Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211575.roa
File:                     AS211575.roa (raw, json)
Hash identifier:          zgB8uiblooK5lm6jRgczZzl0neAum/xxLOrt6CUegAU=
Subject key identifier:   E4:44:18:AA:EC:28:60:CA:D3:DB:39:55:17:51:BB:0D:CB:24:AA:10
Certificate issuer:       /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial:       5B2A7C0F820DD8DF308BBB44D6090B5DDE741161
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211575.roa
Signing time:             Wed 09 Apr 2025 13:02:44 +0000
ROA not before:           Wed 09 Apr 2025 12:57:44 +0000
ROA not after:            Wed 08 Apr 2026 13:02:44 +0000
asID:                     211575
IP address blocks:        2a0f:85c1:bfe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2a:7c:0f:82:0d:d8:df:30:8b:bb:44:d6:09:0b:5d:de:74:11:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
        Validity
            Not Before: Apr  9 12:57:44 2025 GMT
            Not After : Apr  8 13:02:44 2026 GMT
        Subject: CN=E44418AAEC2860CAD3DB39551751BB0DCB24AA10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:75:ad:c3:2d:c4:65:3b:d1:4f:7e:c9:bb:7c:
                    62:5f:7b:e6:4d:8d:45:c8:1b:3c:ab:6a:8f:06:96:
                    81:9b:7b:8d:be:59:17:67:50:35:59:6c:4d:0c:a0:
                    95:19:47:8e:ca:0f:ed:97:36:e8:50:03:ad:25:8e:
                    24:fc:c4:51:51:10:1f:02:6d:95:c9:55:78:fc:31:
                    d4:35:c4:93:84:c0:9e:52:a7:18:fb:ae:f5:9d:2c:
                    92:31:30:f4:f8:84:d8:74:94:0d:40:a6:b5:04:a6:
                    08:cc:29:53:21:e2:97:00:e0:d7:bd:bb:e5:35:e1:
                    83:3b:03:be:7a:8a:c0:ec:1a:d2:47:9c:f4:54:3c:
                    52:26:9e:b0:de:1d:a4:7f:e0:44:8f:a0:5d:c4:3b:
                    95:21:cb:d9:a5:d9:7d:5b:6f:c3:a3:f9:dc:9b:f5:
                    f5:d3:2c:50:71:37:88:36:02:a8:6b:5a:34:35:e9:
                    ca:12:70:a3:63:0b:31:95:c9:14:8d:1f:5c:97:59:
                    7c:a8:db:0b:87:12:af:49:63:d0:17:d6:85:65:59:
                    07:36:65:61:9a:92:0a:eb:44:db:98:c8:9f:c8:5c:
                    b4:9d:b6:4d:7d:56:f7:6a:dc:cd:91:92:c0:69:72:
                    ca:50:0f:aa:da:7e:48:4d:d5:10:96:6f:c3:8b:35:
                    b1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:44:18:AA:EC:28:60:CA:D3:DB:39:55:17:51:BB:0D:CB:24:AA:10
            X509v3 Authority Key Identifier:
                keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211575.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:bfe::/48

    Signature Algorithm: sha256WithRSAEncryption
         ed:68:b6:1c:d8:e3:13:6c:27:51:43:6e:59:5a:00:df:78:f8:
         bb:9f:dc:32:b2:49:4a:b2:7e:d1:a5:ef:a5:25:42:88:02:41:
         c8:d1:64:ff:7f:58:5d:7e:1c:65:c8:b1:19:d7:1e:40:c6:8b:
         a3:c7:75:12:10:38:62:75:e5:0e:54:f2:b0:cb:3c:c5:aa:d1:
         b4:70:c7:4b:45:04:87:b0:93:e7:13:47:ea:bf:63:85:4f:16:
         41:65:75:d3:19:19:aa:09:c7:8e:0b:7d:7d:0a:13:da:18:85:
         d0:fa:bd:05:f7:3f:4f:5a:a1:26:3f:d7:0a:8c:87:9d:78:b3:
         04:e8:e0:0c:c2:50:1e:1b:a2:f7:cc:3a:76:80:e8:f6:fb:86:
         fd:5c:cf:b1:fd:4a:ef:38:06:9f:c1:43:c0:8e:0c:68:f9:fd:
         e6:be:2e:74:53:1a:d6:60:86:81:37:b9:79:66:1d:db:fb:df:
         9d:78:e4:59:72:08:62:5c:8b:b7:d1:fb:50:69:69:d5:8f:f3:
         bd:b1:3e:5b:ec:11:77:09:c1:a2:ea:a1:b6:54:e6:35:ce:85:
         b7:95:f4:89:2c:3d:97:f7:4f:db:f2:55:2b:c6:d2:24:11:99:
         29:6a:f7:e7:d3:8f:54:d0:17:80:73:2a:87:7a:13:47:d1:d5:
         e7:86:35:6f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUWyp8D4IN2N8wi7tE1gkLXd50EWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA0MDkxMjU3NDRaFw0yNjA0MDgxMzAyNDRaMDMxMTAvBgNV
BAMTKEU0NDQxOEFBRUMyODYwQ0FEM0RCMzk1NTE3NTFCQjBEQ0IyNEFBMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZda3DLcRlO9FPfsm7fGJfe+ZN
jUXIGzyrao8GloGbe42+WRdnUDVZbE0MoJUZR47KD+2XNuhQA60ljiT8xFFREB8C
bZXJVXj8MdQ1xJOEwJ5Spxj7rvWdLJIxMPT4hNh0lA1AprUEpgjMKVMh4pcA4Ne9
u+U14YM7A756isDsGtJHnPRUPFImnrDeHaR/4ESPoF3EO5Uhy9ml2X1bb8Oj+dyb
9fXTLFBxN4g2AqhrWjQ16coScKNjCzGVyRSNH1yXWXyo2wuHEq9JY9AX1oVlWQc2
ZWGakgrrRNuYyJ/IXLSdtk19Vvdq3M2RksBpcspQD6rafkhN1RCWb8OLNbGbAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU5EQYquwoYMrT2zlVF1G7DcskqhAwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjExNTc1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQv+MA0GCSqGSIb3DQEBCwUAA4IBAQDtaLYc2OMTbCdRQ25ZWgDfePi7n9wysklK
sn7Rpe+lJUKIAkHI0WT/f1hdfhxlyLEZ1x5Axoujx3USEDhideUOVPKwyzzFqtG0
cMdLRQSHsJPnE0fqv2OFTxZBZXXTGRmqCceOC319ChPaGIXQ+r0F9z9PWqEmP9cK
jIedeLME6OAMwlAeG6L3zDp2gOj2+4b9XM+x/UrvOAafwUPAjgxo+f3mvi50UxrW
YIaBN7l5Zh3b+9+deORZcghiXIu30ftQaWnVj/O9sT5b7BF3CcGi6qG2VOY1zoW3
lfSJLD2X90/b8lUrxtIkEZkpavfn049U0BeAcyqHehNH0dXnhjVv
-----END CERTIFICATE-----