Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a343038353a3a2f34382d3438203d3e20323034303835.roa
File:                     326130363a613030323a343038353a3a2f34382d3438203d3e20323034303835.roa (raw, json)
Hash identifier:          MXpt59nSDzAhDJYFBxuOa2ExgtVyc4BVdwQswg4KRX8=
Subject key identifier:   D9:46:78:85:A6:E5:8B:8B:F8:3B:74:DE:09:BE:DC:DE:EF:DF:FD:3F
Certificate issuer:       /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
Certificate serial:       1F4028D72175DE7F37FCC9E2B40698BDFB088A67
Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a343038353a3a2f34382d3438203d3e20323034303835.roa
Signing time:             Thu 13 Aug 2026 19:07:17 +0000
ROA not before:           Thu 13 Aug 2026 19:02:17 +0000
ROA not after:            Thu 12 Aug 2027 19:07:17 +0000
asID:                     204085
IP address blocks:        2a06:a002:4085::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:40:28:d7:21:75:de:7f:37:fc:c9:e2:b4:06:98:bd:fb:08:8a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
        Validity
            Not Before: Aug 13 19:02:17 2026 GMT
            Not After : Aug 12 19:07:17 2027 GMT
        Subject: CN=D9467885A6E58B8BF83B74DE09BEDCDEEFDFFD3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:c1:12:4e:fc:9d:32:cd:b6:57:96:92:00:
                    72:07:a4:39:9e:55:8d:50:2a:96:d1:0a:94:10:c2:
                    a5:c1:1b:18:e4:96:b1:51:1b:5d:e2:47:75:38:ea:
                    c1:cf:d7:06:74:3a:6e:3a:3c:58:67:70:e1:21:7c:
                    5d:b0:63:52:58:65:bf:a6:26:2e:bf:77:5a:40:7d:
                    0f:35:54:ee:fc:67:2b:fd:ab:fd:29:0d:ec:8d:78:
                    ac:6d:db:08:49:bf:02:9d:2c:dc:df:99:d2:13:9d:
                    01:ee:db:fa:94:25:fc:30:56:7a:2a:41:4b:2c:06:
                    cf:3c:72:18:8d:94:99:7a:06:db:5e:fb:99:44:91:
                    45:d4:2d:b4:ce:05:51:9b:a6:e1:73:f6:cc:30:b5:
                    d0:2b:97:84:71:5e:1c:f9:bf:fc:3b:38:1b:c7:b0:
                    2f:c3:b8:5c:30:ce:00:b6:59:f5:4a:b1:74:16:c4:
                    85:c2:d0:e6:b5:73:07:32:9d:1f:06:ee:f2:dc:1f:
                    ba:50:ca:f2:f8:e2:63:ed:45:1d:89:16:11:48:1c:
                    22:cb:4c:c8:b9:cb:c2:ec:41:62:31:e6:07:d9:48:
                    2e:de:14:ea:ab:67:91:bc:a2:a4:09:e7:88:75:34:
                    b1:e6:0c:55:4a:ca:96:85:2d:81:c4:e9:d9:f5:65:
                    20:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:46:78:85:A6:E5:8B:8B:F8:3B:74:DE:09:BE:DC:DE:EF:DF:FD:3F
            X509v3 Authority Key Identifier:
                keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a343038353a3a2f34382d3438203d3e20323034303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002:4085::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:da:31:32:98:64:51:94:91:41:ce:a7:14:60:49:90:2c:2b:
         54:c0:8e:39:bc:06:1e:ad:e6:ae:ea:8d:a4:b1:21:6c:11:7f:
         ba:9d:9b:84:4a:42:41:3d:28:7d:33:0f:b8:8c:51:dc:4e:b6:
         8c:bd:4c:52:7e:a8:b8:d5:5c:ab:8c:d6:62:a1:cf:1d:ba:27:
         9e:7e:dd:42:da:c5:02:5f:e2:6e:d1:10:79:24:be:af:53:77:
         e1:49:69:5a:44:49:de:9d:fb:4c:82:f7:02:57:e1:6b:69:94:
         26:eb:d5:f9:6c:1c:0a:34:93:09:83:a9:5b:27:38:bd:29:38:
         21:7d:44:05:71:5b:c6:36:31:15:71:75:44:a1:01:90:d7:8a:
         5b:9f:ac:de:6b:6c:84:00:12:ee:f7:a3:6b:0b:07:ae:27:26:
         d7:9c:63:9f:07:89:c4:2c:95:11:db:fe:7a:e9:c4:c8:da:5d:
         9b:9f:24:bc:7e:69:e5:2d:3d:8b:5a:ba:2e:b2:4a:8f:e0:55:
         43:d1:39:6a:af:f3:85:b2:6f:e7:94:c3:27:c8:b5:00:fe:f6:
         23:99:4f:8d:8e:71:4c:c3:eb:a0:44:66:5e:12:b8:ea:96:70:
         f9:55:ca:6c:c8:df:60:e1:11:12:1a:f6:42:56:e8:5e:64:1d:
         e2:ec:6e:a5
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUH0Ao1yF13n83/MnitAaYvfsIimcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3
NDAxRTY3NjAeFw0yNjA4MTMxOTAyMTdaFw0yNzA4MTIxOTA3MTdaMDMxMTAvBgNV
BAMTKEQ5NDY3ODg1QTZFNThCOEJGODNCNzRERTA5QkVEQ0RFRUZERkZEM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/cESTvydMs22V5aSAHIHpDme
VY1QKpbRCpQQwqXBGxjklrFRG13iR3U46sHP1wZ0Om46PFhncOEhfF2wY1JYZb+m
Ji6/d1pAfQ81VO78Zyv9q/0pDeyNeKxt2whJvwKdLNzfmdITnQHu2/qUJfwwVnoq
QUssBs88chiNlJl6Btte+5lEkUXULbTOBVGbpuFz9swwtdArl4RxXhz5v/w7OBvH
sC/DuFwwzgC2WfVKsXQWxIXC0Oa1cwcynR8G7vLcH7pQyvL44mPtRR2JFhFIHCLL
TMi5y8LsQWIx5gfZSC7eFOqrZ5G8oqQJ54h1NLHmDFVKypaFLYHE6dn1ZSCfAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQU2UZ4habli4v4O3TeCb7c3u/f/T8wHwYDVR0j
BBgwFoAUHbQdjLkJQYqie73tBs+1hXQB5nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2
ZDAzLzMvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAxRTY3Ni5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAx
RTY3Ni5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgt
MjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2ZDAzLzMvMzI2MTMwMzYzYTYxMzAzMDMy
M2EzNDMwMzgzNTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNDMwMzgzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoGoAJAhTANBgkqhkiG9w0BAQsFAAOCAQEAMdoxMphkUZSRQc6n
FGBJkCwrVMCOObwGHq3mruqNpLEhbBF/up2bhEpCQT0ofTMPuIxR3E62jL1MUn6o
uNVcq4zWYqHPHbonnn7dQtrFAl/ibtEQeSS+r1N34UlpWkRJ3p37TIL3Alfha2mU
JuvV+WwcCjSTCYOpWyc4vSk4IX1EBXFbxjYxFXF1RKEBkNeKW5+s3mtshAAS7vej
awsHricm15xjnweJxCyVEdv+eunEyNpdm58kvH5p5S09i1q6LrJKj+BVQ9E5aq/z
hbJv55TDJ8i1AP72I5lPjY5xTMProERmXhK46pZw+VXKbMjfYOEREhr2QlboXmQd
4uxupQ==
-----END CERTIFICATE-----