Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa
File:                     326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (raw, json)
Hash identifier:          z2fbMMdTRhRUpcDHMD2rvY/J1s4P2i8N3FhzYltODNc=
Subject key identifier:   F0:28:F1:11:E6:49:60:F2:78:EE:F2:E2:E0:08:6F:A0:7B:B9:DE:71
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       14BBAB6742050BA6723FFC3A7A57F5D6C02B7B9A
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa
Signing time:             Sat 08 Mar 2025 06:44:20 +0000
ROA not before:           Sat 08 Mar 2025 06:39:20 +0000
ROA not after:            Sat 07 Mar 2026 06:44:20 +0000
asID:                     215171
IP address blocks:        2a14:7581:4310::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bb:ab:67:42:05:0b:a6:72:3f:fc:3a:7a:57:f5:d6:c0:2b:7b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Mar  8 06:39:20 2025 GMT
            Not After : Mar  7 06:44:20 2026 GMT
        Subject: CN=F028F111E64960F278EEF2E2E0086FA07BB9DE71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:53:80:e8:ec:27:63:dd:22:ba:58:4b:5d:87:
                    b2:0a:8c:bb:1e:b7:6c:8b:35:69:a5:9c:a8:13:76:
                    b1:70:0a:dd:3e:26:c0:9c:4c:37:fe:f3:98:ef:37:
                    f0:89:56:f9:4f:02:6f:be:e9:0e:ba:10:cc:50:50:
                    76:5b:fa:b3:27:78:1b:0c:d2:06:f0:b9:8b:fe:e8:
                    90:36:a4:6c:fe:88:83:68:16:5a:ac:eb:53:2a:f6:
                    ee:76:05:82:74:b3:dd:95:f7:f5:c0:0a:03:65:83:
                    f5:2e:4a:95:8e:2c:26:cb:69:9f:05:ec:9c:46:05:
                    3f:dd:c3:c2:b7:9e:e5:cb:56:99:0c:6d:c8:14:92:
                    89:a9:4d:0e:bf:0e:e4:c2:35:88:f5:a6:ec:fe:cc:
                    a6:f5:1e:ca:17:c3:de:8f:61:cc:2e:e7:c9:f5:7a:
                    f7:c3:4e:2d:8c:81:43:10:98:df:cc:db:c4:a9:fa:
                    fc:89:53:a5:15:c7:32:92:8a:9d:04:48:3e:a8:b1:
                    9e:55:3b:b8:96:f9:95:fa:30:f8:28:45:19:d6:94:
                    a1:f8:1a:51:4f:c0:f2:6c:3b:7d:bf:16:3d:8f:5f:
                    a0:1d:62:7a:95:34:ef:8d:5a:af:9e:67:ed:de:ad:
                    f8:66:a1:29:d7:61:6c:8a:b5:c0:bd:94:06:6e:28:
                    ab:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:28:F1:11:E6:49:60:F2:78:EE:F2:E2:E0:08:6F:A0:7B:B9:DE:71
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:4310::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:4a:a7:7e:a8:53:21:a1:08:73:86:e8:55:68:65:6d:e5:8e:
         1f:12:1f:18:9a:5f:00:52:7a:75:d0:c5:16:cc:c0:bd:8b:c9:
         ee:5f:3b:cd:c4:f1:35:7b:83:b9:32:e1:d7:0a:d9:0d:03:1f:
         bd:f2:5a:ad:5b:19:f3:ef:6c:e3:51:2a:f6:81:e1:60:92:10:
         99:5e:e7:d3:71:f6:fb:8c:54:26:17:86:08:3b:20:30:c4:21:
         61:8d:69:fb:66:5a:21:b7:f3:4f:1c:b5:2b:57:66:2e:2d:dd:
         a7:7c:cf:74:cc:43:9d:d5:12:8e:42:9f:23:e8:20:67:8f:43:
         2d:17:2f:65:a7:b8:cd:29:ad:4d:8a:a2:d4:8d:95:6d:5e:a6:
         83:47:f7:19:db:fe:de:bd:e0:42:bf:51:c1:b6:ae:f2:d2:88:
         8e:55:56:14:06:0a:f8:a7:08:8a:02:6e:16:0f:a4:b9:af:3d:
         a8:51:ef:14:d9:c8:e2:9a:95:dd:21:90:d6:1b:f9:24:6f:0e:
         bc:ab:2e:c7:93:f0:70:fe:bf:f0:e9:c1:8e:45:2d:68:c5:5b:
         fc:b7:15:02:61:ca:0e:55:4d:9e:2c:15:a4:24:da:23:3c:87:
         84:69:92:02:9c:b6:fb:66:92:19:6d:73:84:f5:bc:0d:24:fa:
         72:1b:25:5a
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUFLurZ0IFC6ZyP/w6elf11sAre5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF
MEFGQjM4QzAeFw0yNTAzMDgwNjM5MjBaFw0yNjAzMDcwNjQ0MjBaMDMxMTAvBgNV
BAMTKEYwMjhGMTExRTY0OTYwRjI3OEVFRjJFMkUwMDg2RkEwN0JCOURFNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAU4Do7Cdj3SK6WEtdh7IKjLse
t2yLNWmlnKgTdrFwCt0+JsCcTDf+85jvN/CJVvlPAm++6Q66EMxQUHZb+rMneBsM
0gbwuYv+6JA2pGz+iINoFlqs61Mq9u52BYJ0s92V9/XACgNlg/UuSpWOLCbLaZ8F
7JxGBT/dw8K3nuXLVpkMbcgUkompTQ6/DuTCNYj1puz+zKb1HsoXw96PYcwu58n1
evfDTi2MgUMQmN/M28Sp+vyJU6UVxzKSip0ESD6osZ5VO7iW+ZX6MPgoRRnWlKH4
GlFPwPJsO32/Fj2PX6AdYnqVNO+NWq+eZ+3erfhmoSnXYWyKtcC9lAZuKKvRAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU8CjxEeZJYPJ47vLi4AhvoHu53nEwHwYDVR0j
BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4
NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE
QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz
NDNhMzczNTM4MzEzYTM0MzMzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz
MTM1MzEzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gUMQMA0GCSqGSIb3DQEBCwUAA4IBAQAp
Sqd+qFMhoQhzhuhVaGVt5Y4fEh8Yml8AUnp10MUWzMC9i8nuXzvNxPE1e4O5MuHX
CtkNAx+98lqtWxnz72zjUSr2geFgkhCZXufTcfb7jFQmF4YIOyAwxCFhjWn7Zloh
t/NPHLUrV2YuLd2nfM90zEOd1RKOQp8j6CBnj0MtFy9lp7jNKa1NiqLUjZVtXqaD
R/cZ2/7eveBCv1HBtq7y0oiOVVYUBgr4pwiKAm4WD6S5rz2oUe8U2cjimpXdIZDW
G/kkbw68qy7Hk/Bw/r/w6cGORS1oxVv8txUCYcoOVU2eLBWkJNojPIeEaZICnLb7
ZpIZbXOE9bwNJPpyGyVa
-----END CERTIFICATE-----