Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa
File:                     326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (raw, json)
Hash identifier:          cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=
Subject key identifier:   C3:A1:17:B4:D8:B8:53:1A:F4:0A:A7:62:9B:C5:2A:06:FF:DD:07:23
Certificate issuer:       /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial:       465DCDB696A22237E37F0B98DEE327ADDA75F64D
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa
Signing time:             Fri 21 Feb 2025 20:55:27 +0000
ROA not before:           Fri 21 Feb 2025 20:50:27 +0000
ROA not after:            Fri 20 Feb 2026 20:55:27 +0000
asID:                     208453
IP address blocks:        2a14:1ec7:fffd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5d:cd:b6:96:a2:22:37:e3:7f:0b:98:de:e3:27:ad:da:75:f6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
        Validity
            Not Before: Feb 21 20:50:27 2025 GMT
            Not After : Feb 20 20:55:27 2026 GMT
        Subject: CN=C3A117B4D8B8531AF40AA7629BC52A06FFDD0723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:0d:8e:f0:f4:05:c8:bd:71:79:f0:7a:36:
                    c2:08:7c:56:d3:cf:72:b9:fa:41:74:dc:fc:49:9e:
                    f6:83:2e:eb:39:af:b2:c4:84:86:61:8b:8f:af:fb:
                    0a:ba:ce:ed:d4:54:e6:f8:80:ce:01:c4:bc:9e:c3:
                    34:5a:20:3d:d9:71:0a:79:6a:65:3e:7c:45:6b:44:
                    be:43:e4:62:92:96:7e:e7:23:47:11:a5:01:6a:07:
                    e1:48:1c:30:c6:76:77:e8:60:25:4d:97:0f:f8:80:
                    4c:e9:86:bd:00:fd:c7:74:40:4a:1c:d7:10:8e:c6:
                    f0:4c:03:63:42:d6:81:8d:53:2d:8b:4d:2c:8f:13:
                    41:28:e5:59:92:b4:c0:15:4c:0d:ad:77:b2:db:36:
                    9e:5c:9e:50:0e:44:68:b9:43:72:81:3a:ad:bb:d9:
                    4b:26:2b:ba:a7:fc:3d:0c:ee:a1:00:9f:9c:ce:35:
                    a8:06:88:6d:da:2b:bc:22:c0:81:7e:c2:b4:ed:cb:
                    99:2e:68:fd:6d:6e:66:aa:7d:88:da:3a:2d:87:31:
                    be:40:0d:45:0b:88:90:d7:89:44:09:33:4e:eb:3e:
                    04:cb:94:32:47:08:40:42:a1:23:2c:30:da:5a:67:
                    8c:c3:88:bb:12:3c:d8:54:77:79:1a:8c:74:b6:b6:
                    5a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A1:17:B4:D8:B8:53:1A:F4:0A:A7:62:9B:C5:2A:06:FF:DD:07:23
            X509v3 Authority Key Identifier:
                keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:1ec7:fffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:ca:bb:96:d4:a6:ec:e8:62:08:94:90:46:85:ec:b9:d1:5b:
         71:36:07:21:63:3f:47:e9:10:50:b9:b4:6c:bf:6b:9a:9f:8b:
         3d:78:8b:27:6a:4d:bd:cc:88:1d:0d:b4:12:17:b2:c9:c3:cb:
         a3:5e:33:e4:e7:2a:cf:1e:ad:3d:93:32:b8:44:af:65:f0:cd:
         02:b5:0d:f6:af:14:c0:5d:e7:2e:bb:61:c6:de:50:c7:bc:47:
         71:89:f3:c2:fb:a8:3c:43:a5:90:06:b8:fa:4d:06:20:3a:54:
         77:e4:df:c6:1e:33:ee:2f:80:e6:57:98:7a:32:e3:f9:cc:89:
         2e:1b:7e:8d:66:20:ec:e6:12:80:00:2b:d5:a2:5b:df:cb:b6:
         9a:6a:61:84:b2:f1:7d:3a:42:78:d5:94:dc:21:5e:6f:ba:9f:
         9a:6d:c3:17:e2:6a:c8:43:e2:cb:47:74:e6:1d:84:f6:ad:da:
         1b:72:83:51:c8:94:7f:20:cd:08:6b:2f:10:5f:e8:d7:4d:a3:
         e4:c8:3b:09:dd:1a:fd:aa:8f:88:6f:f9:73:6f:cd:a8:11:5b:
         cc:14:d2:a7:96:56:27:9d:45:74:7a:0f:1b:c5:5f:1b:e2:48:
         d7:60:49:d0:ab:ae:22:31:d6:3e:ce:a7:df:5d:ae:ca:d6:81:
         5f:36:3c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----