Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa
File:                     326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (raw, json)
Hash identifier:          7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk=
Subject key identifier:   74:25:70:20:2A:40:59:1F:07:65:E0:E5:D7:C8:CF:2B:89:1A:0F:6F
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       46902C2036285BFAAADBA8B025E4F902B5742132
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa
Signing time:             Sat 01 Mar 2025 21:39:02 +0000
ROA not before:           Sat 01 Mar 2025 21:34:02 +0000
ROA not after:            Sat 28 Feb 2026 21:39:02 +0000
asID:                     215171
IP address blocks:        2a14:7581:4940::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:90:2c:20:36:28:5b:fa:aa:db:a8:b0:25:e4:f9:02:b5:74:21:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Mar  1 21:34:02 2025 GMT
            Not After : Feb 28 21:39:02 2026 GMT
        Subject: CN=742570202A40591F0765E0E5D7C8CF2B891A0F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5b:7b:f0:0a:48:f0:4b:86:32:5c:ce:0c:81:
                    bf:3d:5b:15:32:a3:0c:b5:d3:73:85:a3:c9:86:7b:
                    a5:f5:76:8d:f7:85:b6:9f:13:ab:43:84:a3:21:04:
                    bb:05:3a:f5:32:bb:22:19:3c:af:4e:37:c0:ad:27:
                    da:ef:29:43:dd:6d:fa:56:06:f2:46:d7:f8:9c:b9:
                    c9:08:e7:5a:53:3b:b6:c1:33:52:c8:99:38:53:01:
                    b3:22:f9:7f:51:0d:5d:cb:92:c4:d3:3f:15:91:3e:
                    87:69:75:06:3c:e1:8a:c5:37:0a:b2:9a:b1:f7:c4:
                    55:0e:a6:be:eb:e4:bf:6e:29:a6:26:df:94:59:c0:
                    f7:ee:73:0f:38:08:89:44:1f:f7:30:80:75:8c:36:
                    39:ee:86:05:0a:0e:b0:76:f0:9d:aa:33:38:e8:73:
                    ca:f4:0f:34:52:08:e1:ad:4f:f3:b5:8f:c5:2a:1c:
                    49:33:d9:4f:a0:ae:64:f8:e0:20:e2:b9:b1:60:41:
                    10:ce:e6:08:c4:45:03:e0:1f:12:5c:2c:6e:b0:22:
                    e1:4f:18:3e:ab:e4:65:89:5f:e8:c4:f6:9c:9e:52:
                    12:26:50:9f:51:3e:e6:64:04:43:36:75:50:9e:f3:
                    cf:30:1f:e3:0f:e4:e6:d2:fc:f2:d6:d4:77:48:c9:
                    ba:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:25:70:20:2A:40:59:1F:07:65:E0:E5:D7:C8:CF:2B:89:1A:0F:6F
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:4940::/44

    Signature Algorithm: sha256WithRSAEncryption
         b8:2a:f4:ea:2e:b9:65:30:65:bb:bb:d7:9a:ee:d4:21:70:92:
         e5:ea:07:fd:69:87:21:ca:bb:a4:5b:18:36:37:0c:bd:9e:1c:
         fc:24:c2:09:18:99:5a:40:a1:8f:f7:7a:4d:88:2c:e9:d8:b5:
         2a:6d:88:50:00:36:77:f7:ae:f8:12:ea:98:79:eb:f0:24:8f:
         70:fb:bf:2b:29:57:52:8e:91:99:69:f8:90:37:14:32:fd:4e:
         f3:50:12:83:12:7c:b0:65:de:55:eb:b7:08:dc:8e:d7:ea:25:
         ea:b6:67:d8:f2:0c:29:0d:c7:11:bc:bd:b6:6a:ba:3c:4f:5a:
         11:fd:13:d1:f1:1d:24:19:32:7d:23:41:93:bf:48:2d:05:3d:
         9f:7a:78:49:00:d4:cb:91:f8:af:65:4b:1c:11:0c:dd:c5:cd:
         03:ab:85:80:bd:ee:5f:ac:4c:48:48:f1:42:df:f3:9b:8f:ad:
         ff:55:86:b2:3d:d9:6f:05:54:6b:87:34:a9:82:ce:76:3a:a2:
         52:da:8d:a0:38:a1:e2:da:33:28:62:cc:5d:b3:19:bb:73:cc:
         d6:f1:05:7a:cf:8f:9c:3d:17:96:53:90:4a:fb:89:44:f9:51:
         bc:7d:aa:95:92:61:c1:77:ce:62:46:8a:18:7b:8c:e5:41:86:
         28:46:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----