Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363431303a3a2f34382d3438203d3e20323134323233.roa
File:                     326130613a363034343a363431303a3a2f34382d3438203d3e20323134323233.roa (raw, json)
Hash identifier:          9lwecFjUgWAR1jqPOIwIBIuw9i2A3sNTOuf6ZF50tpM=
Subject key identifier:   DF:B6:F2:88:35:3E:D8:EA:89:ED:7E:AA:DC:E5:EA:40:FE:E8:9D:00
Certificate issuer:       /CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
Certificate serial:       6FFC3E39B82AF5540BA3CFFA395E95E6EFC1D8D4
Authority key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363431303a3a2f34382d3438203d3e20323134323233.roa
Signing time:             Sun 06 Apr 2025 20:03:38 +0000
ROA not before:           Sun 06 Apr 2025 19:58:38 +0000
ROA not after:            Sun 05 Apr 2026 20:03:38 +0000
asID:                     214223
IP address blocks:        2a0a:6044:6410::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fc:3e:39:b8:2a:f5:54:0b:a3:cf:fa:39:5e:95:e6:ef:c1:d8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
        Validity
            Not Before: Apr  6 19:58:38 2025 GMT
            Not After : Apr  5 20:03:38 2026 GMT
        Subject: CN=DFB6F288353ED8EA89ED7EAADCE5EA40FEE89D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b8:69:e7:00:75:b3:4a:73:a7:b6:5c:7a:9f:
                    cf:07:8c:34:97:b1:07:a6:6d:18:74:a8:3c:cf:67:
                    9e:04:ec:e1:72:64:d3:4c:4a:07:b4:63:1a:55:11:
                    01:5d:e4:fd:ed:08:49:f9:bf:35:dc:ce:8c:49:66:
                    06:e1:87:37:ac:49:cd:42:ce:52:a0:d8:61:05:27:
                    49:c3:88:8a:24:aa:2d:bd:bf:32:e6:7e:f4:0c:01:
                    74:56:72:41:45:f5:7a:9c:37:6b:b6:16:25:e2:a3:
                    3d:03:14:84:24:c8:c9:0e:69:f2:e9:54:8b:f8:52:
                    ea:6f:e1:6c:2e:4f:52:2d:bf:f8:20:c6:99:42:83:
                    ca:f9:0d:65:6c:b3:04:e4:30:09:2a:ca:a4:6f:79:
                    b8:94:bb:6f:d7:94:b1:93:97:7e:e5:ba:7d:ac:93:
                    71:10:30:bc:b8:0f:24:3c:2c:82:1d:2a:51:f0:7f:
                    7c:ae:61:44:82:4f:5e:ce:25:61:f4:07:2d:4b:9d:
                    5d:d6:9a:02:b0:52:23:b2:ba:86:91:ee:54:62:39:
                    3c:ce:eb:1f:42:35:31:b0:ec:0b:5f:57:65:7d:73:
                    d3:a2:df:24:68:a2:f4:f3:a2:fe:11:d0:d5:2c:77:
                    8b:d1:9b:8b:a2:07:73:32:6c:ef:70:be:c9:96:81:
                    19:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B6:F2:88:35:3E:D8:EA:89:ED:7E:AA:DC:E5:EA:40:FE:E8:9D:00
            X509v3 Authority Key Identifier:
                keyid:ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363431303a3a2f34382d3438203d3e20323134323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6410::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:20:a2:4e:1f:5b:cd:cb:fb:ed:45:37:3e:48:38:c7:a7:5e:
         6b:ea:1a:b1:88:67:e0:f6:f2:0c:dc:ef:7b:45:47:40:16:96:
         77:16:56:8e:b6:88:b7:02:32:d0:15:d5:e7:41:85:65:ad:b9:
         1d:0e:ab:7c:23:77:94:c6:03:ee:49:c7:41:3e:2e:ff:44:70:
         0f:c5:18:aa:c9:83:a5:77:c1:6b:3d:47:7b:83:c4:df:ac:68:
         e7:cc:be:00:bb:fd:e4:ab:b5:9b:c0:81:dc:59:3f:17:d7:80:
         f4:49:ed:b4:09:8b:d9:45:79:f4:f8:8a:16:b6:e2:38:79:6d:
         ea:d7:ab:1b:69:a2:c2:f3:51:f4:5a:10:fe:10:fa:0c:b9:1c:
         95:a5:ce:4a:00:ee:a8:d6:b6:ed:a4:d7:5b:6a:e3:f5:83:eb:
         29:cf:df:28:40:3b:0b:e7:5f:91:2d:e3:a5:38:a6:1e:4f:08:
         f4:1b:29:59:a7:51:e4:6c:73:58:10:89:3e:ea:dd:12:42:5a:
         44:b7:a3:5e:24:2c:7c:a3:4b:ed:ee:b7:91:05:b1:c8:84:6e:
         f1:f7:4c:c4:14:fb:9f:14:b1:f3:09:d2:ca:55:72:b5:51:54:
         23:25:74:40:53:bf:fc:46:7e:0c:06:ee:13:27:96:5a:6c:ab:
         29:6e:89:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----