Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a363030303a3a2f33362d3438203d3e20323039353534.roa
File:                     326131343a373538303a363030303a3a2f33362d3438203d3e20323039353534.roa (raw, json)
Hash identifier:          7bwiHUB+0vEKFxOfRTRz/zFRAxgK1WxBsECd2SJxocI=
Subject key identifier:   EF:9D:81:2B:38:B4:CD:EF:84:BA:30:33:E2:DF:85:61:AA:31:CD:51
Certificate issuer:       /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Certificate serial:       018521CB6F2CDE9AFA93D7596BCDCC068E724B9C
Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a363030303a3a2f33362d3438203d3e20323039353534.roa
Signing time:             Tue 01 Apr 2025 09:13:56 +0000
ROA not before:           Tue 01 Apr 2025 09:08:56 +0000
ROA not after:            Tue 31 Mar 2026 09:13:56 +0000
asID:                     209554
IP address blocks:        2a14:7580:6000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:21:cb:6f:2c:de:9a:fa:93:d7:59:6b:cd:cc:06:8e:72:4b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
        Validity
            Not Before: Apr  1 09:08:56 2025 GMT
            Not After : Mar 31 09:13:56 2026 GMT
        Subject: CN=EF9D812B38B4CDEF84BA3033E2DF8561AA31CD51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f7:07:d1:f3:46:ea:47:97:36:59:c8:b3:72:
                    c9:31:c2:a2:1c:a8:2a:70:53:8d:38:9e:6f:ef:00:
                    e6:70:98:45:f8:50:16:a9:82:cb:59:e8:97:45:44:
                    dd:f5:bc:62:4c:f8:d9:5d:d3:4a:51:cf:b1:11:7d:
                    1e:3e:f6:51:e6:61:e9:c1:97:74:8b:8d:ae:38:1b:
                    7b:ee:57:c2:16:da:a5:c0:63:d7:85:bd:ce:74:14:
                    8f:50:c3:ba:b7:68:99:01:5c:ca:b8:b3:ee:3f:91:
                    55:fd:e1:0a:75:d4:ad:9c:79:5c:51:b0:9b:5a:98:
                    83:06:6c:b0:e3:40:76:0d:b2:7c:de:c3:da:76:ef:
                    7e:39:0a:f1:c6:10:f8:35:c2:2e:9f:9f:6b:a7:b3:
                    66:7c:bb:d6:26:1d:fb:53:f2:a8:6b:c4:35:8f:0e:
                    06:70:ff:ee:74:5d:b2:c6:78:9d:65:f5:eb:df:b3:
                    83:b6:c7:26:d0:b9:15:aa:62:7a:c5:c9:41:88:b9:
                    79:26:4c:22:33:08:61:e8:79:d5:96:5e:c6:84:a2:
                    b7:09:d1:03:73:24:20:99:1e:63:ac:28:50:e4:58:
                    db:34:f1:4a:08:3b:dc:be:9a:c0:e3:a6:cd:df:27:
                    8a:32:80:77:02:ce:92:29:37:03:6a:0b:43:9c:85:
                    3d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9D:81:2B:38:B4:CD:EF:84:BA:30:33:E2:DF:85:61:AA:31:CD:51
            X509v3 Authority Key Identifier:
                keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a363030303a3a2f33362d3438203d3e20323039353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:b7:f3:ca:9b:7b:80:9c:46:67:87:85:cb:b5:15:3b:a3:4a:
         61:0a:ae:42:1a:f0:fd:73:79:f9:f2:9d:1b:e0:3a:ba:cc:6a:
         9d:0b:0c:4f:8f:97:1d:16:03:3a:eb:ea:6a:87:2b:e0:5b:70:
         08:4f:5e:25:fa:91:1a:9e:d0:57:5c:17:f7:9e:e3:c4:12:79:
         30:c1:d1:49:17:73:26:91:45:61:5b:54:23:27:7d:f2:b9:78:
         0c:38:74:c8:21:be:d2:b5:2d:e2:ee:2f:82:09:a8:c4:0a:28:
         f9:c8:bb:38:a0:1a:7f:2f:1b:ad:9e:09:6d:8d:f1:55:67:5a:
         36:39:70:fe:e3:61:70:78:3d:8d:30:e1:ed:4d:db:c7:d6:4e:
         b1:2a:17:a5:99:15:d7:99:ef:42:16:b9:21:72:02:a7:35:93:
         91:66:6d:aa:2a:c2:1c:1f:d3:5b:d1:5f:df:3b:07:73:72:a0:
         fb:66:88:05:fd:5f:6c:60:3a:ea:3e:f3:68:7e:b0:58:f7:ee:
         04:1f:80:09:8c:2d:00:35:b4:83:a8:7f:84:99:bb:4f:5e:34:
         95:45:bc:50:22:ae:bf:14:37:d5:cf:7c:5a:13:84:fc:6b:a0:
         b5:62:13:64:7d:cc:93:4c:60:d4:9c:e1:21:0f:e8:34:7f:2d:
         ef:ab:eb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----