Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210724.roa
File:                     AS210724.roa (raw, json)
Hash identifier:          EcJNjUF1C/Hts8qkW/Js/WbKyWyDi+X6X2d7iJtoLOk=
Subject key identifier:   DD:A0:52:B7:0F:91:09:44:DE:82:92:33:0C:E7:00:00:B7:E3:0E:80
Certificate issuer:       /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial:       53AFA6BEF76CC1C2F26D3C7E8B210B7027C4BB76
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210724.roa
Signing time:             Wed 09 Apr 2025 13:02:53 +0000
ROA not before:           Wed 09 Apr 2025 12:57:53 +0000
ROA not after:            Wed 08 Apr 2026 13:02:53 +0000
asID:                     210724
IP address blocks:        2a0f:85c1:c13::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:af:a6:be:f7:6c:c1:c2:f2:6d:3c:7e:8b:21:0b:70:27:c4:bb:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
        Validity
            Not Before: Apr  9 12:57:53 2025 GMT
            Not After : Apr  8 13:02:53 2026 GMT
        Subject: CN=DDA052B70F910944DE8292330CE70000B7E30E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:60:10:ae:d4:6f:0f:c6:99:5d:bc:c9:85:
                    93:b5:e2:17:5c:7c:0e:95:55:27:33:e9:89:67:e2:
                    6e:a8:03:bc:15:65:2b:29:16:10:62:bd:51:5c:c1:
                    0a:ec:73:2e:c4:fd:1a:d1:b3:86:82:f7:27:d8:9a:
                    df:5c:0a:dd:5a:23:5b:3b:73:09:99:f8:6a:67:a9:
                    9f:93:9a:56:a1:7d:21:49:8e:c8:ee:c1:21:a1:01:
                    56:54:53:87:33:e8:b2:f3:1f:66:4f:e3:ec:f8:6e:
                    04:6c:89:3a:c2:b0:c1:bc:c4:31:65:c2:c0:b0:fc:
                    3a:8c:1b:01:45:82:30:f8:83:b6:ed:73:16:26:bb:
                    d5:22:5b:fb:9c:f3:77:3b:7c:c7:88:69:2f:67:22:
                    ba:5f:27:22:a7:14:9b:4e:75:98:ad:96:57:51:59:
                    ae:74:9e:c7:55:05:e6:45:5c:92:94:63:64:7b:52:
                    98:83:19:0a:3a:5b:01:d2:65:6e:19:50:6d:7d:9a:
                    3c:d2:4a:2a:77:9f:fd:56:bb:9e:7c:44:96:00:5a:
                    68:fa:2c:c3:67:cd:59:fe:4e:90:6f:68:d0:42:45:
                    40:d1:ac:28:2b:68:c7:6b:97:01:45:43:50:8f:37:
                    a2:bd:42:0c:5c:de:f3:45:b0:26:59:39:d5:13:c2:
                    67:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A0:52:B7:0F:91:09:44:DE:82:92:33:0C:E7:00:00:B7:E3:0E:80
            X509v3 Authority Key Identifier:
                keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210724.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:c13::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:7c:50:47:b7:e6:e2:f0:2c:19:a2:c7:10:79:0a:39:c3:22:
         47:f5:d1:04:3b:b8:b2:50:eb:7d:a8:b3:10:94:ba:e5:2d:a7:
         31:f5:ea:fe:56:3d:1b:97:08:6a:41:89:25:ba:c4:58:26:bd:
         5f:03:b5:0f:2b:d2:f3:f2:6f:9c:f8:4b:6c:08:c5:00:14:7b:
         ee:79:27:57:c3:37:54:71:0a:0c:db:a4:d0:f3:05:d8:fc:3e:
         a5:d5:1e:33:52:a3:4f:6c:29:80:47:d0:2f:67:54:c9:8b:ca:
         55:52:ca:95:60:fa:dc:40:b6:0f:ad:78:d1:0a:ae:52:bc:e2:
         b1:81:51:3a:59:4f:d3:02:cb:80:20:f8:7a:ba:35:26:48:76:
         b4:4d:87:ea:63:c5:15:62:0a:17:50:f5:f1:21:fe:83:57:22:
         48:4c:c4:2b:ff:e5:48:e8:99:79:6a:c3:9f:d0:d8:d5:68:0b:
         50:b2:df:a9:b4:6d:b0:12:d7:5e:9a:c1:c3:7f:c1:01:31:ba:
         98:01:61:8a:a7:cb:b9:90:e2:3e:56:6a:cf:7f:b5:e6:43:e8:
         c3:33:8f:da:12:79:04:7a:55:1c:cc:16:17:7b:28:09:09:61:
         cb:05:3c:f2:73:ea:84:5a:66:29:c7:97:0c:d9:b6:8f:2e:c5:
         e0:39:3b:8c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUU6+mvvdswcLybTx+iyELcCfEu3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA0MDkxMjU3NTNaFw0yNjA0MDgxMzAyNTNaMDMxMTAvBgNV
BAMTKEREQTA1MkI3MEY5MTA5NDRERTgyOTIzMzBDRTcwMDAwQjdFMzBFODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8C2AQrtRvD8aZXbzJhZO14hdc
fA6VVScz6Yln4m6oA7wVZSspFhBivVFcwQrscy7E/RrRs4aC9yfYmt9cCt1aI1s7
cwmZ+GpnqZ+TmlahfSFJjsjuwSGhAVZUU4cz6LLzH2ZP4+z4bgRsiTrCsMG8xDFl
wsCw/DqMGwFFgjD4g7btcxYmu9UiW/uc83c7fMeIaS9nIrpfJyKnFJtOdZitlldR
Wa50nsdVBeZFXJKUY2R7UpiDGQo6WwHSZW4ZUG19mjzSSip3n/1Wu558RJYAWmj6
LMNnzVn+TpBvaNBCRUDRrCgraMdrlwFFQ1CPN6K9Qgxc3vNFsCZZOdUTwme3AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU3aBStw+RCUTegpIzDOcAALfjDoAwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEwNzI0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQwTMA0GCSqGSIb3DQEBCwUAA4IBAQBhfFBHt+bi8CwZoscQeQo5wyJH9dEEO7iy
UOt9qLMQlLrlLacx9er+Vj0blwhqQYklusRYJr1fA7UPK9Lz8m+c+EtsCMUAFHvu
eSdXwzdUcQoM26TQ8wXY/D6l1R4zUqNPbCmAR9AvZ1TJi8pVUsqVYPrcQLYPrXjR
Cq5SvOKxgVE6WU/TAsuAIPh6ujUmSHa0TYfqY8UVYgoXUPXxIf6DVyJITMQr/+VI
6Jl5asOf0NjVaAtQst+ptG2wEtdemsHDf8EBMbqYAWGKp8u5kOI+VmrPf7XmQ+jD
M4/aEnkEelUczBYXeygJCWHLBTzyc+qEWmYpx5cM2baPLsXgOTuM
-----END CERTIFICATE-----