Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a383730333a3a2f34382d3438203d3e20323134353138.roa
File:                     326130613a363034343a383730333a3a2f34382d3438203d3e20323134353138.roa (raw, json)
Hash identifier:          nMz8R5yRV0NhDshW9eqtH+q8ysKGUihhxh8s0gmqFl4=
Subject key identifier:   3D:74:A6:27:2B:D0:34:77:9F:CB:B3:08:67:29:04:76:23:FB:0F:B8
Certificate issuer:       /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Certificate serial:       39B6CC39605C318AC4EBEDFAF403C167A603C065
Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a383730333a3a2f34382d3438203d3e20323134353138.roa
Signing time:             Fri 11 Apr 2025 01:21:12 +0000
ROA not before:           Fri 11 Apr 2025 01:16:12 +0000
ROA not after:            Fri 10 Apr 2026 01:21:12 +0000
asID:                     214518
IP address blocks:        2a0a:6044:8703::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b6:cc:39:60:5c:31:8a:c4:eb:ed:fa:f4:03:c1:67:a6:03:c0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
        Validity
            Not Before: Apr 11 01:16:12 2025 GMT
            Not After : Apr 10 01:21:12 2026 GMT
        Subject: CN=3D74A6272BD034779FCBB3086729047623FB0FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:22:00:e5:e3:db:d6:10:b0:17:c7:be:ab:
                    69:7c:90:73:9e:7e:df:75:75:41:94:23:61:7d:a7:
                    df:45:6e:36:e0:8b:c3:0b:dd:9e:fe:b1:1b:8d:c5:
                    74:02:0a:ee:fe:0f:5e:d1:83:2f:e3:48:b0:91:2b:
                    57:a8:b1:ec:e2:59:2f:3a:35:0d:3a:31:20:36:fe:
                    e0:e5:68:fc:7d:4b:4e:5d:60:79:85:e1:39:27:ae:
                    91:04:1c:7a:b6:c9:0b:8c:06:db:b7:11:af:7d:9c:
                    6d:02:44:df:a4:06:24:01:c3:95:c2:33:aa:f8:2b:
                    10:b2:a9:07:08:1f:7e:c8:0e:4d:3c:d0:34:3e:16:
                    6c:e7:2c:97:15:d4:66:e8:c1:f9:0b:b6:ed:3a:b2:
                    4a:52:6f:c0:5e:18:0f:ab:bb:37:1e:95:3d:d0:d4:
                    bf:f7:26:68:6c:2d:95:fe:1e:0d:c3:c9:f8:f2:60:
                    a3:4b:92:5a:6f:77:e3:68:35:0b:65:1a:f1:49:d0:
                    e1:2d:65:13:2b:14:a3:d1:9c:0a:bb:4f:96:95:a3:
                    dc:22:4a:eb:fe:92:00:59:e6:22:0b:4b:69:38:44:
                    8b:fc:27:fb:77:df:5a:1a:12:c5:9d:ac:4f:5d:7c:
                    13:9b:20:61:dc:36:c0:4f:b6:0b:92:c3:9f:22:3e:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:74:A6:27:2B:D0:34:77:9F:CB:B3:08:67:29:04:76:23:FB:0F:B8
            X509v3 Authority Key Identifier:
                keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a383730333a3a2f34382d3438203d3e20323134353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8703::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:10:c5:98:77:c1:df:f7:cd:bf:4d:c8:83:e0:71:62:a9:ce:
         5b:c7:8a:bb:86:fd:8f:31:04:06:42:da:d6:0b:86:41:ba:60:
         be:19:44:ca:68:fa:ba:f3:3f:a6:3f:e7:78:b3:fd:59:3d:6c:
         25:61:44:d3:4c:7a:db:e7:79:c1:cd:a0:e5:b2:59:8f:57:4c:
         d6:f5:5d:f4:ad:17:7a:81:a7:24:88:06:bf:0e:d7:31:30:f1:
         7f:57:37:e5:b5:9e:67:df:c0:80:8d:0f:c6:63:7f:7f:ca:17:
         88:34:c2:57:d3:8d:eb:fb:88:f1:66:90:68:3e:fa:5c:b1:c1:
         1e:ec:fd:eb:4a:a0:40:a2:21:10:cc:77:ba:cb:60:92:e4:25:
         0b:ff:1f:13:b0:13:bf:3a:0e:26:c8:19:0f:ff:e3:67:20:cb:
         42:0e:21:20:0f:ef:eb:5a:4c:2f:1b:e3:66:ca:31:00:b5:eb:
         af:75:5d:ff:52:00:16:1d:a5:42:f2:08:73:44:ad:96:65:0e:
         5e:b4:e5:16:88:4b:65:9a:08:b2:82:ae:f0:1e:91:0e:21:1d:
         73:da:98:a6:a0:21:ef:be:a9:c3:eb:13:6a:77:a6:6f:d0:9c:
         02:b2:bb:ee:84:5e:9a:86:ba:69:2c:07:5d:52:35:5f:56:3e:
         50:ce:a4:7b
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUObbMOWBcMYrE6+369APBZ6YDwGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM4OEFGNjI5QzcwMkREQTg4RkE2QkIyQTk1NURCOEYy
NEVEMkJCQzAeFw0yNTA0MTEwMTE2MTJaFw0yNjA0MTAwMTIxMTJaMDMxMTAvBgNV
BAMTKDNENzRBNjI3MkJEMDM0Nzc5RkNCQjMwODY3MjkwNDc2MjNGQjBGQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOpCIA5ePb1hCwF8e+q2l8kHOe
ft91dUGUI2F9p99Fbjbgi8ML3Z7+sRuNxXQCCu7+D17Rgy/jSLCRK1eoseziWS86
NQ06MSA2/uDlaPx9S05dYHmF4TknrpEEHHq2yQuMBtu3Ea99nG0CRN+kBiQBw5XC
M6r4KxCyqQcIH37IDk080DQ+FmznLJcV1GbowfkLtu06skpSb8BeGA+ruzcelT3Q
1L/3JmhsLZX+Hg3DyfjyYKNLklpvd+NoNQtlGvFJ0OEtZRMrFKPRnAq7T5aVo9wi
Suv+kgBZ5iILS2k4RIv8J/t331oaEsWdrE9dfBObIGHcNsBPtguSw58iPhQhAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUPXSmJyvQNHefy7MIZykEdiP7D7gwHwYDVR0j
BBgwFoAUQ4ivYpxwLdqI+muyqVXbjyTtK7wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2
MmNiLzQvNDM4OEFGNjI5QzcwMkREQTg4RkE2QkIyQTk1NURCOEYyNEVEMkJCQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5
ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy80Mzg4QUY2MjlDNzAyRERBODhGQTZCQjJB
OTU1REI4RjI0RUQyQkJDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvNC8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM4MzczMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzUzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRIcDMA0GCSqGSIb3DQEBCwUAA4IBAQAM
EMWYd8Hf982/TciD4HFiqc5bx4q7hv2PMQQGQtrWC4ZBumC+GUTKaPq68z+mP+d4
s/1ZPWwlYUTTTHrb53nBzaDlslmPV0zW9V30rRd6gackiAa/DtcxMPF/VzfltZ5n
38CAjQ/GY39/yheINMJX043r+4jxZpBoPvpcscEe7P3rSqBAoiEQzHe6y2CS5CUL
/x8TsBO/Og4myBkP/+NnIMtCDiEgD+/rWkwvG+NmyjEAteuvdV3/UgAWHaVC8ghz
RK2WZQ5etOUWiEtlmgiygq7wHpEOIR1z2pimoCHvvqnD6xNqd6Zv0JwCsrvuhF6a
hrppLAddUjVfVj5QzqR7
-----END CERTIFICATE-----