Route Origin Authorization

$ rpki-client -vvf rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326430313a3a2f34382d3438203d3e20323030323536.roa
File:                     326130613a363034303a326430313a3a2f34382d3438203d3e20323030323536.roa (raw, json)
Hash identifier:          3Yj3cJWHzE43v7j3tZWdnq7VC8O5yKRSq/WBiULCaDU=
Subject key identifier:   56:17:28:D5:DA:D2:86:77:C4:2F:94:5B:A3:22:4F:4B:4E:D5:D5:0A
Certificate issuer:       /CN=3F0AC25D352C83DA8307594B98ED061BE8489682
Certificate serial:       243FC292F1F1ABB503F0E586D8357D1CD1E7C352
Authority key identifier: 3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer
Subject info access:      rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326430313a3a2f34382d3438203d3e20323030323536.roa
Signing time:             Tue 01 Apr 2025 06:31:47 +0000
ROA not before:           Tue 01 Apr 2025 06:26:47 +0000
ROA not after:            Tue 31 Mar 2026 06:31:47 +0000
asID:                     200256
IP address blocks:        2a0a:6040:2d01::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3f:c2:92:f1:f1:ab:b5:03:f0:e5:86:d8:35:7d:1c:d1:e7:c3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0AC25D352C83DA8307594B98ED061BE8489682
        Validity
            Not Before: Apr  1 06:26:47 2025 GMT
            Not After : Mar 31 06:31:47 2026 GMT
        Subject: CN=561728D5DAD28677C42F945BA3224F4B4ED5D50A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:2f:77:65:e7:b1:e3:06:28:39:34:6d:a5:
                    23:38:9d:ef:f0:0c:9e:b2:03:48:24:2b:07:3a:04:
                    6d:45:ef:6c:f8:13:4b:88:82:f8:8d:5f:93:62:62:
                    ed:f0:80:b6:c6:09:98:84:63:96:15:53:27:51:f5:
                    f2:e2:a5:9a:2d:33:d9:92:5a:42:9a:32:46:ba:25:
                    1c:e6:de:59:bf:a9:34:a2:5c:b6:50:a6:2a:f1:ce:
                    31:06:38:4f:c0:13:43:ba:47:b4:39:88:63:1e:be:
                    af:7a:4b:01:36:45:43:a2:27:8d:bc:b2:ed:40:38:
                    a7:27:ae:8e:ff:c5:dd:85:2a:fe:42:00:a8:5d:03:
                    56:f6:3a:88:0e:b4:21:e9:a6:b6:17:71:39:75:6a:
                    37:f1:32:6b:dd:37:08:0e:d8:b7:cc:2a:a4:56:dc:
                    2b:4a:57:92:af:a4:d1:12:21:9b:60:8a:77:5b:31:
                    f3:45:9e:f8:42:b4:6c:54:90:c5:a2:7e:ef:7b:71:
                    62:5c:b3:f9:3e:80:94:0b:39:09:00:29:f5:20:68:
                    cd:49:c6:fc:9f:a9:12:33:a6:6f:19:ba:67:f5:62:
                    f1:c8:95:2a:49:68:f8:a9:39:ad:16:ef:76:19:f6:
                    71:24:e2:ed:ec:0c:41:61:b0:cc:5e:dc:cd:20:8d:
                    2f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:17:28:D5:DA:D2:86:77:C4:2F:94:5B:A3:22:4F:4B:4E:D5:D5:0A
            X509v3 Authority Key Identifier:
                keyid:3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326430313a3a2f34382d3438203d3e20323030323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2d01::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:15:45:ac:90:8c:a8:65:b3:1d:15:e9:5d:ef:57:8f:72:15:
         87:56:6a:a1:5b:18:cc:be:fb:e2:2e:22:94:a9:11:6b:df:8b:
         25:6e:b1:f6:d3:7f:97:d1:c4:b4:1f:50:b3:68:85:57:a3:d2:
         d7:8f:14:2d:b4:1e:98:f1:ef:6a:ff:4a:5c:9d:1a:80:5f:09:
         60:ed:88:01:54:71:16:b5:37:6e:83:b2:32:41:81:40:6e:fb:
         fb:cf:85:31:69:60:59:c8:49:44:7b:46:0c:e0:e2:aa:e8:67:
         c9:0c:44:79:6f:e9:5e:e3:41:55:b1:4a:b8:ea:d0:56:ae:a5:
         9f:a7:a2:5e:7d:9a:28:ab:71:12:70:62:1d:32:b4:a9:11:28:
         56:72:4d:a3:e4:24:cd:38:04:36:4b:e4:ef:65:84:56:bc:fd:
         5d:8e:a2:4c:1b:bd:c6:67:d1:0c:e2:10:c8:7f:3c:bd:1d:75:
         12:ed:c6:c2:10:25:b0:0f:53:ff:f1:cf:31:a1:cd:0a:01:e9:
         1f:74:e3:c7:fc:98:87:8e:96:a2:fd:60:e7:d7:11:8a:2d:20:
         83:bf:43:fa:25:1b:a9:01:69:7e:f9:07:0a:1c:5f:e3:00:99:
         d3:4b:44:c2:60:57:b0:64:09:d4:1c:71:52:28:97:a4:67:21:
         2c:87:42:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----