Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337393a3a2f34382d3438203d3e20323134373537.roa
File:                     326130613a363034343a616337393a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          k1m/3CV6XUzd/otZ5rB4Jx7iZCDm++oqprywlRxeHAE=
Subject key identifier:   4B:4F:EA:6A:18:EC:00:E3:DB:03:72:BC:70:A6:E9:A8:65:D7:65:CA
Certificate issuer:       /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial:       4F9F28F748AE65D433829A17990FEA18EC758E48
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337393a3a2f34382d3438203d3e20323134373537.roa
Signing time:             Sat 08 Jun 2024 14:02:12 +0000
ROA not before:           Sat 08 Jun 2024 13:57:12 +0000
ROA not after:            Sat 07 Jun 2025 14:02:12 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac79::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9f:28:f7:48:ae:65:d4:33:82:9a:17:99:0f:ea:18:ec:75:8e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
        Validity
            Not Before: Jun  8 13:57:12 2024 GMT
            Not After : Jun  7 14:02:12 2025 GMT
        Subject: CN=4B4FEA6A18EC00E3DB0372BC70A6E9A865D765CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:72:ac:f5:93:39:9a:4d:23:98:2a:f1:c0:ff:
                    6e:56:0d:36:c1:6f:e5:2e:fa:41:97:b4:66:31:a2:
                    2e:04:4c:d2:10:c2:ea:b3:f7:f3:a2:8a:16:6b:45:
                    30:4b:3e:a2:c7:9c:32:9d:af:c8:71:74:fd:8a:68:
                    66:d3:01:96:25:b4:a7:fb:21:60:08:78:3e:0d:0d:
                    f0:2c:ec:0f:75:5b:8c:7a:40:0e:5d:58:ba:3d:b3:
                    28:c9:d6:31:66:23:86:84:32:dd:12:46:c6:f3:36:
                    51:92:86:2b:3c:cb:32:71:cd:13:34:59:cc:9c:60:
                    67:b1:b6:42:f5:3e:f1:fe:b0:54:11:0d:f0:37:4a:
                    1a:37:5c:73:97:26:93:c7:2c:0a:a2:9b:70:08:3d:
                    6a:9b:eb:2b:02:ef:46:e3:44:71:d5:36:ea:97:76:
                    37:6d:b7:c0:47:ac:2e:5c:dd:bf:be:a7:1c:5a:40:
                    03:36:e3:cb:62:06:a5:d3:b9:58:25:9e:6a:8b:1c:
                    51:77:c0:35:d9:1d:2d:d9:ad:37:89:b2:21:ea:a5:
                    93:72:5f:55:3e:4f:84:90:d3:d4:40:19:da:25:08:
                    aa:60:cd:ad:f5:88:0c:44:f8:ee:d8:54:c5:86:43:
                    58:87:b2:56:46:ed:e7:c6:55:4d:82:51:de:02:f5:
                    ca:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4F:EA:6A:18:EC:00:E3:DB:03:72:BC:70:A6:E9:A8:65:D7:65:CA
            X509v3 Authority Key Identifier:
                keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337393a3a2f34382d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac79::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:aa:3c:90:bb:04:82:d1:19:3c:6e:c8:36:9d:13:b7:49:7a:
         52:b1:8d:fe:a4:1a:ba:bc:b6:77:36:8a:41:53:d2:bf:e2:46:
         e9:ac:32:70:4c:c0:d6:56:2d:2f:6d:ae:b5:64:ea:a9:20:0a:
         78:cd:e5:d9:3f:61:65:e1:9d:11:e5:2e:95:e1:a8:cc:8b:cd:
         cb:ac:e7:c2:36:58:ee:34:10:3e:c9:96:b4:33:bb:c9:c5:95:
         7b:5f:55:14:43:b7:13:15:c9:2b:73:1c:bb:a9:ec:bb:79:8f:
         d3:46:3a:07:f9:76:96:37:f5:d1:9b:67:54:d8:be:a9:f6:8e:
         55:e1:86:17:e5:80:78:7f:3b:4e:0b:b8:f6:c3:88:88:93:9a:
         29:37:07:d3:f6:3b:e0:53:eb:dd:2d:50:94:84:12:73:14:e3:
         10:98:73:80:70:41:6c:bd:c6:ba:81:af:fe:d0:b3:2b:f4:7a:
         df:ef:6d:2b:e6:0e:39:01:a6:9f:a0:c5:b8:ba:c7:87:20:94:
         67:f6:ce:dc:ac:40:57:64:8d:f1:a3:4c:2d:e5:ad:d7:ab:00:
         79:2d:c0:d6:4d:df:d3:a3:cd:4d:2e:46:89:f6:02:b6:f2:31:
         7f:ca:ad:a0:49:98:dc:06:6e:d4:56:40:4e:76:f7:c6:60:fa:
         7b:18:ad:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----