Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a646130343a3a2f33322d3332203d3e20323135333130.roa
File:                     326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (raw, json)
Hash identifier:          +nnxoDraZp1GnJqnPBkJVf2tvjIfmjIdjzZ1kJJ3DOg=
Subject key identifier:   23:94:19:B4:86:CF:1E:C1:A3:B5:50:0E:C6:4B:19:1C:61:EF:93:2F
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       1240E4E7648E57BA503DB27455A127F9E7E477A3
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a646130343a3a2f33322d3332203d3e20323135333130.roa
Signing time:             Mon 10 Mar 2025 18:38:15 +0000
ROA not before:           Mon 10 Mar 2025 18:33:15 +0000
ROA not after:            Mon 09 Mar 2026 18:38:15 +0000
asID:                     215310
IP address blocks:        2a13:da04::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:40:e4:e7:64:8e:57:ba:50:3d:b2:74:55:a1:27:f9:e7:e4:77:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: Mar 10 18:33:15 2025 GMT
            Not After : Mar  9 18:38:15 2026 GMT
        Subject: CN=239419B486CF1EC1A3B5500EC64B191C61EF932F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0c:54:2a:69:48:a8:eb:fb:08:0e:4c:a1:3a:
                    ff:c8:ba:2c:bf:a2:32:dd:9d:ba:05:ea:ee:15:ea:
                    bd:c7:0a:26:f8:82:e1:ff:9a:6e:a2:6f:72:f3:ee:
                    42:6c:93:43:ee:5b:24:e8:54:33:1c:cf:57:d5:2a:
                    61:0e:79:3b:8c:8f:cc:74:67:91:4e:f2:8e:de:39:
                    d6:03:6c:6e:d7:a2:85:f5:eb:77:0f:ff:55:13:32:
                    b3:f0:02:bc:93:40:06:69:78:14:07:88:f7:12:eb:
                    4e:95:a8:e8:e6:5f:cb:bf:34:9d:22:71:43:08:93:
                    21:93:ac:b3:4a:04:3b:81:e7:b3:b8:c3:33:99:7b:
                    38:29:68:c8:66:56:cd:44:fd:b0:1b:88:d6:b0:c3:
                    66:ed:92:dd:9c:72:3f:8c:6d:db:97:92:24:a3:12:
                    aa:b0:14:33:7c:5c:f9:66:4b:4c:79:0b:7a:20:f9:
                    aa:26:1e:58:fa:88:91:71:cb:9f:40:3b:78:8e:6c:
                    07:f9:72:de:62:43:5c:8b:8c:14:55:4a:fe:07:d4:
                    53:ef:85:9e:c9:73:c5:d0:71:4e:49:e5:f4:92:fd:
                    1d:8c:9e:1a:d0:33:16:cf:f9:df:97:02:1e:89:56:
                    4a:61:cb:44:34:67:65:d8:ba:6d:1b:07:f7:a2:c5:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:94:19:B4:86:CF:1E:C1:A3:B5:50:0E:C6:4B:19:1C:61:EF:93:2F
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a646130343a3a2f33322d3332203d3e20323135333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:da04::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:9f:80:75:a6:67:38:83:d6:e4:74:06:bd:84:da:41:9c:6d:
         71:36:98:59:3c:20:46:5f:c6:75:ee:08:8d:95:1a:33:a3:21:
         71:ff:eb:be:c3:8c:9c:23:b0:7e:08:b3:2e:82:ec:bf:05:b6:
         9f:89:bd:c1:fd:81:40:15:3e:b7:b9:96:93:a9:b5:95:5b:0e:
         81:1e:f9:ff:65:1e:29:cd:a0:09:38:b9:39:98:54:18:5f:68:
         1b:84:bb:07:93:c8:ae:50:c7:74:45:32:f8:05:d4:37:07:6f:
         e7:fc:81:77:c2:26:82:f9:8f:7f:1a:f5:89:2f:c4:03:d8:9e:
         53:85:73:ca:86:4f:81:6d:a1:9a:43:13:58:80:10:cb:05:fd:
         08:dc:ab:57:a5:f9:d8:3d:c0:e3:96:12:5a:9c:8a:ab:27:60:
         e5:88:17:27:1e:cf:47:83:c2:ba:59:c3:28:30:13:3b:10:16:
         a1:fc:42:3e:da:be:16:62:b4:5a:c5:37:e1:43:00:e4:c9:94:
         89:ab:01:16:77:a9:6b:15:d2:29:05:21:ea:10:de:4c:fb:95:
         0f:7f:9d:dd:53:14:14:50:68:41:d6:22:1b:21:f1:9d:ff:c6:
         20:74:f0:8c:92:fe:fb:4d:5d:88:3e:2a:72:cd:2a:87:26:fb:
         c5:5b:8e:7f
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUEkDk52SOV7pQPbJ0VaEn+efkd6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmY0MjZmMTliYTY3YmM4OWRlNWFlNmRmNDg3YzFjOGMx
ZTc1MmUyNzAeFw0yNTAzMTAxODMzMTVaFw0yNjAzMDkxODM4MTVaMDMxMTAvBgNV
BAMTKDIzOTQxOUI0ODZDRjFFQzFBM0I1NTAwRUM2NEIxOTFDNjFFRjkzMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXDFQqaUio6/sIDkyhOv/Iuiy/
ojLdnboF6u4V6r3HCib4guH/mm6ib3Lz7kJsk0PuWyToVDMcz1fVKmEOeTuMj8x0
Z5FO8o7eOdYDbG7XooX163cP/1UTMrPwAryTQAZpeBQHiPcS606VqOjmX8u/NJ0i
cUMIkyGTrLNKBDuB57O4wzOZezgpaMhmVs1E/bAbiNaww2btkt2ccj+MbduXkiSj
EqqwFDN8XPlmS0x5C3og+aomHlj6iJFxy59AO3iObAf5ct5iQ1yLjBRVSv4H1FPv
hZ7Jc8XQcU5J5fSS/R2MnhrQMxbP+d+XAh6JVkphy0Q0Z2XYum0bB/eixclbAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUI5QZtIbPHsGjtVAOxksZHGHvky8wHwYDVR0j
BBgwFoAU/0JvGbpnvIneWubfSHwcjB51LicwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDY4YjA4MWUtYmE5My00NjVmLTliNmUtN2ZiZDYzYmRm
ZjYzLzAvRkY0MjZGMTlCQTY3QkM4OURFNUFFNkRGNDg3QzFDOEMxRTc1MkUyNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL18wSnZHYnBudkluZVd1YmZTSHdjakI1
MUxpYy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDY4YjA4MWUt
YmE5My00NjVmLTliNmUtN2ZiZDYzYmRmZjYzLzAvMzI2MTMxMzMzYTY0NjEzMDM0
M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzMTM1MzMzMTMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA
KhPaBDANBgkqhkiG9w0BAQsFAAOCAQEALp+AdaZnOIPW5HQGvYTaQZxtcTaYWTwg
Rl/Gde4IjZUaM6Mhcf/rvsOMnCOwfgizLoLsvwW2n4m9wf2BQBU+t7mWk6m1lVsO
gR75/2UeKc2gCTi5OZhUGF9oG4S7B5PIrlDHdEUy+AXUNwdv5/yBd8ImgvmPfxr1
iS/EA9ieU4VzyoZPgW2hmkMTWIAQywX9CNyrV6X52D3A45YSWpyKqydg5YgXJx7P
R4PCulnDKDATOxAWofxCPtq+FmK0WsU34UMA5MmUiasBFnepaxXSKQUh6hDeTPuV
D3+d3VMUFFBoQdYiGyHxnf/GIHTwjJL++01diD4qcs0qhyb7xVuOfw==
-----END CERTIFICATE-----