Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa
File:                     326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (raw, json)
Hash identifier:          SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=
Subject key identifier:   BE:D1:4D:92:0F:BF:9B:02:12:5B:E9:84:34:AD:03:5E:65:B1:B0:DB
Certificate issuer:       /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Certificate serial:       2FA10B6CB76CF17A8177D6570928E830CCCCA3E3
Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa
Signing time:             Wed 22 Jan 2025 15:03:28 +0000
ROA not before:           Wed 22 Jan 2025 14:58:28 +0000
ROA not after:            Wed 21 Jan 2026 15:03:28 +0000
asID:                     401386
IP address blocks:        2a14:7581:2f01::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a1:0b:6c:b7:6c:f1:7a:81:77:d6:57:09:28:e8:30:cc:cc:a3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
        Validity
            Not Before: Jan 22 14:58:28 2025 GMT
            Not After : Jan 21 15:03:28 2026 GMT
        Subject: CN=BED14D920FBF9B02125BE98434AD035E65B1B0DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:49:01:f4:43:8e:5d:8c:2a:75:fe:ea:47:
                    bf:56:09:02:f8:18:cc:60:9f:0a:c2:f3:72:78:4e:
                    e4:91:33:33:2c:58:13:f4:51:26:01:1b:3b:78:d2:
                    1c:4c:52:a8:28:66:92:c8:49:d2:ae:db:b5:0d:66:
                    93:aa:f0:91:15:27:4b:bd:78:7e:bb:7b:f3:cd:a1:
                    a1:91:3a:c9:e0:e3:9f:af:d0:f8:88:ad:ef:0f:0f:
                    ae:47:de:af:94:f8:09:ff:1b:5b:68:08:4f:71:e8:
                    2a:6d:42:50:58:e4:d9:a9:e2:33:c8:f6:9a:b6:06:
                    ca:9c:0c:e7:7c:3c:3a:60:ce:df:b2:f9:b2:a0:c3:
                    8a:ef:ff:5a:c3:0f:8e:84:2e:47:8d:1a:b8:3c:fb:
                    38:c2:f4:b7:86:3e:55:ee:66:9a:69:5e:27:cb:af:
                    23:7b:c9:12:1b:74:ac:bd:ab:e5:94:6b:bb:e5:7d:
                    a1:2d:12:ad:12:b6:c6:00:b4:e9:14:98:45:6d:1f:
                    00:4b:94:03:4b:4d:2c:ee:ca:4a:4f:6b:55:46:85:
                    0d:77:e5:03:50:c8:07:56:16:ec:c9:9b:98:0c:44:
                    40:61:42:95:0c:b3:28:57:cd:05:6b:fc:3e:bb:db:
                    bc:52:fb:bf:7b:3e:f6:76:88:7a:6e:35:af:89:2a:
                    d2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D1:4D:92:0F:BF:9B:02:12:5B:E9:84:34:AD:03:5E:65:B1:B0:DB
            X509v3 Authority Key Identifier:
                keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:2f01::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:8a:2f:97:9c:f6:27:70:94:8b:a7:1e:55:77:7d:57:83:b7:
         f8:29:cd:41:aa:bf:8e:ec:c5:3d:4c:79:58:45:7f:90:39:81:
         3a:c9:e7:fd:66:e5:ec:2e:a8:42:dd:d6:0d:ef:30:75:cb:50:
         92:4f:b0:96:6a:aa:db:eb:06:c5:31:2b:39:72:41:6d:02:1b:
         0e:99:63:58:af:f0:82:69:72:8e:cf:a8:79:f7:94:42:b7:7c:
         d9:89:9a:05:16:4c:61:87:32:f6:b8:6a:74:ca:43:f1:78:c2:
         1c:f6:c7:c2:22:95:d9:3f:96:39:06:66:37:0e:5a:47:6c:0a:
         cf:9e:79:4a:6f:d4:96:9d:79:42:f2:c1:c7:af:b0:30:dc:b4:
         f6:4f:32:e3:f4:69:e7:08:e0:65:14:c2:8f:a5:92:d6:5b:32:
         dc:f3:a5:b2:d9:91:f3:e6:c1:65:71:33:9b:c1:4a:d3:e3:69:
         ab:08:e5:48:08:f2:4b:2a:22:74:a1:3e:3c:66:11:1e:0a:d4:
         ca:1b:54:75:a6:2e:38:10:5a:7d:18:df:22:3f:26:03:80:fe:
         d4:3a:5a:31:76:e4:23:8f:f6:bf:83:10:08:d2:cf:70:64:00:
         5e:3e:bc:b2:8c:99:9a:41:1e:ac:36:84:85:52:66:14:51:9c:
         09:ec:d0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----