:21:17:eb:52:dd:45:c0:da:12:34:df:
         a3:d9:2a:b1:a5:ca:13:04:a4:a1:1e:5e:1e:a3:90:f4:e0:cf:
         8a:d9:04:fd:fe:c5:6f:bc:ef:5b:3b:d8:94:dc:b1:bd:42:64:
         d3:e7:a5:1f:b4:5b:22:df:4d:2a:19:2c:5e:a0:40:dd:41:ac:
         4c:41:03:26:c9:15:14:71:ba:11:a6:40:19:3a:ba:89:0f:d7:
         ba:1e:70:88:ce:65:5f:90:8b:11:b6:18:09:cb:69:38:61:09:
         75:f5:7d:50:b5:6f:c9:e3:a5:42:cc:de:c4:65:31:a5:c0:34:
         a5:8e:31:f6:4b:8e:4f:5a:05:71:22:bc:9a:7e:76:0d:01:7d:
         d2:ce:a6:29:33:ce:e5:aa:56:cf:22:1d:ca:ac:2f:45:a3:68:
         a6:64:4c:b1:da:69:65:7d:73:d7:5c:c7:d4:fc:d9:3c:5d:f0:
         47:cd:c3:dc:65:0b:8c:ac:9a:98:82:65:e7:b8:c7:75:44:f3:
         5d:5d:56:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----