Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa
File:                     326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (raw, json)
Hash identifier:          J8io8U0XPUuDsKGS242FyC3RGJyS4nfWqlR7rVI4fs4=
Subject key identifier:   25:A6:E8:84:E1:7C:1C:14:28:9F:38:3A:0F:5E:AF:E7:7B:CA:8F:F6
Certificate issuer:       /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Certificate serial:       1EE4EB3740AF53EB5726BF155DE5FBFE67F714DE
Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa
Signing time:             Fri 11 Apr 2025 01:21:10 +0000
ROA not before:           Fri 11 Apr 2025 01:16:10 +0000
ROA not after:            Fri 10 Apr 2026 01:21:10 +0000
asID:                     8075
IP address blocks:        2a0a:6044:8fff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e4:eb:37:40:af:53:eb:57:26:bf:15:5d:e5:fb:fe:67:f7:14:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
        Validity
            Not Before: Apr 11 01:16:10 2025 GMT
            Not After : Apr 10 01:21:10 2026 GMT
        Subject: CN=25A6E884E17C1C14289F383A0F5EAFE77BCA8FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d9:0e:8a:05:16:ff:cb:8e:e3:45:73:eb:a0:
                    34:af:f8:56:51:21:08:ed:d7:c5:77:f3:aa:92:14:
                    18:ef:3d:3c:dd:fe:7d:d5:8e:b2:b5:f3:46:ee:ae:
                    59:13:92:c6:0f:49:50:0b:dc:09:97:a8:06:58:db:
                    2c:66:7b:ca:fd:b8:50:c8:73:25:e5:5e:ef:55:96:
                    c7:f4:ba:03:ba:58:fc:b1:9f:3e:50:8e:43:3c:59:
                    77:3b:4f:91:fe:2c:40:98:5e:d6:e1:9d:ca:ad:a6:
                    e4:f3:d5:e4:ce:50:6c:e5:ef:db:c0:70:57:cd:82:
                    d8:0a:39:9b:5c:f4:32:49:b2:a9:51:b9:95:d5:cc:
                    69:84:5a:12:e7:04:d1:8e:7e:07:b4:34:96:c0:d5:
                    f0:97:e1:11:14:db:b3:99:22:e0:7e:5f:87:f4:4b:
                    63:96:9a:a7:a1:0d:fb:88:80:df:70:18:21:3f:5f:
                    4e:21:e6:27:d9:aa:35:b8:7c:68:c1:56:6e:cf:a5:
                    da:58:fd:0e:b0:b1:cc:43:30:81:c8:03:09:8b:46:
                    c0:7e:3c:c2:6b:78:d6:2c:bc:c5:90:65:6e:e4:20:
                    95:ed:97:b2:bf:2f:af:7c:26:8a:38:2d:3f:25:5a:
                    7f:e1:6b:f6:04:a8:ce:1e:aa:70:0e:16:00:77:53:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A6:E8:84:E1:7C:1C:14:28:9F:38:3A:0F:5E:AF:E7:7B:CA:8F:F6
            X509v3 Authority Key Identifier:
                keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:54:39:4a:a0:c4:85:56:68:f1:0d:98:b8:c0:f3:65:fe:85:
         9d:a8:70:fd:0d:5f:8e:a5:da:97:02:0e:7f:fe:e7:01:91:3b:
         0f:8e:0b:4a:e4:d5:ab:41:4e:18:ad:ed:a7:7e:90:2d:86:5e:
         04:e5:6e:18:8f:d8:c9:92:68:0d:be:90:50:fd:a3:dc:d0:48:
         4f:af:22:99:2c:b8:2c:ed:5b:44:f3:a4:cb:42:fe:dd:fb:55:
         82:61:3b:9b:85:c2:f2:b0:58:f0:47:8a:ed:ae:af:55:1b:1b:
         5c:4d:6d:ad:12:7b:b5:f2:68:26:84:b5:f2:eb:4b:e3:ad:32:
         74:9d:27:54:9e:cd:6c:25:60:ad:5a:15:a8:fe:93:11:83:14:
         70:82:a3:21:61:74:b7:38:53:6f:23:c5:88:02:d1:9d:ac:c5:
         bd:fb:97:9a:f8:76:98:8d:4c:6a:b8:d9:12:32:0e:a5:f6:41:
         9b:d2:ad:3b:cb:24:31:3f:98:c8:eb:79:72:86:53:24:52:3b:
         a1:a6:e9:4d:27:ea:e5:02:cd:5c:52:eb:2b:cf:81:93:13:b5:
         9f:81:04:5a:6f:f0:f9:9d:9b:fa:e6:87:ab:9c:62:e1:20:36:
         30:f2:95:5a:93:7d:d1:61:8a:68:42:33:08:7f:cc:c9:67:7c:
         30:4f:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----