Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS8075.roa
File:                     AS8075.roa (raw, json)
Hash identifier:          C0eK/RFZ0KQdup5oZEeGQTW4YAV739T16s3S230b8lM=
Subject key identifier:   0D:C8:F3:AD:08:A2:30:32:79:ED:11:3A:F0:48:AC:CE:48:B5:38:A2
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       573FB1E1438426A8C77604BCAD97027DF3AB72B0
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS8075.roa
Signing time:             Tue 20 Aug 2024 02:31:56 +0000
ROA not before:           Tue 20 Aug 2024 02:26:56 +0000
ROA not after:            Tue 19 Aug 2025 02:31:56 +0000
asID:                     8075
IP address blocks:        2a07:54c4:1756::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3f:b1:e1:43:84:26:a8:c7:76:04:bc:ad:97:02:7d:f3:ab:72:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Aug 20 02:26:56 2024 GMT
            Not After : Aug 19 02:31:56 2025 GMT
        Subject: CN=0DC8F3AD08A2303279ED113AF048ACCE48B538A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:58:84:5c:7d:c3:76:29:69:2a:7c:5f:3d:
                    53:f0:d7:9b:f0:09:3a:d7:e3:fb:24:b7:70:3d:e4:
                    31:df:f9:b3:13:0f:68:6d:26:8d:1f:aa:ea:01:2a:
                    86:e9:a6:d5:53:94:45:86:70:98:f1:ae:d7:bb:8a:
                    5f:35:18:21:8e:c9:aa:39:30:8f:c1:eb:6b:f0:78:
                    40:2f:8f:cf:97:30:3c:a2:16:d2:71:b3:12:18:a3:
                    10:1f:42:37:52:3b:d8:04:cf:51:b0:88:34:91:2b:
                    f9:94:9b:6f:06:42:c1:4f:b7:28:f8:d7:8e:f5:17:
                    b1:a9:fa:39:ef:a3:27:ac:35:dc:92:db:23:ab:a3:
                    92:c7:9f:75:0b:39:6a:79:ff:bd:4b:5a:7c:3b:10:
                    e8:7b:e7:14:74:0e:82:40:ca:ec:c5:f6:a6:5c:61:
                    ed:98:9a:ef:68:c5:b1:d3:e8:e1:25:f4:0c:7f:b5:
                    19:62:f9:2b:8d:10:04:9d:c8:64:54:5b:5a:61:1b:
                    b3:7d:b8:6d:ec:b9:9b:2a:55:cc:db:b9:f6:30:df:
                    67:7f:b7:3f:9f:44:05:73:08:99:e9:84:fd:4b:6f:
                    e0:c0:c4:d3:e3:d4:22:40:17:a9:bf:87:33:db:c9:
                    92:d9:e6:f0:be:bd:1c:15:59:fc:93:66:ba:8e:a8:
                    bf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C8:F3:AD:08:A2:30:32:79:ED:11:3A:F0:48:AC:CE:48:B5:38:A2
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS8075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:1756::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:d4:05:87:0a:d2:65:5e:0f:f2:97:5c:c2:d7:d9:db:f4:ff:
         fb:31:bd:72:76:a9:9e:77:1b:5c:08:de:06:f0:7d:36:2f:b3:
         f4:74:8b:b5:8c:13:33:22:4c:48:1f:5c:f6:e6:75:9c:f2:e0:
         52:dc:cb:d7:ee:11:5b:f9:b4:e6:7e:92:df:36:8b:6d:c0:ff:
         9e:74:30:b5:4a:e8:4c:7c:75:5e:a4:89:db:51:2a:6b:27:be:
         6e:93:fc:ba:11:6a:46:b0:e1:0a:38:e9:9a:de:4c:60:62:ca:
         19:fb:85:ed:68:d6:06:da:38:d1:1a:9d:64:7a:ca:87:21:d3:
         5e:59:fe:cd:cb:85:5c:8c:83:e2:32:7f:f2:3e:75:93:9f:e0:
         fb:5c:2c:95:c2:1e:01:7e:0c:79:85:75:a3:6d:e6:d3:af:9a:
         a7:2b:dc:6f:ec:d9:83:17:d5:f0:b9:41:8e:62:4e:0f:c8:d3:
         a8:e5:4b:bd:fc:cc:05:0f:44:52:4b:a5:5c:5e:1c:99:42:16:
         e0:3f:d0:47:2b:06:59:96:20:0f:d3:0a:cc:24:6c:24:3d:b3:
         4e:a9:60:6d:0a:8e:77:45:d9:fd:2b:7f:63:0d:8b:86:30:04:
         bf:79:c0:c5:8a:21:79:d7:d6:c4:27:16:ac:f4:46:35:4c:12:
         f2:7e:29:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----