Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa
File:                     326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (raw, json)
Hash identifier:          gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ=
Subject key identifier:   F5:3F:20:CA:D9:9D:0E:EF:C3:56:B9:BF:11:D4:BF:22:02:E0:A1:51
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       16097EA50AFADE62DD91333AF9A84D7C101AEB1A
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa
Signing time:             Mon 24 Feb 2025 06:20:02 +0000
ROA not before:           Mon 24 Feb 2025 06:15:02 +0000
ROA not after:            Mon 23 Feb 2026 06:20:02 +0000
asID:                     9422
IP address blocks:        2a14:7581:4320::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:09:7e:a5:0a:fa:de:62:dd:91:33:3a:f9:a8:4d:7c:10:1a:eb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Feb 24 06:15:02 2025 GMT
            Not After : Feb 23 06:20:02 2026 GMT
        Subject: CN=F53F20CAD99D0EEFC356B9BF11D4BF2202E0A151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6f:00:45:4d:2a:71:40:97:7f:62:5a:3d:c8:
                    08:61:01:f3:3a:c1:cd:f5:64:ad:6d:2b:41:b8:cc:
                    5a:c1:ad:32:c2:58:cb:c7:08:53:c5:e4:d2:c7:fd:
                    d0:52:56:95:67:98:28:9e:e0:e2:4e:94:f6:77:83:
                    ce:7d:43:f8:d2:db:72:70:16:18:ec:5e:47:9b:9a:
                    a3:4e:9f:a6:fd:3f:0f:13:8e:19:68:70:33:6c:cf:
                    96:df:0b:22:9f:70:f2:5e:a0:d0:28:30:d0:a6:bd:
                    ee:30:f0:32:ba:72:91:89:5a:61:f7:a7:13:61:e5:
                    b2:3b:90:7e:7b:b5:b8:ab:49:41:a2:1a:73:13:06:
                    c7:e4:4d:3d:28:cd:5b:50:63:7f:21:c6:2d:ef:f1:
                    c9:e3:95:3d:69:8d:ff:f0:3b:8f:bd:a7:fb:a6:83:
                    bc:dc:f3:a4:c9:c4:a8:e0:b4:0e:e7:2d:b6:f6:59:
                    d4:f4:fa:68:4c:b6:33:a3:fd:e7:05:c3:c8:7c:0f:
                    40:30:17:3c:8e:91:8e:ef:19:32:53:f0:65:a6:15:
                    3c:8e:a4:93:03:37:b2:bd:4f:4b:9c:e9:eb:fa:e3:
                    f9:be:5a:0c:ac:2f:b5:b5:4a:4a:7c:f7:d1:74:1d:
                    34:17:11:70:e3:c8:33:b9:78:7f:c4:0e:41:f5:69:
                    81:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3F:20:CA:D9:9D:0E:EF:C3:56:B9:BF:11:D4:BF:22:02:E0:A1:51
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:4320::/44

    Signature Algorithm: sha256WithRSAEncryption
         50:63:6d:93:51:39:64:0c:f0:21:64:e7:0f:75:5d:54:1f:a3:
         50:b6:28:ba:31:3d:f2:1a:3b:bb:65:60:8f:7c:dc:80:c1:fa:
         55:e4:cb:ee:15:59:a0:56:84:0d:49:75:31:36:c8:62:b3:cc:
         5a:b1:00:2e:ca:5e:c2:66:3f:54:aa:1a:a3:e8:06:17:ac:bb:
         db:5e:76:fa:47:80:60:ac:75:7f:45:0e:43:f0:77:c1:55:4d:
         50:49:4c:10:b6:4b:33:f8:a0:fc:83:8c:6c:a7:89:08:e5:f7:
         fa:ea:43:db:38:a2:e8:6f:59:3f:3b:72:ad:f0:ac:6a:26:a2:
         ed:20:1d:77:42:a3:a2:85:0b:81:7c:6b:d6:f9:b1:0e:57:d8:
         8b:b4:33:e2:c4:e1:2d:b9:61:3c:e2:ec:9f:6d:b6:e8:75:6e:
         86:1a:e4:32:e6:0a:a9:f3:68:4c:74:e9:e1:80:6f:65:0d:a4:
         5f:4e:2d:bf:5b:01:3b:8f:34:85:21:98:a9:43:84:0c:38:d0:
         3f:4e:7b:a5:49:85:c3:14:42:19:c3:4e:bc:0f:5d:d2:11:66:
         d8:58:61:f3:8c:da:26:71:76:01:a6:5b:9a:e1:c9:bc:08:fe:
         c2:92:37:f1:c5:98:3a:4d:ac:0c:52:5f:e2:1a:1a:f2:65:e9:
         42:34:32:f6
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgIUFgl+pQr63mLdkTM6+ahNfBAa6xowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF
MEFGQjM4QzAeFw0yNTAyMjQwNjE1MDJaFw0yNjAyMjMwNjIwMDJaMDMxMTAvBgNV
BAMTKEY1M0YyMENBRDk5RDBFRUZDMzU2QjlCRjExRDRCRjIyMDJFMEExNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwbwBFTSpxQJd/Ylo9yAhhAfM6
wc31ZK1tK0G4zFrBrTLCWMvHCFPF5NLH/dBSVpVnmCie4OJOlPZ3g859Q/jS23Jw
FhjsXkebmqNOn6b9Pw8TjhlocDNsz5bfCyKfcPJeoNAoMNCmve4w8DK6cpGJWmH3
pxNh5bI7kH57tbirSUGiGnMTBsfkTT0ozVtQY38hxi3v8cnjlT1pjf/wO4+9p/um
g7zc86TJxKjgtA7nLbb2WdT0+mhMtjOj/ecFw8h8D0AwFzyOkY7vGTJT8GWmFTyO
pJMDN7K9T0uc6ev64/m+WgysL7W1Skp899F0HTQXEXDjyDO5eH/EDkH1aYEDAgMB
AAGjggKBMIICfTAdBgNVHQ4EFgQU9T8gytmdDu/DVrm/EdS/IgLgoVEwHwYDVR0j
BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4
NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE
QzQ5MEUxMkUwQUZCMzhDLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF
BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz
NDNhMzczNTM4MzEzYTM0MzMzMjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzkz
NDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwQqFHWBQyAwDQYJKoZIhvcNAQELBQADggEBAFBjbZNR
OWQM8CFk5w91XVQfo1C2KLoxPfIaO7tlYI983IDB+lXky+4VWaBWhA1JdTE2yGKz
zFqxAC7KXsJmP1SqGqPoBhesu9tedvpHgGCsdX9FDkPwd8FVTVBJTBC2SzP4oPyD
jGyniQjl9/rqQ9s4ouhvWT87cq3wrGomou0gHXdCo6KFC4F8a9b5sQ5X2Iu0M+LE
4S25YTzi7J9ttuh1boYa5DLmCqnzaEx06eGAb2UNpF9OLb9bATuPNIUhmKlDhAw4
0D9Oe6VJhcMUQhnDTrwPXdIRZthYYfOM2iZxdgGmW5rhybwI/sKSN/HFmDpNrAxS
X+IaGvJl6UI0MvY=
-----END CERTIFICATE-----