Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa
File:                     326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (raw, json)
Hash identifier:          te+8Q1RQF+/El0aKCot2iG7DWX0UbXJkKUaUr9PfYwE=
Subject key identifier:   DF:29:88:01:40:7B:F1:05:00:C9:7C:05:F5:58:CE:72:B3:9D:57:39
Certificate issuer:       /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Certificate serial:       1E9B97B5358840F0C1186783ADC126BC0F171F
Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa
Signing time:             Fri 11 Apr 2025 01:21:12 +0000
ROA not before:           Fri 11 Apr 2025 01:16:12 +0000
ROA not after:            Fri 10 Apr 2026 01:21:12 +0000
asID:                     215605
IP address blocks:        2a0a:6044:8000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9b:97:b5:35:88:40:f0:c1:18:67:83:ad:c1:26:bc:0f:17:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
        Validity
            Not Before: Apr 11 01:16:12 2025 GMT
            Not After : Apr 10 01:21:12 2026 GMT
        Subject: CN=DF298801407BF10500C97C05F558CE72B39D5739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ac:f4:a4:18:2c:29:a5:42:97:e2:e9:72:ef:
                    69:7f:b0:c0:40:88:4d:36:41:91:38:ba:16:31:8a:
                    22:cf:fd:95:3a:a8:cf:83:f7:ee:03:ac:57:ad:bd:
                    aa:4c:de:4b:2f:e6:36:21:c6:a1:88:d9:39:e6:16:
                    d1:04:eb:73:83:b9:3f:5d:a2:e2:8e:50:b0:98:eb:
                    64:2f:9d:ec:54:7a:17:20:e9:b3:92:6e:84:e5:6d:
                    fd:a5:c2:88:3d:31:e0:23:39:52:fe:fc:3b:55:27:
                    a2:f8:e7:da:63:8a:cb:35:7a:27:18:70:70:06:57:
                    62:ec:5c:4f:61:bc:a9:37:60:d5:51:a2:79:d1:c6:
                    dd:f3:70:be:4d:d8:80:7f:0f:b1:12:bb:bd:d1:35:
                    01:7e:da:b0:ea:cf:a6:58:2f:7c:53:ec:68:46:25:
                    23:32:de:d9:c7:20:4d:17:bb:9e:cf:16:75:7a:26:
                    a3:1b:0a:6f:40:c9:36:f6:e3:3c:bc:cd:f1:9b:a4:
                    34:e7:05:de:0a:4e:c0:ad:06:7c:88:36:4d:0c:2d:
                    76:3e:56:91:54:ad:83:8b:b1:00:7a:a8:96:0d:fa:
                    90:55:96:9f:a8:b4:b0:2a:aa:27:f8:49:96:11:ed:
                    68:4a:6d:39:13:5d:ad:c4:06:50:48:cd:ee:2b:15:
                    44:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:29:88:01:40:7B:F1:05:00:C9:7C:05:F5:58:CE:72:B3:9D:57:39
            X509v3 Authority Key Identifier:
                keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         83:86:56:1d:64:65:a9:71:de:e8:c0:a7:69:04:d2:70:dd:69:
         64:80:be:e1:a8:08:a0:47:b4:0a:3f:f8:ad:c5:b4:f9:f1:90:
         a0:9c:88:b9:9f:42:ed:a3:3a:b8:46:3e:67:cc:72:f9:fc:9a:
         15:d6:88:08:d5:a4:18:5c:73:13:fb:2c:fb:ba:93:c3:ea:04:
         cd:b4:0d:76:0d:5f:b0:80:c3:f3:d4:e0:78:9b:cf:a0:69:8b:
         94:16:d1:24:de:6e:65:c2:05:89:ee:e5:a1:1d:00:09:b8:cc:
         54:30:c7:ee:bf:8e:49:d3:ed:55:6e:1f:08:d9:55:1c:e4:59:
         18:c0:4b:3e:eb:db:9b:7a:c0:5a:f6:5e:53:30:4b:a6:47:ca:
         5d:7f:9d:81:7e:4a:fe:30:07:46:27:1a:1e:da:ee:f9:3a:9c:
         b9:92:e9:03:b5:3d:36:1c:61:2a:fc:19:98:93:38:d4:62:3f:
         db:de:9f:61:19:5d:18:60:00:95:53:d7:db:43:1c:1d:bf:5a:
         89:8e:d8:a5:15:2b:31:0e:59:13:43:2c:05:c8:6d:a5:fc:3e:
         37:bc:0b:bc:9a:56:ff:a5:44:8f:e0:e5:18:5b:43:e8:2e:e0:
         1b:d8:86:57:d2:42:1a:4b:45:a8:a9:9e:b5:88:dc:cf:96:96:
         f6:1a:f7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----