Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa
File:                     326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (raw, json)
Hash identifier:          QHn6tZLY5zwuhSPqOA8QQMb0D6GsyTP/mqBIqGqENAM=
Subject key identifier:   5B:BA:6E:6D:BC:E8:9A:07:A5:C1:30:19:FC:D8:8F:DB:12:0A:52:B1
Certificate issuer:       /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Certificate serial:       172EFDDF80350466C7A19C8E226CFC95327B633B
Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa
Signing time:             Fri 11 Apr 2025 01:21:11 +0000
ROA not before:           Fri 11 Apr 2025 01:16:11 +0000
ROA not after:            Fri 10 Apr 2026 01:21:11 +0000
asID:                     214393
IP address blocks:        2a0a:6044:8ff0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2e:fd:df:80:35:04:66:c7:a1:9c:8e:22:6c:fc:95:32:7b:63:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
        Validity
            Not Before: Apr 11 01:16:11 2025 GMT
            Not After : Apr 10 01:21:11 2026 GMT
        Subject: CN=5BBA6E6DBCE89A07A5C13019FCD88FDB120A52B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:76:6b:b9:fd:cf:99:8e:53:11:90:9a:43:
                    10:b5:01:b3:df:03:9f:6b:a6:e4:09:5d:ee:3d:bf:
                    96:40:b6:bb:2e:f3:f3:87:9a:dc:93:82:1f:b6:c5:
                    7d:c4:8d:39:58:ab:80:30:70:c8:68:72:ca:52:1f:
                    ed:c6:9b:a1:63:a9:52:80:0f:52:8b:3e:91:a7:88:
                    97:cb:4b:ee:61:79:a6:84:8d:03:92:b9:54:92:e3:
                    44:37:81:f7:8a:b3:d7:90:2f:78:3f:5d:2b:71:f8:
                    82:15:09:54:bb:40:fe:a7:b5:69:59:12:9a:a0:13:
                    b4:7e:ca:54:b2:ee:98:5a:c4:1d:ef:56:de:58:c9:
                    7d:1f:d7:03:76:a9:52:86:95:39:42:1c:b6:f6:37:
                    d9:81:17:4f:5f:40:57:7d:e6:77:ed:dd:14:1a:3b:
                    9c:c4:b2:c1:b3:aa:b4:1c:68:de:20:23:59:c6:bf:
                    77:ad:b8:54:bc:ab:4f:39:12:0d:d6:e6:47:5d:c3:
                    17:27:8a:22:c2:23:2f:60:06:87:45:51:46:33:1a:
                    eb:71:58:26:e0:1e:b0:02:3e:7e:eb:52:d5:77:d7:
                    6b:23:04:03:54:f3:a8:33:67:cc:55:77:8e:33:f5:
                    f1:c8:eb:05:8e:4e:16:47:71:6d:47:56:8b:29:29:
                    83:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BA:6E:6D:BC:E8:9A:07:A5:C1:30:19:FC:D8:8F:DB:12:0A:52:B1
            X509v3 Authority Key Identifier:
                keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3c:2d:48:bd:a3:65:fa:fd:28:e8:c9:7f:71:75:43:6b:c6:da:
         9d:09:72:29:9b:18:4d:d4:36:9e:5d:e0:e0:34:82:be:ba:bb:
         9a:a2:6d:ad:98:bc:e9:5f:f2:8e:4c:6f:92:68:56:3b:ee:aa:
         6b:4d:7e:46:62:81:aa:33:b8:55:c9:af:17:01:68:68:a4:e0:
         82:44:d3:55:63:e0:c4:f8:b3:bd:8a:c8:50:01:60:a8:ba:af:
         97:fe:e5:2a:07:8c:30:3f:73:d7:3f:37:56:fb:87:13:29:f0:
         98:e7:33:ad:13:8f:5d:e2:d8:9f:17:cb:5c:37:85:e8:ca:c2:
         ec:4d:a7:05:95:3d:72:49:ee:48:97:80:59:ae:05:f8:73:d0:
         5f:47:d7:6b:cc:92:9c:32:7a:8f:78:33:a0:f0:5b:97:29:e2:
         2e:51:b1:1a:0a:37:5e:94:e1:7e:8f:eb:f6:03:fb:69:fc:32:
         94:b6:df:54:8a:d3:ea:df:60:8b:5c:10:9f:aa:cf:4a:44:ed:
         7b:fd:3e:8a:2a:cd:0d:12:d5:6f:34:fe:f0:92:15:14:ae:65:
         d7:02:df:66:95:b2:88:c6:f9:5a:56:37:b5:34:6f:0e:d7:51:
         74:e5:df:e7:74:2c:7d:22:91:9d:6f:4a:73:d7:b8:53:fb:aa:
         fa:61:59:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----