Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa
File:                     326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (raw, json)
Hash identifier:          o0e/YZFYgXWaWgJ9eaHmXBCXoGTSBaeTvlCQTDkm3+c=
Subject key identifier:   15:B3:AD:25:F0:02:D5:BB:E3:46:79:C2:72:71:D6:73:51:04:2F:90
Certificate issuer:       /CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3
Certificate serial:       0988C2F9370C5F4B8F3AE9ADA03F95D03738E912
Authority key identifier: 3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa
Signing time:             Mon 24 Mar 2025 13:41:23 +0000
ROA not before:           Mon 24 Mar 2025 13:36:23 +0000
ROA not after:            Mon 23 Mar 2026 13:41:23 +0000
asID:                     216309
IP address blocks:        2a14:7584:4100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:88:c2:f9:37:0c:5f:4b:8f:3a:e9:ad:a0:3f:95:d0:37:38:e9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3
        Validity
            Not Before: Mar 24 13:36:23 2025 GMT
            Not After : Mar 23 13:41:23 2026 GMT
        Subject: CN=15B3AD25F002D5BBE34679C27271D67351042F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:63:f1:2c:b7:fa:35:e8:6c:6f:2e:6a:fc:
                    df:6f:08:1d:b0:65:c5:76:e6:4f:2d:35:4b:e4:3d:
                    58:76:1c:0b:0a:8e:1a:39:c0:49:30:6f:f9:30:4b:
                    52:16:16:61:9e:f1:8d:c4:d1:a0:ec:e8:41:25:fb:
                    ca:16:97:61:95:42:ae:c0:e0:0b:c1:e5:97:a1:b2:
                    d0:a2:ac:11:01:f1:dc:e4:04:aa:2c:1b:c2:95:a7:
                    31:ab:9d:0d:bc:2e:d5:52:3e:7d:41:51:a9:3a:94:
                    59:da:9c:9f:ef:59:1f:60:c9:22:6d:0a:ef:12:f9:
                    95:dc:46:b6:ee:11:07:5a:f8:11:70:de:1f:b1:d8:
                    2c:0a:32:99:71:2f:48:37:8b:da:02:be:5d:76:76:
                    ce:8c:80:ef:d2:f0:21:2c:a0:b7:6e:0c:fe:a4:72:
                    73:4f:95:3a:b5:6d:ab:18:5b:6c:f7:8f:e7:76:bb:
                    0f:c7:c7:d6:30:81:2e:80:50:92:96:14:f3:71:a7:
                    5f:6f:2a:4c:b3:0b:a2:df:5f:b3:d0:f0:59:8a:3f:
                    c4:03:8d:78:54:a8:38:9f:f8:10:c9:80:60:9f:b0:
                    b3:4b:a6:32:fa:17:d8:7c:28:f5:86:03:89:1a:63:
                    22:ed:9a:f8:7f:0b:9c:53:40:72:d2:3f:7c:95:27:
                    24:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B3:AD:25:F0:02:D5:BB:E3:46:79:C2:72:71:D6:73:51:04:2F:90
            X509v3 Authority Key Identifier:
                keyid:3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:ac:49:d5:9b:19:52:d2:03:37:a6:cd:5d:49:07:fc:96:73:
         89:b8:11:f6:b0:ab:ee:fc:4d:76:ba:1f:1a:83:78:8f:43:69:
         99:b2:1f:5e:5e:98:0b:f9:4b:9e:41:b6:87:f7:97:aa:92:fe:
         ca:77:d7:19:6d:54:2e:41:0e:34:0f:29:20:8f:43:87:4a:6c:
         fb:4b:af:c9:5d:79:58:5b:b4:24:7b:60:bd:c8:58:45:80:a8:
         6b:35:31:13:14:f4:37:61:86:99:37:d6:4e:1e:19:5e:7a:f9:
         5d:bb:6b:32:08:96:ed:f1:c7:41:26:7e:bd:3c:ba:e5:a1:0e:
         3a:df:07:37:97:36:c6:81:7a:11:6f:74:90:ef:df:ff:ca:c5:
         73:3f:cf:3b:f4:65:03:b0:48:b4:71:28:ca:50:0c:6a:a7:1b:
         06:26:a7:14:92:58:9f:69:18:12:b7:e3:ef:9a:48:a8:66:23:
         c8:42:af:c9:99:ea:d4:74:08:f2:45:79:69:38:12:9a:87:37:
         6f:55:07:cd:07:62:d2:30:f0:f1:cb:f4:b9:c8:8b:de:18:8c:
         f2:f1:18:0d:b0:fa:1e:c6:6d:10:d3:0d:01:89:42:64:22:d1:
         98:9b:86:ce:9d:7d:b1:c1:0f:df:53:48:df:f3:b3:63:b4:59:
         ec:6a:2f:c1
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUCYjC+TcMX0uPOumtoD+V0Dc46RIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EzQkUxNEQwODY4RTM5RTQzRTI3QjU4NTY3NkRGNUI4
MkExMjJFMzAeFw0yNTAzMjQxMzM2MjNaFw0yNjAzMjMxMzQxMjNaMDMxMTAvBgNV
BAMTKDE1QjNBRDI1RjAwMkQ1QkJFMzQ2NzlDMjcyNzFENjczNTEwNDJGOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZWPxLLf6Nehsby5q/N9vCB2w
ZcV25k8tNUvkPVh2HAsKjho5wEkwb/kwS1IWFmGe8Y3E0aDs6EEl+8oWl2GVQq7A
4AvB5ZehstCirBEB8dzkBKosG8KVpzGrnQ28LtVSPn1BUak6lFnanJ/vWR9gySJt
Cu8S+ZXcRrbuEQda+BFw3h+x2CwKMplxL0g3i9oCvl12ds6MgO/S8CEsoLduDP6k
cnNPlTq1basYW2z3j+d2uw/Hx9YwgS6AUJKWFPNxp19vKkyzC6LfX7PQ8FmKP8QD
jXhUqDif+BDJgGCfsLNLpjL6F9h8KPWGA4kaYyLtmvh/C5xTQHLSP3yVJyTvAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUFbOtJfAC1bvjRnnCcnHWc1EEL5AwHwYDVR0j
BBgwFoAUOjvhTQho455D4ntYVnbfW4KhIuMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk
NDdhLzEvM0EzQkUxNEQwODY4RTM5RTQzRTI3QjU4NTY3NkRGNUI4MkExMjJFMy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zQTNCRTE0RDA4NjhFMzlFNDNFMjdCNTg1
Njc2REY1QjgyQTEyMkUzLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS81OWM4M2U1Yy00YjU1LTRhMWEtODAwMy0xYjdlY2M1MWQ0N2EvMS8zMjYxMzEz
NDNhMzczNTM4MzQzYTM0MzEzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz
MTM2MzMzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1hEEwDQYJKoZIhvcNAQELBQADggEBAEus
SdWbGVLSAzemzV1JB/yWc4m4Efawq+78TXa6HxqDeI9DaZmyH15emAv5S55Btof3
l6qS/sp31xltVC5BDjQPKSCPQ4dKbPtLr8ldeVhbtCR7YL3IWEWAqGs1MRMU9Ddh
hpk31k4eGV56+V27azIIlu3xx0Emfr08uuWhDjrfBzeXNsaBehFvdJDv3//KxXM/
zzv0ZQOwSLRxKMpQDGqnGwYmpxSSWJ9pGBK34++aSKhmI8hCr8mZ6tR0CPJFeWk4
EpqHN29VB80HYtIw8PHL9LnIi94YjPLxGA2w+h7GbRDTDQGJQmQi0Zibhs6dfbHB
D99TSN/zs2O0WexqL8E=
-----END CERTIFICATE-----