Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a633435303a3a2f34342d3434203d3e20323034303835.roa
File:                     326130363a613030323a633435303a3a2f34342d3434203d3e20323034303835.roa (raw, json)
Hash identifier:          dIo9Kj/TboClyoiWaTkpn3Ee72zXsjXaGLO3oG+VDHA=
Subject key identifier:   CC:87:E2:EA:7E:72:DB:29:54:31:5A:63:1E:C5:30:90:97:81:50:A3
Certificate issuer:       /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
Certificate serial:       2ADCC8D8342468E3F2B640DB5F6BF1FCEFD1C3F5
Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a633435303a3a2f34342d3434203d3e20323034303835.roa
Signing time:             Sun 16 Aug 2026 23:27:35 +0000
ROA not before:           Sun 16 Aug 2026 23:22:35 +0000
ROA not after:            Sun 15 Aug 2027 23:27:35 +0000
asID:                     204085
IP address blocks:        2a06:a002:c450::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:dc:c8:d8:34:24:68:e3:f2:b6:40:db:5f:6b:f1:fc:ef:d1:c3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
        Validity
            Not Before: Aug 16 23:22:35 2026 GMT
            Not After : Aug 15 23:27:35 2027 GMT
        Subject: CN=CC87E2EA7E72DB2954315A631EC53090978150A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:e5:c6:71:03:ed:48:1b:dc:b2:b7:cd:32:
                    95:6d:c9:80:c1:e7:6b:33:ba:da:35:3f:7e:68:64:
                    26:84:a8:ca:ae:78:ac:70:94:a4:97:b5:7b:32:43:
                    ee:55:4e:67:12:2b:72:22:3e:9e:a3:dc:37:3c:25:
                    08:35:2f:fc:b7:1b:fe:97:0c:60:b6:5d:0b:10:3a:
                    3e:da:54:2b:3a:2d:0c:9d:ba:4d:9d:43:3e:a1:75:
                    f5:d1:6d:a3:3e:03:ed:95:81:92:e1:2f:59:25:41:
                    24:56:19:05:c2:ce:f8:cd:ae:81:c6:3c:ee:71:07:
                    18:37:70:c6:ff:9c:a7:34:3c:27:e9:c6:7c:53:33:
                    e9:bd:ff:25:c4:c9:02:9b:28:59:47:7c:ae:78:4a:
                    c8:1c:9e:75:ee:56:01:63:53:06:a9:aa:5c:a0:8b:
                    cb:b6:8e:7f:c9:77:3d:65:90:6f:b9:8d:e1:a1:ea:
                    72:e7:7e:ce:85:bf:75:d6:89:87:07:6a:6e:86:73:
                    71:fb:b0:77:26:46:0b:c8:b7:98:00:3e:3c:af:cf:
                    fe:61:a4:5c:8c:a4:45:77:bc:09:83:b0:a6:6b:e3:
                    79:6a:02:7d:84:68:3f:f3:90:8f:ec:91:da:b7:85:
                    8a:b1:7e:d3:d5:03:4e:05:7e:1b:a3:f5:a0:50:80:
                    6e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:87:E2:EA:7E:72:DB:29:54:31:5A:63:1E:C5:30:90:97:81:50:A3
            X509v3 Authority Key Identifier:
                keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a633435303a3a2f34342d3434203d3e20323034303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002:c450::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:79:f0:39:07:03:8e:af:96:42:2d:be:8a:64:f4:53:bc:66:
         ac:54:36:c2:df:98:80:5a:15:ed:ed:ef:52:a2:9d:02:c4:c0:
         44:73:bd:9b:4c:01:39:60:94:fe:da:5a:17:44:da:ea:81:61:
         2b:05:e9:65:8b:84:33:ff:c9:de:a4:b3:db:11:cc:39:6d:07:
         20:9a:07:d3:fa:0c:7b:37:85:46:dc:50:e4:8d:89:45:c8:d0:
         7d:1c:a1:ba:22:41:34:d7:83:34:95:e4:db:6f:d8:19:71:8e:
         7b:06:f0:c0:ac:64:c6:29:7c:60:6e:9a:93:52:17:42:e8:07:
         09:bb:92:45:e8:b8:51:c7:d4:da:9e:a3:8d:ec:57:47:2c:74:
         f3:54:cd:89:71:88:90:bd:27:c3:fd:df:4d:56:f1:7b:ee:09:
         6a:f5:85:7c:01:67:ba:53:e1:39:21:b9:fc:a8:d5:84:83:89:
         f0:22:f3:d5:83:15:90:96:b9:cc:3f:61:00:21:f1:8f:1d:ce:
         59:22:fa:0c:e5:c6:92:73:f8:77:c6:73:db:21:a3:f6:37:3a:
         eb:5e:bb:08:3d:eb:8c:64:9c:a5:af:11:ce:a2:1a:c3:e4:4a:
         27:77:5b:4f:07:72:2a:27:a8:fd:5e:5b:50:ca:f8:0b:31:a4:
         0f:4f:33:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----