Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa
File:                     326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (raw, json)
Hash identifier:          v+wGdsPoD53cB+FPJFplibwWU1IDMTKf0BLLWvOrDJw=
Subject key identifier:   19:1F:95:50:1A:99:BD:8F:00:CA:2C:9C:5B:42:96:60:B4:9E:1B:1D
Certificate issuer:       /CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B
Certificate serial:       08BBAA1D08914915DE735D2BB809C666E53930A8
Authority key identifier: 89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa
Signing time:             Sat 12 Apr 2025 16:47:00 +0000
ROA not before:           Sat 12 Apr 2025 16:42:00 +0000
ROA not after:            Sat 11 Apr 2026 16:47:00 +0000
asID:                     204844
IP address blocks:        2a14:7581:6000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:bb:aa:1d:08:91:49:15:de:73:5d:2b:b8:09:c6:66:e5:39:30:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B
        Validity
            Not Before: Apr 12 16:42:00 2025 GMT
            Not After : Apr 11 16:47:00 2026 GMT
        Subject: CN=191F95501A99BD8F00CA2C9C5B429660B49E1B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:90:13:0e:15:a1:1d:b6:09:ca:12:a8:ac:dc:
                    5f:26:5f:a0:fc:5a:16:e1:4c:e1:6f:24:c5:11:e7:
                    f6:8a:5d:2b:3f:ac:99:c2:6b:2b:3c:c6:9b:9a:80:
                    23:ab:fd:37:b6:b7:b8:86:44:8b:ad:cf:bc:f4:77:
                    fe:99:fc:f9:6b:5b:e9:f7:fb:cd:69:3f:b8:59:0e:
                    f7:58:d7:fd:24:b5:07:09:65:8d:e4:00:da:6a:85:
                    80:88:07:21:cf:f9:2f:23:d4:a1:0a:55:a3:7f:9d:
                    e4:f8:ae:b9:2c:b8:4a:f6:3a:be:94:c9:af:ac:74:
                    26:00:c8:d1:57:2f:b3:5b:82:31:6f:ee:e7:de:53:
                    9b:31:32:52:98:ee:33:54:08:e7:a0:f4:f0:25:3d:
                    95:17:af:aa:60:93:4d:f6:55:bd:c9:5b:7f:d8:21:
                    d8:35:98:63:9c:b3:c2:86:94:0c:f6:9f:d0:0f:02:
                    6a:2d:c6:67:ec:f0:f4:e1:df:2f:04:c7:8d:e1:83:
                    28:d7:15:4d:46:98:cf:05:01:e7:3a:89:f7:dd:5e:
                    0a:4d:22:b0:60:14:a4:12:d7:95:52:6c:95:cd:17:
                    47:ee:78:f6:f3:a2:52:14:5f:0a:01:e8:a9:fb:ac:
                    7f:e7:34:a4:79:3e:5a:32:2b:cb:98:f7:20:4d:f9:
                    33:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1F:95:50:1A:99:BD:8F:00:CA:2C:9C:5B:42:96:60:B4:9E:1B:1D
            X509v3 Authority Key Identifier:
                keyid:89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4d:03:33:c5:8d:12:26:57:fe:30:d3:70:0b:35:19:5e:b4:5a:
         38:99:dd:55:88:29:88:3f:6e:a2:85:55:e8:d5:13:e1:5a:c9:
         8a:2a:90:1e:94:9a:63:0c:ca:a5:48:25:97:11:e5:8a:d3:de:
         96:2d:75:4e:52:d1:b7:f3:77:c3:c0:18:be:c5:c3:14:60:b9:
         ba:1a:90:29:62:82:b0:78:3e:75:52:2a:a0:4f:4a:15:29:4f:
         5a:41:73:84:d8:05:b2:4a:f9:89:23:5a:15:8b:13:28:f2:03:
         2f:f5:7d:5d:22:ec:38:15:09:5c:3c:70:5a:d3:03:51:eb:9a:
         e0:a4:38:6b:be:a5:9b:89:c1:3e:50:62:20:54:f9:38:d3:57:
         33:4e:ce:01:c4:14:7f:c3:ff:11:6c:38:00:8d:c3:07:02:fd:
         71:f4:2f:59:06:a3:86:df:df:f4:c3:e7:c1:84:bb:69:e0:da:
         cf:f7:43:ff:c3:61:c2:c1:42:87:7f:3c:a9:cd:3e:1e:d1:ba:
         4b:c2:f5:52:2c:ff:87:98:a4:6f:d4:08:b3:f1:14:23:43:24:
         fd:cd:b4:f8:dc:ea:7f:17:18:a1:94:93:4f:e0:12:2c:43:23:
         10:8e:a1:d2:11:6d:fb:88:14:d4:42:34:ba:d7:d2:ca:9d:a3:
         a0:f9:85:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----