Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430393a3a2f34382d3438203d3e20323134323233.roa
File:                     326130613a363034343a363430393a3a2f34382d3438203d3e20323134323233.roa (raw, json)
Hash identifier:          eCEK+yM9jVZwcza/zKNUCq6Q/P7RdirvvA3W3giolog=
Subject key identifier:   A6:FC:72:D4:6F:A6:E8:55:22:FF:78:ED:D4:26:CD:B2:8B:B3:CB:5A
Certificate issuer:       /CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
Certificate serial:       447CE0B88AF3CB32BA8D88DE1082F62A74EFB8B5
Authority key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430393a3a2f34382d3438203d3e20323134323233.roa
Signing time:             Sun 06 Apr 2025 19:20:03 +0000
ROA not before:           Sun 06 Apr 2025 19:15:03 +0000
ROA not after:            Sun 05 Apr 2026 19:20:03 +0000
asID:                     214223
IP address blocks:        2a0a:6044:6409::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7c:e0:b8:8a:f3:cb:32:ba:8d:88:de:10:82:f6:2a:74:ef:b8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
        Validity
            Not Before: Apr  6 19:15:03 2025 GMT
            Not After : Apr  5 19:20:03 2026 GMT
        Subject: CN=A6FC72D46FA6E85522FF78EDD426CDB28BB3CB5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:de:60:3c:72:62:a2:a7:fc:e1:b5:f2:02:67:
                    45:7d:27:b9:f2:e5:9e:89:ef:87:07:a1:fa:69:d6:
                    f0:73:fe:1b:36:47:67:48:d8:c4:ac:e0:e7:47:ee:
                    3c:33:13:9c:cc:f4:ff:05:90:e3:3b:57:b6:be:9c:
                    b4:62:03:1f:fc:e5:db:77:7e:5f:b2:83:a2:78:75:
                    26:e7:b7:c9:fb:fa:07:28:58:60:94:c1:1e:2d:5d:
                    81:1d:64:2b:01:03:d1:60:25:9b:73:c7:25:69:11:
                    56:ee:7f:68:84:b8:28:34:d5:ec:2b:53:f2:8b:2c:
                    7c:bf:e3:a2:42:5e:27:fa:4c:a5:9a:32:6a:8a:01:
                    e8:d2:3c:58:65:57:27:84:19:e4:47:fd:ef:0c:b1:
                    9c:bc:8a:ac:02:2d:b6:e9:95:e9:11:fe:54:e6:9a:
                    0a:17:67:19:af:80:d6:63:bc:ac:c0:79:c6:40:bf:
                    02:90:3d:a7:8c:14:e1:23:94:4c:b0:2f:0d:a1:2b:
                    9a:44:72:d6:0e:e4:7f:5b:6c:eb:5a:88:45:95:25:
                    e8:96:37:05:67:f0:b9:69:a6:c2:57:a4:f1:0b:d9:
                    42:f9:37:a0:29:69:2e:1c:db:3a:4f:a2:f2:a1:93:
                    ab:60:29:74:d0:93:11:49:1c:2d:94:e0:f5:c9:d4:
                    5c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FC:72:D4:6F:A6:E8:55:22:FF:78:ED:D4:26:CD:B2:8B:B3:CB:5A
            X509v3 Authority Key Identifier:
                keyid:ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430393a3a2f34382d3438203d3e20323134323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6409::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:79:de:a0:55:97:5e:35:27:4a:4c:ff:49:ed:a5:e7:9f:ad:
         95:e0:be:3a:b4:3b:97:de:c4:a7:08:95:d7:b8:87:42:4f:dc:
         7d:f1:2a:4b:ae:78:e7:db:df:1f:a5:da:8f:ff:c4:f9:0e:b6:
         ef:ec:56:b2:84:1b:27:b4:31:7e:8f:4e:f5:cf:54:33:50:02:
         3f:7e:b9:4b:9b:d8:aa:99:1f:5b:30:d5:a8:e3:d3:df:44:9f:
         df:6b:73:2c:19:ef:d2:3e:6a:32:73:4a:a0:3a:b0:60:b2:b3:
         20:42:7e:7f:d9:32:9d:17:6b:8a:34:13:9e:4b:e2:48:3b:10:
         a7:60:0f:71:ed:c4:67:d6:4b:84:7a:b8:62:e2:c5:78:cd:0a:
         4f:15:a8:a0:5f:40:46:8c:73:70:cc:19:77:8e:75:9f:63:aa:
         a2:72:e2:bb:3c:b5:87:9d:9c:35:3e:91:03:ff:72:45:3b:a0:
         c5:cf:8f:53:a3:49:88:0a:7a:e3:f7:b3:fa:48:a7:eb:b5:7c:
         ed:2c:d7:5e:15:98:88:f3:4a:88:ed:e1:cf:e5:dc:74:b1:23:
         a6:71:9a:02:be:48:e5:d8:4e:1f:ce:93:3b:16:02:df:cf:e7:
         c7:9c:63:62:0d:2e:d7:02:5d:ae:8b:8f:23:ea:79:1e:ca:fb:
         73:3f:c4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----