Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13213.roa
File:                     AS13213.roa (raw, json)
Hash identifier:          aTrYB3ZuVgl2qJMpxC9c1PG8/d4JbKq+ShTFCOXglxs=
Subject key identifier:   E1:90:DF:79:5A:16:2E:25:E5:06:B6:BC:0E:D5:88:68:4F:58:89:BC
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       3D9DAE1391ACE2A5316A26B01E49B1279E6A5C96
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13213.roa
Signing time:             Mon 31 Mar 2025 15:07:45 +0000
ROA not before:           Mon 31 Mar 2025 15:02:45 +0000
ROA not after:            Mon 30 Mar 2026 15:07:45 +0000
asID:                     13213
IP address blocks:        2a13:9500:3::/48 maxlen: 48
                          2a13:9500:24::/48 maxlen: 48
                          2a13:9500:25::/48 maxlen: 48
                          2a13:9500:26::/48 maxlen: 48
                          2a13:9500:27::/48 maxlen: 48
                          2a13:9500:28::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:9d:ae:13:91:ac:e2:a5:31:6a:26:b0:1e:49:b1:27:9e:6a:5c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Mar 31 15:02:45 2025 GMT
            Not After : Mar 30 15:07:45 2026 GMT
        Subject: CN=E190DF795A162E25E506B6BC0ED588684F5889BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:21:6a:48:7b:a1:2f:14:e6:6e:c2:5b:4e:94:
                    14:f4:5e:26:88:f9:df:68:29:a8:68:cd:ec:6e:b7:
                    43:2e:9b:17:42:02:f8:b8:75:3d:bd:26:71:34:10:
                    43:c5:47:45:8e:1b:a4:7c:31:71:76:18:e0:49:3d:
                    06:4e:0f:5c:52:d7:b3:8c:52:11:9d:b5:5a:6f:42:
                    47:14:f3:84:74:4e:ab:92:f5:8c:da:57:95:ba:bf:
                    fe:4f:14:d7:e4:4f:86:84:da:cd:74:05:ef:2f:47:
                    51:1b:30:fd:25:1d:2e:6d:d5:2b:69:dc:d1:09:90:
                    5e:43:e0:ae:64:15:b8:2e:1b:a9:f0:a6:bc:e0:8b:
                    7a:bf:6f:98:82:24:5a:2c:60:fb:02:ca:c6:4e:e4:
                    cf:3b:9b:56:38:0e:ca:4f:03:6d:33:64:e5:c2:5b:
                    dc:d3:b4:fa:4a:af:b5:c6:a1:83:12:ab:32:4c:80:
                    62:ed:9e:d8:c5:84:14:59:ea:d0:03:38:03:fc:1a:
                    11:ba:ac:fb:97:fe:85:b9:0b:aa:81:07:78:4f:be:
                    97:d4:9d:59:85:1d:ed:44:fe:79:5b:84:7d:39:0d:
                    55:45:d3:1b:16:5c:50:f9:d5:a2:44:83:47:f5:18:
                    66:6a:07:92:4f:ce:95:83:f4:48:60:5c:d3:75:7e:
                    14:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:90:DF:79:5A:16:2E:25:E5:06:B6:BC:0E:D5:88:68:4F:58:89:BC
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13213.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9500:3::/48
                  2a13:9500:24::-2a13:9500:28:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6e:28:b8:3f:b8:fd:65:98:e5:75:7c:45:ed:b2:25:18:04:0b:
         8e:46:1d:25:4a:a3:b0:47:3d:89:2e:99:6c:ac:7e:e2:30:a9:
         8c:09:9f:58:c3:1d:d8:bf:5d:d7:2c:40:40:16:c0:4b:2b:a5:
         5d:e7:ec:5f:47:73:36:68:7a:0e:7c:1e:b6:41:23:14:41:07:
         a9:5d:d0:80:08:7d:5c:0c:23:3b:29:a3:c9:ea:03:65:55:79:
         cb:31:7f:99:59:18:97:08:fc:c0:6d:a8:14:07:c3:78:a9:25:
         22:d7:80:6b:66:c6:89:aa:71:54:ee:71:90:cd:2d:52:83:b6:
         4c:6b:4d:ee:74:c0:0a:46:0a:b2:1f:36:50:2a:82:93:82:de:
         9c:41:af:16:e6:c7:f0:71:72:88:3a:ac:b1:e8:5a:ea:19:d4:
         8b:a9:50:62:76:85:48:39:50:a6:cf:fa:48:9c:fd:4a:ff:b2:
         53:32:85:66:6f:3d:5d:4c:0f:2a:7d:45:02:c0:d0:a6:7f:78:
         28:8a:45:48:fd:4f:92:42:41:29:42:84:62:45:75:96:8e:90:
         32:f5:f5:76:b1:86:34:08:06:7b:0f:ba:f2:25:30:32:0a:94:
         e1:b5:ba:36:bb:32:7d:45:af:f0:cb:bf:99:b2:d1:88:7e:5e:
         ea:89:27:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUPZ2uE5Gs4qUxaiawHkmxJ55qXJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTAzMzExNTAyNDVaFw0yNjAzMzAxNTA3NDVaMDMxMTAvBgNV
BAMTKEUxOTBERjc5NUExNjJFMjVFNTA2QjZCQzBFRDU4ODY4NEY1ODg5QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgIWpIe6EvFOZuwltOlBT0XiaI
+d9oKahozexut0MumxdCAvi4dT29JnE0EEPFR0WOG6R8MXF2GOBJPQZOD1xS17OM
UhGdtVpvQkcU84R0TquS9YzaV5W6v/5PFNfkT4aE2s10Be8vR1EbMP0lHS5t1Stp
3NEJkF5D4K5kFbguG6nwprzgi3q/b5iCJFosYPsCysZO5M87m1Y4DspPA20zZOXC
W9zTtPpKr7XGoYMSqzJMgGLtntjFhBRZ6tADOAP8GhG6rPuX/oW5C6qBB3hPvpfU
nVmFHe1E/nlbhH05DVVF0xsWXFD51aJEg0f1GGZqB5JPzpWD9EhgXNN1fhRDAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQU4ZDfeVoWLiXlBra8DtWIaE9YibwwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTMyMTMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMCMEAgACMB0DBwAqE5UA
AAMwEgMHAioTlQAAJAMHACoTlQAAKDANBgkqhkiG9w0BAQsFAAOCAQEAbii4P7j9
ZZjldXxF7bIlGAQLjkYdJUqjsEc9iS6ZbKx+4jCpjAmfWMMd2L9d1yxAQBbASyul
XefsX0dzNmh6DnwetkEjFEEHqV3QgAh9XAwjOymjyeoDZVV5yzF/mVkYlwj8wG2o
FAfDeKklIteAa2bGiapxVO5xkM0tUoO2TGtN7nTACkYKsh82UCqCk4LenEGvFubH
8HFyiDqsseha6hnUi6lQYnaFSDlQps/6SJz9Sv+yUzKFZm89XUwPKn1FAsDQpn94
KIpFSP1PkkJBKUKEYkV1lo6QMvX1drGGNAgGew+68iUwMgqU4bW6NrsyfUWv8Mu/
mbLRiH5e6okn3w==
-----END CERTIFICATE-----