Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa
File:                     326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (raw, json)
Hash identifier:          fR50iWKN91zeMKObuJZ1eZa1Tl9ML9P7Lc9Jyq3bDSI=
Subject key identifier:   F2:33:84:D8:DD:2E:FF:E3:8C:5F:C4:49:51:8A:AC:57:77:6C:B7:77
Certificate issuer:       /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Certificate serial:       3BD1BA64E3347B2232432D4D045A779D3DB11A95
Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa
Signing time:             Fri 11 Apr 2025 01:21:11 +0000
ROA not before:           Fri 11 Apr 2025 01:16:11 +0000
ROA not after:            Fri 10 Apr 2026 01:21:11 +0000
asID:                     8075
IP address blocks:        2a0a:6044:8ffe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d1:ba:64:e3:34:7b:22:32:43:2d:4d:04:5a:77:9d:3d:b1:1a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
        Validity
            Not Before: Apr 11 01:16:11 2025 GMT
            Not After : Apr 10 01:21:11 2026 GMT
        Subject: CN=F23384D8DD2EFFE38C5FC449518AAC57776CB777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:5e:27:9f:82:f6:f1:e8:f3:fd:be:e3:89:
                    a8:a5:47:25:bd:a4:df:ac:99:45:10:5d:95:53:43:
                    b3:32:07:55:f4:e7:3f:fb:9c:68:fe:f7:da:cd:c0:
                    60:82:8a:f9:32:d7:61:39:0f:74:a5:85:2a:ae:19:
                    44:22:f5:22:c1:89:3a:5d:79:2d:aa:fb:95:a6:6b:
                    ff:91:61:fa:8b:e5:a1:85:3b:94:75:9a:d0:4e:2a:
                    ee:3d:51:ab:19:7a:83:45:c4:3b:ef:2a:b5:e4:9d:
                    31:6e:74:4d:28:86:df:c3:ed:f7:b2:70:cf:02:61:
                    6a:8c:2f:ad:bf:05:93:2b:16:f8:51:62:3a:b2:87:
                    0c:71:8f:52:c5:14:06:44:0e:3e:87:6f:14:2d:ab:
                    76:90:7e:de:cd:fc:2e:86:4e:ca:18:27:e7:15:ec:
                    57:ce:cb:4d:31:0a:04:18:ee:c0:3c:78:68:a7:64:
                    4e:9c:c2:50:ad:b8:36:13:41:51:f9:10:df:1b:f3:
                    6b:ba:0f:23:dc:ce:1c:90:2f:4f:45:ce:91:e0:8b:
                    19:92:5f:a4:64:19:f2:57:58:66:54:be:26:67:4e:
                    03:d7:b3:ed:97:8d:97:b5:14:d4:55:40:11:50:87:
                    e1:0b:9b:fb:a4:8f:27:ec:11:cf:7b:56:b7:fb:b6:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:33:84:D8:DD:2E:FF:E3:8C:5F:C4:49:51:8A:AC:57:77:6C:B7:77
            X509v3 Authority Key Identifier:
                keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8ffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:ac:44:56:ab:a2:81:f1:48:a7:2c:77:65:ee:3f:ca:ff:a7:
         95:4b:ff:75:66:9e:35:d5:c8:04:65:0f:a5:c9:49:e5:dc:86:
         8b:c6:6b:2f:ad:12:d5:6a:b0:7b:f2:8e:f2:ac:57:d9:e0:b0:
         c6:26:59:17:8f:c0:84:4e:ba:12:03:22:87:48:1c:a5:6b:bc:
         df:3a:11:03:dd:9b:70:25:a8:a2:a9:29:c6:4f:12:ba:4c:34:
         d5:02:ae:1d:7a:e1:87:0d:f2:48:2e:dd:6d:bb:14:71:bd:a9:
         b6:4b:43:5b:f5:0d:a4:7e:1a:14:5e:0c:8c:9c:28:50:0a:fe:
         7f:4d:53:67:a7:92:8b:fa:f0:ea:fb:ee:23:9c:af:e3:73:76:
         35:4f:75:6a:8f:a3:a0:4d:c7:09:0e:fb:60:6b:e2:4f:d2:38:
         c1:dc:8b:13:bc:5e:ef:f6:1d:6d:92:d1:02:ab:13:d5:e1:8b:
         8e:e3:c5:3f:ae:d9:ba:20:b6:bc:8b:81:4a:62:f3:c7:56:e1:
         c4:22:93:4b:53:e9:6c:0e:5d:24:3a:cb:5a:a1:ff:a2:8a:a6:
         60:e9:96:0c:35:64:b0:8b:80:13:fc:69:47:54:d9:a1:ec:cc:
         b7:af:39:ac:d5:36:05:f6:90:22:5c:a5:59:63:8f:77:ca:eb:
         6a:ac:94:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----