Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623330303a3a2f34302d3438203d3e20323132303439.roa
File:                     326130363a313238333a623330303a3a2f34302d3438203d3e20323132303439.roa (raw, json)
Hash identifier:          Cshc8nekROqGT7Tsmb3KQp1HAASVsdDSZVlEvtSk5EY=
Subject key identifier:   E7:C7:2A:A9:1C:21:DF:AB:E4:64:97:E2:F9:17:44:B1:80:D6:8F:5C
Certificate issuer:       /CN=20595BDBAD09C7D604202305854D1DF14F190959
Certificate serial:       5348A2300F5FE3FEA61BFADE08118A7F0330D5BB
Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623330303a3a2f34302d3438203d3e20323132303439.roa
Signing time:             Sat 08 Mar 2025 16:43:03 +0000
ROA not before:           Sat 08 Mar 2025 16:38:03 +0000
ROA not after:            Sat 07 Mar 2026 16:43:03 +0000
asID:                     212049
IP address blocks:        2a06:1283:b300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:48:a2:30:0f:5f:e3:fe:a6:1b:fa:de:08:11:8a:7f:03:30:d5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959
        Validity
            Not Before: Mar  8 16:38:03 2025 GMT
            Not After : Mar  7 16:43:03 2026 GMT
        Subject: CN=E7C72AA91C21DFABE46497E2F91744B180D68F5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:65:77:5e:df:e0:5c:32:f7:5a:6b:d1:54:dc:
                    d4:11:49:29:ad:36:63:ce:22:51:58:88:3f:c9:90:
                    bd:58:1a:31:07:34:b9:06:ad:22:12:eb:07:32:86:
                    83:3d:8a:14:7d:02:55:5a:f7:ab:03:76:7a:1e:15:
                    8a:52:41:65:c5:7e:19:85:57:94:e5:66:50:94:21:
                    03:e2:43:dd:a6:cb:cc:ea:35:35:40:4b:dd:07:76:
                    8a:c2:5d:5f:86:42:4d:8a:45:56:66:ae:70:b2:58:
                    22:61:7a:06:02:9c:86:64:64:be:c3:8d:41:a0:d0:
                    84:dd:db:b5:8c:6f:8b:7a:9c:d9:a0:5e:4f:17:66:
                    05:1e:ae:37:81:fd:69:f2:b1:bb:aa:71:09:4f:72:
                    1c:b1:02:a3:04:89:2e:64:42:e6:ca:ca:ba:8c:fd:
                    98:87:09:7d:f4:8d:4c:4e:45:86:41:75:10:94:52:
                    92:05:97:58:d0:65:ec:c7:13:d1:25:11:0c:17:83:
                    d4:55:88:eb:e3:e0:6a:ab:23:e2:e9:6b:8a:f0:6f:
                    d3:69:e1:78:89:1a:42:f8:ba:4c:85:8a:4a:a5:bb:
                    32:c2:a2:38:3e:cd:14:db:fb:5a:e3:e4:77:8b:6c:
                    02:2d:ce:30:c5:b6:81:3b:86:7d:85:b2:54:4f:b8:
                    58:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C7:2A:A9:1C:21:DF:AB:E4:64:97:E2:F9:17:44:B1:80:D6:8F:5C
            X509v3 Authority Key Identifier:
                keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623330303a3a2f34302d3438203d3e20323132303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b300::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:ef:7c:4b:ff:4c:91:af:45:46:63:e1:63:fd:19:41:07:8d:
         40:da:ef:0e:53:ed:f7:7c:6b:26:4a:ca:0b:8e:3c:62:0c:ea:
         f4:54:79:69:b2:e5:f5:d8:b4:0f:3f:2b:83:b0:87:f5:c0:3c:
         fa:3e:53:9c:68:e7:d0:4b:f3:73:e1:cc:3b:da:d9:5f:ca:73:
         59:13:82:77:03:0c:29:82:6e:35:f5:fe:d7:ba:36:25:fb:b4:
         4a:45:a7:d8:c9:55:ad:3d:72:a3:79:38:2b:ee:d1:f7:6c:25:
         6e:fa:f3:9e:e5:76:0b:8a:eb:1c:e5:05:ca:85:3a:05:b6:c7:
         51:ce:4e:d8:d4:d5:61:90:78:ff:26:53:3c:3c:6e:a0:00:8f:
         ed:f9:36:3a:cf:bd:36:15:77:bb:d2:a4:77:2d:08:8e:ec:da:
         7d:3b:df:ec:eb:15:06:9d:d4:03:55:96:58:ca:a3:54:6e:93:
         1e:f7:c5:e9:e7:aa:bd:05:0d:7d:87:f8:0c:72:a5:95:64:53:
         01:93:af:06:2c:1e:d6:6a:81:e6:72:81:6a:31:e8:45:cf:8a:
         99:80:b9:25:a9:ee:b5:6d:31:39:90:0e:a7:f0:64:f0:5a:cc:
         49:48:f4:4c:d1:28:2e:c1:f8:58:27:1e:79:3e:57:13:a0:4a:
         39:51:7f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----