Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a366664303a3a2f34342d3434203d3e20323135393334.roa
File:                     326131343a373538313a366664303a3a2f34342d3434203d3e20323135393334.roa (raw, json)
Hash identifier:          vaAEu3pMRFdmKcI/nWa8WyzQWeHMb/mh9I6YRbEX9FY=
Subject key identifier:   1F:86:35:9C:A3:B5:1E:DC:D0:C0:09:5B:F1:8B:2A:A2:E8:61:62:3D
Certificate issuer:       /CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B
Certificate serial:       46C3EE8B6F66B7A093E2CE628EC94376196A90F1
Authority key identifier: 89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a366664303a3a2f34342d3434203d3e20323135393334.roa
Signing time:             Sat 12 Apr 2025 16:45:51 +0000
ROA not before:           Sat 12 Apr 2025 16:40:51 +0000
ROA not after:            Sat 11 Apr 2026 16:45:51 +0000
asID:                     215934
IP address blocks:        2a14:7581:6fd0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c3:ee:8b:6f:66:b7:a0:93:e2:ce:62:8e:c9:43:76:19:6a:90:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B
        Validity
            Not Before: Apr 12 16:40:51 2025 GMT
            Not After : Apr 11 16:45:51 2026 GMT
        Subject: CN=1F86359CA3B51EDCD0C0095BF18B2AA2E861623D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:d4:dd:7f:76:3a:50:b1:0b:ef:b2:0d:53:
                    3e:b1:76:fe:82:f0:cc:f0:19:fc:06:5c:63:d5:f3:
                    80:1c:30:6e:dc:2f:ea:82:d1:e8:6c:b9:53:f2:9b:
                    1d:b4:18:ac:8b:85:25:6f:7f:df:08:40:bf:83:b1:
                    64:71:36:72:25:71:46:92:3d:0d:a7:69:5c:26:7e:
                    8e:9e:e8:db:29:2d:7f:e4:77:c9:17:f2:aa:88:ed:
                    a9:3d:0f:fb:00:2e:a5:ed:4d:05:ce:1c:cb:45:5c:
                    68:cc:87:69:4d:30:b5:00:15:67:d2:3f:18:6b:55:
                    54:47:23:53:bb:a1:cd:61:e7:d7:03:d4:fd:ce:a1:
                    ff:fc:7a:55:89:4e:0b:8f:c4:85:c8:12:98:e2:95:
                    a0:a4:a6:40:09:70:f6:e6:14:28:0d:74:e8:b7:03:
                    f1:18:0d:2b:f3:ad:32:69:58:6b:bb:f8:c0:a7:4e:
                    be:21:bc:64:5c:14:38:6b:bb:be:f8:ec:3d:0e:44:
                    1c:f6:d5:2a:d9:72:85:d7:61:c5:51:44:37:a5:03:
                    f0:51:3a:de:ce:a7:45:ae:58:d3:d4:30:ce:af:d8:
                    e9:4c:e4:a9:bd:e0:ca:80:30:c4:fa:35:88:59:f9:
                    55:a0:81:52:e9:9e:8f:eb:d0:f5:99:0d:f9:d5:96:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:86:35:9C:A3:B5:1E:DC:D0:C0:09:5B:F1:8B:2A:A2:E8:61:62:3D
            X509v3 Authority Key Identifier:
                keyid:89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a366664303a3a2f34342d3434203d3e20323135393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:6fd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         17:72:bc:b6:24:d2:39:af:75:07:ec:12:91:da:1e:a1:0c:6a:
         b3:79:56:54:f0:e3:e4:26:a8:4f:cc:b0:d6:ba:f9:f8:31:d0:
         a2:c3:1e:ea:32:b4:e9:cd:15:4d:d9:02:4a:66:34:68:4e:08:
         bb:7d:de:04:8d:2a:52:73:cd:d7:08:6b:8e:3e:e0:65:da:34:
         c8:85:2d:83:ea:bb:e6:99:5a:b7:5a:ed:99:c3:17:c6:23:83:
         6f:fa:d7:4f:b8:e3:04:f5:a8:84:90:69:c7:2b:2e:5b:81:2a:
         98:4c:39:ae:00:82:b3:4d:0b:a1:50:d0:70:ca:b7:bd:b8:41:
         23:ec:0d:f9:58:18:0a:ed:f0:fd:9a:5d:51:21:fd:23:bb:c0:
         67:1e:f9:44:83:f3:7e:ba:ce:8e:71:f7:c2:11:08:6a:09:15:
         f7:61:8a:df:85:45:8d:5c:75:7b:5a:7e:e7:6a:59:7d:9f:43:
         37:25:74:c2:df:32:01:4d:05:20:66:2f:17:c6:aa:ec:70:9a:
         57:d1:bb:53:c4:83:e3:04:fe:6c:6a:e3:c7:4a:34:c7:b4:21:
         4f:dc:41:a7:c0:c1:6f:aa:7b:1c:7b:a0:ae:a9:45:be:60:4a:
         57:d0:f8:21:77:86:9d:36:42:1e:7e:5e:f4:8b:60:34:3a:b0:
         12:d2:17:0e
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIURsPui29mt6CT4s5ijslDdhlqkPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBC
OEYxMjA2QjAeFw0yNTA0MTIxNjQwNTFaFw0yNjA0MTExNjQ1NTFaMDMxMTAvBgNV
BAMTKDFGODYzNTlDQTNCNTFFRENEMEMwMDk1QkYxOEIyQUEyRTg2MTYyM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjrtTdf3Y6ULEL77INUz6xdv6C
8MzwGfwGXGPV84AcMG7cL+qC0ehsuVPymx20GKyLhSVvf98IQL+DsWRxNnIlcUaS
PQ2naVwmfo6e6NspLX/kd8kX8qqI7ak9D/sALqXtTQXOHMtFXGjMh2lNMLUAFWfS
PxhrVVRHI1O7oc1h59cD1P3Oof/8elWJTguPxIXIEpjilaCkpkAJcPbmFCgNdOi3
A/EYDSvzrTJpWGu7+MCnTr4hvGRcFDhru7747D0ORBz21SrZcoXXYcVRRDelA/BR
Ot7Op0WuWNPUMM6v2OlM5Km94MqAMMT6NYhZ+VWggVLpno/r0PWZDfnVlu31AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUH4Y1nKO1HtzQwAlb8YsqouhhYj0wHwYDVR0j
BBgwFoAUiT/UG94ibFTyrSs92hnBoLjxIGswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFjZmEzMTgtMmE1Yy00MjQxLWFmYmItMzg3ZDcxZThj
NTk2LzEvODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBCOEYxMjA2Qi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTNGRDQxQkRFMjI2QzU0RjJBRDJCM0RE
QTE5QzFBMEI4RjEyMDZCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS84YWNmYTMxOC0yYTVjLTQyNDEtYWZiYi0zODdkNzFlOGM1OTYvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTM2NjY2NDMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz
MTM1MzkzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gW/QMA0GCSqGSIb3DQEBCwUAA4IBAQAX
cry2JNI5r3UH7BKR2h6hDGqzeVZU8OPkJqhPzLDWuvn4MdCiwx7qMrTpzRVN2QJK
ZjRoTgi7fd4EjSpSc83XCGuOPuBl2jTIhS2D6rvmmVq3Wu2ZwxfGI4Nv+tdPuOME
9aiEkGnHKy5bgSqYTDmuAIKzTQuhUNBwyre9uEEj7A35WBgK7fD9ml1RIf0ju8Bn
HvlEg/N+us6OcffCEQhqCRX3YYrfhUWNXHV7Wn7nall9n0M3JXTC3zIBTQUgZi8X
xqrscJpX0btTxIPjBP5sauPHSjTHtCFP3EGnwMFvqnsce6CuqUW+YEpX0Pghd4ad
NkIefl70i2A0OrAS0hcO
-----END CERTIFICATE-----