Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633133303a3a2f34342d3438203d3e20323131303636.roa
File:                     326130363a313238333a633133303a3a2f34342d3438203d3e20323131303636.roa (raw, json)
Hash identifier:          I2S96ixXf4HB+eQJMKclkpUUi6trwlEyofNgOundUqI=
Subject key identifier:   D3:3E:A0:DB:82:7B:97:37:A2:73:C4:E5:03:32:D9:EB:75:66:93:05
Certificate issuer:       /CN=20595BDBAD09C7D604202305854D1DF14F190959
Certificate serial:       2F661DC3DA9B3F5BD8840AB9822B6759B069863C
Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633133303a3a2f34342d3438203d3e20323131303636.roa
Signing time:             Sun 30 Mar 2025 10:39:12 +0000
ROA not before:           Sun 30 Mar 2025 10:34:12 +0000
ROA not after:            Sun 29 Mar 2026 10:39:12 +0000
asID:                     211066
IP address blocks:        2a06:1283:c130::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:66:1d:c3:da:9b:3f:5b:d8:84:0a:b9:82:2b:67:59:b0:69:86:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959
        Validity
            Not Before: Mar 30 10:34:12 2025 GMT
            Not After : Mar 29 10:39:12 2026 GMT
        Subject: CN=D33EA0DB827B9737A273C4E50332D9EB75669305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:3d:4e:64:6e:3a:20:66:56:e7:60:52:85:
                    ac:25:64:c2:5c:25:5a:8f:5a:29:bc:dd:d8:35:6a:
                    94:d4:ac:8e:c4:29:3f:b1:22:2f:f4:89:d6:a7:41:
                    db:5e:38:85:68:84:1c:85:11:a5:45:6a:86:17:04:
                    10:ac:03:14:a7:21:9a:ef:f3:61:f7:04:fa:aa:f2:
                    62:14:5b:8f:fb:9f:3d:1f:a3:7a:f7:f8:89:8e:e1:
                    b7:ea:56:fc:e1:5a:15:90:21:c7:9a:5f:e5:28:46:
                    03:88:d6:70:12:94:35:6d:6b:af:5b:ba:d1:76:7a:
                    5a:fc:27:54:92:15:13:a8:64:c5:5c:89:70:25:07:
                    24:1b:a4:c9:a1:20:7c:63:f0:3b:95:a1:50:ea:22:
                    4b:91:49:b0:52:3b:f0:22:02:25:7c:70:df:53:84:
                    5e:04:30:d9:61:52:a0:cf:3d:63:b4:ea:b9:8d:dc:
                    71:08:2a:ad:70:e0:2d:0d:9e:df:57:d5:2b:be:c5:
                    00:2e:b5:73:66:53:b6:6d:c6:4d:31:81:0e:42:4e:
                    0e:73:c4:dc:f4:b2:66:e5:69:a1:69:50:0c:b3:35:
                    22:ca:ff:c9:fc:7f:7b:9c:a9:37:26:a7:34:65:0c:
                    b5:bd:f3:31:cf:71:93:69:71:bb:c1:18:d3:fb:d6:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3E:A0:DB:82:7B:97:37:A2:73:C4:E5:03:32:D9:EB:75:66:93:05
            X509v3 Authority Key Identifier:
                keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633133303a3a2f34342d3438203d3e20323131303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c130::/44

    Signature Algorithm: sha256WithRSAEncryption
         55:33:e3:ba:27:04:1d:79:be:2b:f4:df:b8:27:98:ec:c1:9c:
         e2:7d:eb:0f:d8:04:49:ec:62:35:90:f6:f3:f5:ce:74:95:be:
         51:33:f2:bf:3a:a9:3b:ae:a2:d1:d3:f4:97:3c:b5:20:94:9a:
         27:8d:10:49:58:b5:66:2a:30:08:a0:6c:3d:a0:7f:1b:ab:47:
         d4:78:c5:3a:2a:65:48:52:49:3b:fc:70:3f:ac:ca:0a:4a:46:
         74:c1:05:3e:8a:ec:9d:2d:ac:c8:7b:45:ef:6b:0a:ab:f0:35:
         b6:ac:03:fe:90:6e:40:f8:25:3e:cb:0e:8b:36:5f:7f:56:7d:
         bd:39:89:02:a9:95:d7:d4:a8:74:c5:e4:33:95:80:ba:fd:76:
         d7:38:ca:9f:85:16:fe:aa:09:ae:f3:cd:89:d2:f1:71:80:8d:
         1e:e5:e0:6b:8a:95:7a:d8:50:b2:6a:86:d8:9f:d1:b5:44:d1:
         1c:1a:8d:dc:d3:31:09:41:fc:c8:2d:cb:0d:1c:57:7f:c2:a6:
         8b:f1:6d:e2:25:e7:39:b0:b6:40:6f:59:a8:55:43:7d:0a:be:
         d4:1a:fd:57:6f:bd:b1:ca:b0:ef:6d:c0:b7:46:2e:13:d6:97:
         29:ba:39:1e:3e:f7:7e:c4:89:9c:08:3c:a8:7c:78:9e:d7:52:
         21:d3:14:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----