Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213124.roa
File:                     AS213124.roa (raw, json)
Hash identifier:          AWMDlh+f+uyiK8JfwMPQBD5eX9ntZNBrlRb4HAvAkXA=
Subject key identifier:   40:C0:3D:11:A6:93:9A:18:14:63:61:B6:C3:8B:1D:66:C2:3E:7A:81
Certificate issuer:       /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial:       46B0F9AE2BC12B7E6E1BA0BE6F7E888F6E5D0B42
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213124.roa
Signing time:             Wed 09 Apr 2025 13:01:25 +0000
ROA not before:           Wed 09 Apr 2025 12:56:25 +0000
ROA not after:            Wed 08 Apr 2026 13:01:25 +0000
asID:                     213124
IP address blocks:        2a0f:85c1:ba9::/48 maxlen: 48
                          2a0f:85c1:bb9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b0:f9:ae:2b:c1:2b:7e:6e:1b:a0:be:6f:7e:88:8f:6e:5d:0b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
        Validity
            Not Before: Apr  9 12:56:25 2025 GMT
            Not After : Apr  8 13:01:25 2026 GMT
        Subject: CN=40C03D11A6939A18146361B6C38B1D66C23E7A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f3:7d:e9:81:95:60:4e:4c:40:e1:6e:87:db:
                    f3:1a:1b:13:65:b5:bf:11:fc:54:a8:ef:03:3f:bc:
                    8d:98:da:d3:9a:a3:b5:15:0c:cc:9f:88:35:5b:36:
                    9c:9f:bb:af:90:4c:c5:af:1e:26:46:e6:10:4c:55:
                    f2:c5:b7:64:0c:8f:4f:05:f1:5f:4b:ae:98:97:47:
                    a1:bc:6f:af:7d:6d:b0:59:36:2f:dd:58:67:40:47:
                    0c:7c:fc:23:45:e8:0e:e1:df:6c:82:26:61:6a:b1:
                    a2:1f:94:51:a6:27:b4:91:ae:04:10:e7:76:20:c1:
                    b1:95:1c:c9:ce:d8:b7:04:55:a4:4d:f8:17:fd:0e:
                    b6:e5:b9:e9:60:27:28:c5:43:45:0e:ea:1c:b7:d0:
                    22:8c:88:b0:8d:ed:73:b3:57:e2:81:96:55:1b:4d:
                    d1:3c:c9:fb:ba:17:08:1e:bb:b9:b3:87:91:82:a9:
                    40:a7:69:7c:4d:4a:f0:ed:14:5f:fe:72:9c:e6:b1:
                    d7:9f:02:99:a7:69:9b:6d:d8:3e:94:a2:8e:70:41:
                    48:f0:00:30:89:6c:db:58:49:c6:40:26:0a:4e:82:
                    5f:83:e9:90:f5:3d:9b:8e:ed:67:17:67:04:53:04:
                    f0:13:27:b4:3e:04:c0:1e:a6:ad:99:c0:0d:a7:d2:
                    bc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C0:3D:11:A6:93:9A:18:14:63:61:B6:C3:8B:1D:66:C2:3E:7A:81
            X509v3 Authority Key Identifier:
                keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213124.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:ba9::/48
                  2a0f:85c1:bb9::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:92:72:d9:38:78:3a:13:28:e9:db:a0:14:62:c1:10:c3:bf:
         13:26:a2:63:90:30:70:29:e5:48:87:a6:56:20:80:92:aa:e4:
         de:bc:14:db:c2:c6:1f:eb:fd:9c:53:8d:e8:9a:90:1b:30:fe:
         6f:ff:96:b4:d3:08:36:32:54:1b:2a:26:1a:e8:c7:d4:b3:22:
         6a:4b:47:30:00:52:43:9c:2e:0e:9a:91:cd:5c:1e:d6:51:66:
         52:b4:5e:7d:65:80:3e:a2:14:31:7b:f2:c2:33:d2:06:9e:77:
         11:6b:e7:0d:34:7d:ab:71:06:f3:81:c2:8c:25:6e:56:ae:60:
         84:8f:5e:e2:70:c8:93:29:c5:b1:d7:ba:8a:e2:b8:4c:17:aa:
         f8:8c:6c:7c:4a:f2:25:1a:d8:ef:f2:d5:8c:34:df:57:4d:3f:
         23:ca:33:cb:af:5f:fc:96:a5:5f:04:1a:2a:7f:ca:e8:5e:af:
         06:35:47:6f:3a:82:51:58:41:76:46:ab:86:6c:e3:0d:71:5b:
         5c:c8:86:9c:91:d0:63:0a:12:76:52:2e:ce:ae:83:0f:ed:d4:
         78:52:e2:d1:7f:64:93:16:8b:70:81:ac:42:59:f1:a1:6f:b6:
         6b:96:b2:e5:db:9b:b3:0d:02:35:fa:e0:67:d1:2f:47:91:11:
         02:00:e1:3f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIURrD5rivBK35uG6C+b36Ij25dC0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA0MDkxMjU2MjVaFw0yNjA0MDgxMzAxMjVaMDMxMTAvBgNV
BAMTKDQwQzAzRDExQTY5MzlBMTgxNDYzNjFCNkMzOEIxRDY2QzIzRTdBODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ833pgZVgTkxA4W6H2/MaGxNl
tb8R/FSo7wM/vI2Y2tOao7UVDMyfiDVbNpyfu6+QTMWvHiZG5hBMVfLFt2QMj08F
8V9LrpiXR6G8b699bbBZNi/dWGdARwx8/CNF6A7h32yCJmFqsaIflFGmJ7SRrgQQ
53YgwbGVHMnO2LcEVaRN+Bf9DrbluelgJyjFQ0UO6hy30CKMiLCN7XOzV+KBllUb
TdE8yfu6Fwgeu7mzh5GCqUCnaXxNSvDtFF/+cpzmsdefApmnaZtt2D6Uoo5wQUjw
ADCJbNtYScZAJgpOgl+D6ZD1PZuO7WcXZwRTBPATJ7Q+BMAepq2ZwA2n0ryFAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUQMA9EaaTmhgUY2G2w4sdZsI+eoEwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzMTI0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg+F
wQupAwcAKg+FwQu5MA0GCSqGSIb3DQEBCwUAA4IBAQCFknLZOHg6Eyjp26AUYsEQ
w78TJqJjkDBwKeVIh6ZWIICSquTevBTbwsYf6/2cU43ompAbMP5v/5a00wg2MlQb
KiYa6MfUsyJqS0cwAFJDnC4OmpHNXB7WUWZStF59ZYA+ohQxe/LCM9IGnncRa+cN
NH2rcQbzgcKMJW5WrmCEj17icMiTKcWx17qK4rhMF6r4jGx8SvIlGtjv8tWMNN9X
TT8jyjPLr1/8lqVfBBoqf8roXq8GNUdvOoJRWEF2RquGbOMNcVtcyIackdBjChJ2
Ui7OroMP7dR4UuLRf2STFotwgaxCWfGhb7ZrlrLl25uzDQI1+uBn0S9HkRECAOE/
-----END CERTIFICATE-----