Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34353a3a2f34382d3438203d3e20323134393338.roa
File:                     326131313a323963303a34353a3a2f34382d3438203d3e20323134393338.roa (raw, json)
Hash identifier:          MGysdAb1MAaECO1Nni4C9ZM3UafaiRkC0g4ieGHBvZI=
Subject key identifier:   2E:4E:13:04:59:D7:28:E0:C8:69:97:D5:91:95:87:DC:7F:EC:E6:4B
Certificate issuer:       /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial:       4E8354454A732E5AE23F2EAA5871C2351C8E0EE3
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34353a3a2f34382d3438203d3e20323134393338.roa
Signing time:             Fri 11 Apr 2025 12:01:41 +0000
ROA not before:           Fri 11 Apr 2025 11:56:41 +0000
ROA not after:            Fri 10 Apr 2026 12:01:41 +0000
asID:                     214938
IP address blocks:        2a11:29c0:45::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:83:54:45:4a:73:2e:5a:e2:3f:2e:aa:58:71:c2:35:1c:8e:0e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
        Validity
            Not Before: Apr 11 11:56:41 2025 GMT
            Not After : Apr 10 12:01:41 2026 GMT
        Subject: CN=2E4E130459D728E0C86997D5919587DC7FECE64B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:e9:e1:09:89:ea:6e:c7:98:48:8c:af:3c:
                    9a:85:66:e4:9c:84:58:79:dc:4b:55:f6:20:52:42:
                    6d:9f:7d:2f:15:e9:2e:7c:43:49:e8:27:70:00:1f:
                    80:4a:3c:19:71:e9:5a:8f:20:32:7a:93:ce:53:29:
                    99:7a:d3:65:a9:dd:74:c7:b3:5f:38:b7:3c:f4:e9:
                    b8:d7:3c:a1:f7:77:18:64:54:d8:b1:0d:cb:03:04:
                    35:60:52:91:75:fb:23:2e:a6:67:48:50:30:e6:22:
                    ea:41:36:9a:94:e9:d9:21:0a:ed:28:27:99:a3:6b:
                    0b:24:16:dd:2c:85:18:d6:c1:5b:f0:bc:9f:1c:27:
                    39:cb:6d:c7:f1:14:f1:6d:c7:66:53:22:7d:bb:6f:
                    84:a0:3e:97:71:ce:a6:6a:8a:6e:f2:19:41:21:81:
                    c7:ab:de:a7:60:3e:ce:7f:57:67:c8:0e:59:06:ff:
                    0a:c6:d7:e5:10:1c:97:04:14:d5:d0:85:82:43:03:
                    f2:80:fa:e8:6c:12:ce:46:91:2f:14:9b:b5:ac:8d:
                    61:9d:b7:97:6c:19:3e:62:3e:a7:2b:d4:a9:f4:bb:
                    d8:5e:34:a2:7c:75:d9:17:12:80:1f:bd:67:17:00:
                    9f:69:a0:39:24:8c:38:10:60:39:a9:f4:c8:c8:5f:
                    aa:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4E:13:04:59:D7:28:E0:C8:69:97:D5:91:95:87:DC:7F:EC:E6:4B
            X509v3 Authority Key Identifier:
                keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34353a3a2f34382d3438203d3e20323134393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:45::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:1e:ef:52:f8:1f:93:60:09:25:64:13:dc:cd:29:fc:84:25:
         73:2c:d1:d0:ec:52:5d:fe:1d:10:f3:f9:be:2a:5a:2b:e9:95:
         f8:66:2d:b8:6c:f9:af:15:0e:71:e5:15:5b:b3:7d:a1:6a:b5:
         d4:27:53:44:cc:4a:89:34:9d:bd:9e:1a:76:d2:4a:46:9a:07:
         ef:f0:33:f7:78:7d:92:63:0e:6b:2b:ab:a4:93:4b:f2:a0:90:
         b2:a0:b0:a7:e1:0f:ef:f8:3e:d9:c5:29:75:f6:38:89:95:1f:
         1c:d5:db:cb:31:31:27:4f:c6:6e:92:55:62:4f:96:1d:e4:86:
         6f:51:99:bc:11:b5:11:2a:e6:b2:41:e7:b1:1b:b9:90:72:7d:
         ac:85:86:a1:8a:4f:f8:66:32:bc:d7:8e:c7:14:1b:c9:ae:0e:
         2c:f5:37:a7:3f:5f:fb:f9:d7:63:92:dc:14:26:e5:a3:9f:00:
         37:b4:0c:7a:6e:6d:6e:16:20:ad:93:bd:43:b7:94:5f:92:87:
         a7:ad:db:31:6f:1c:3f:e0:b4:77:16:8d:e8:f6:6e:08:db:17:
         d9:e7:14:82:d6:46:2d:e3:f1:b6:be:2d:a7:45:45:3f:75:1a:
         09:34:fe:74:f5:e4:87:10:b8:c0:0a:d6:f8:18:e5:49:64:b8:
         22:e6:5e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----