Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a633435303a3a2f34342d3434203d3e20323135373630.roa
File:                     326130363a613030323a633435303a3a2f34342d3434203d3e20323135373630.roa (raw, json)
Hash identifier:          JteuFgtJe+EWYqqNs24LoJI6T/38hVUvy7yxVVc7RNQ=
Subject key identifier:   A2:6B:54:F1:A2:6C:3A:AD:BC:D7:41:25:A9:D4:CA:F2:4E:4F:17:0E
Certificate issuer:       /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
Certificate serial:       3A95364412A05C6AF0CFC84766D2958597DB4C0E
Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a633435303a3a2f34342d3434203d3e20323135373630.roa
Signing time:             Sun 16 Aug 2026 23:27:29 +0000
ROA not before:           Sun 16 Aug 2026 23:22:29 +0000
ROA not after:            Sun 15 Aug 2027 23:27:29 +0000
asID:                     215760
IP address blocks:        2a06:a002:c450::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:95:36:44:12:a0:5c:6a:f0:cf:c8:47:66:d2:95:85:97:db:4c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
        Validity
            Not Before: Aug 16 23:22:29 2026 GMT
            Not After : Aug 15 23:27:29 2027 GMT
        Subject: CN=A26B54F1A26C3AADBCD74125A9D4CAF24E4F170E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:12:d9:5b:72:7c:1e:cb:dd:52:63:ad:35:34:
                    2b:a6:4d:2f:c6:04:ba:b8:0e:6d:d1:35:4b:47:7a:
                    82:82:3c:e9:b4:99:81:20:86:05:56:75:3e:90:98:
                    5b:30:bb:c1:56:19:92:b3:3b:65:67:bb:36:ee:02:
                    52:56:25:cf:24:63:fa:f4:ce:56:99:a9:fd:40:a0:
                    84:72:ac:47:70:14:6e:39:da:0c:03:18:a1:b2:7d:
                    0e:73:23:81:41:3c:ba:33:29:ec:f4:b3:30:b1:ac:
                    e5:2d:51:87:6b:28:24:2a:2f:25:c9:2f:23:17:75:
                    c4:7a:d6:6d:5a:91:b6:26:d3:f7:40:55:44:dc:24:
                    19:4d:f7:bc:4d:2e:26:03:39:db:e8:fa:f1:bd:47:
                    e1:57:06:2a:f0:5b:e8:02:ab:b3:8d:fc:ec:38:f3:
                    9b:b5:cf:0b:27:66:ab:d9:87:3d:c4:2c:90:50:3b:
                    18:81:ab:74:15:7e:d3:90:71:a4:66:18:0b:f1:2d:
                    9b:ac:1b:28:02:1a:e2:32:34:ba:45:f5:25:9f:27:
                    11:ff:9e:63:43:2e:2c:50:1d:b1:a7:89:01:f5:83:
                    ce:ba:f7:be:f2:62:ea:fa:90:43:c6:4b:da:ca:90:
                    a4:12:39:ae:bc:9b:27:2c:75:c4:cd:51:f7:6b:c9:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6B:54:F1:A2:6C:3A:AD:BC:D7:41:25:A9:D4:CA:F2:4E:4F:17:0E
            X509v3 Authority Key Identifier:
                keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a633435303a3a2f34342d3434203d3e20323135373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002:c450::/44

    Signature Algorithm: sha256WithRSAEncryption
         18:3b:b8:1b:94:f8:38:61:d8:bb:22:71:84:e0:d7:a4:34:42:
         ad:a4:d0:22:df:d5:92:f8:ff:1d:e8:26:e3:aa:d3:f1:8d:ba:
         75:e6:d1:a4:6d:da:2f:a8:71:d1:91:6c:7c:9c:84:04:20:ee:
         a7:db:14:e1:9d:51:af:fe:8c:e7:f2:29:7a:a4:2d:da:b1:d0:
         5e:0b:57:6c:16:eb:27:13:fa:64:e0:e7:8e:d7:dc:1d:c7:cd:
         fd:36:51:d7:9a:71:bb:a2:ac:12:82:e7:8f:28:ed:b1:0f:47:
         45:a7:2c:5f:aa:74:8a:a7:1e:e3:16:e7:39:fb:01:21:30:0a:
         d2:31:d8:59:3b:b1:3c:af:28:01:59:39:ea:c4:11:ef:3c:31:
         9d:e3:d0:d9:3a:eb:73:8e:d3:76:63:80:83:93:ce:3d:fd:49:
         dd:6d:4e:f8:33:fd:44:2f:e1:a1:26:90:2c:e7:c5:cd:3c:32:
         c8:73:45:b1:22:30:47:3e:90:b7:97:a6:71:0d:26:55:b2:a9:
         7f:30:b6:1b:36:3c:4d:db:27:3e:0f:a5:55:e1:ed:86:f9:a6:
         0d:80:ee:29:dd:87:21:71:ca:80:7b:04:19:00:52:b2:99:72:
         b1:02:5a:55:da:5d:3e:57:db:e5:81:00:ec:5e:d9:99:74:ff:
         f3:74:7e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----