Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/326131343a313463313a3130303a3a2f34382d3438203d3e203531303139.roa
File:                     326131343a313463313a3130303a3a2f34382d3438203d3e203531303139.roa (raw, json)
Hash identifier:          69RcUidZnQ+LqgABsH+Kh3UWsC9vqAhVCCjeesgrVBw=
Subject key identifier:   D6:C8:94:F0:6B:CF:A5:0D:53:A8:11:A3:BF:87:DA:89:B9:0D:5C:7E
Certificate issuer:       /CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E
Certificate serial:       78E941248D4BF7D5C71A80DCAB872CBD315D48D2
Authority key identifier: 58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/326131343a313463313a3130303a3a2f34382d3438203d3e203531303139.roa
Signing time:             Fri 04 Apr 2025 01:06:26 +0000
ROA not before:           Fri 04 Apr 2025 01:01:26 +0000
ROA not after:            Fri 03 Apr 2026 01:06:26 +0000
asID:                     51019
IP address blocks:        2a14:14c1:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e9:41:24:8d:4b:f7:d5:c7:1a:80:dc:ab:87:2c:bd:31:5d:48:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E
        Validity
            Not Before: Apr  4 01:01:26 2025 GMT
            Not After : Apr  3 01:06:26 2026 GMT
        Subject: CN=D6C894F06BCFA50D53A811A3BF87DA89B90D5C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ee:7d:65:a4:3a:5d:d7:fa:2e:59:52:eb:f0:
                    29:14:14:be:1c:4b:58:ef:49:30:f4:52:42:50:21:
                    09:55:1a:1d:66:80:d9:af:94:9a:2a:ef:43:b0:df:
                    e6:55:3b:b8:57:59:c3:50:6a:f9:d3:b3:ad:03:95:
                    00:ba:09:9a:b6:2c:3c:30:24:c1:dc:ad:d9:2e:ab:
                    b0:ce:93:1c:e4:6d:42:7a:90:5a:f0:ed:80:6f:65:
                    8f:3d:05:14:79:6e:2b:47:e4:91:f1:bd:54:53:eb:
                    93:7b:5b:23:fe:63:7a:f3:02:c2:c5:21:f3:27:25:
                    67:4b:f8:08:ed:4d:10:13:52:b7:c7:12:18:e5:d4:
                    74:3f:0a:19:63:6b:44:13:b8:64:b6:b7:56:c9:64:
                    be:5e:8a:df:1f:76:3c:37:8d:bf:49:bd:ab:80:c3:
                    9a:68:45:43:6c:b1:91:e5:04:b4:62:b5:0c:4b:3a:
                    e1:48:78:93:1d:bf:f8:13:03:9d:64:ee:72:b5:f8:
                    37:c9:81:9d:a6:f3:0b:1c:07:4c:7a:bd:b0:47:e3:
                    8b:50:96:0e:83:ed:2e:d6:1c:08:57:73:7c:36:a8:
                    6c:f8:6b:04:25:87:4e:73:4d:66:68:2b:42:06:ec:
                    72:3d:ae:c5:de:f9:ab:1e:ad:0a:60:c2:1d:94:56:
                    3f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C8:94:F0:6B:CF:A5:0D:53:A8:11:A3:BF:87:DA:89:B9:0D:5C:7E
            X509v3 Authority Key Identifier:
                keyid:58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/326131343a313463313a3130303a3a2f34382d3438203d3e203531303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:14c1:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:89:38:2f:86:b8:0d:cb:24:cb:32:1b:d9:da:c1:29:b7:12:
         b4:21:9b:ad:0e:73:d2:1c:fc:e1:35:3c:b1:bd:a0:68:2b:38:
         ff:3d:8d:37:39:cd:36:ed:b3:98:ed:73:a5:45:ac:5a:be:77:
         75:c8:3f:36:ee:4a:f2:55:92:fd:49:cb:4d:10:e8:dc:2f:e4:
         7f:af:04:e2:fc:39:ff:1a:56:4f:1a:ab:f3:e7:50:9c:56:39:
         c9:25:a5:69:dc:51:bb:19:49:a8:ae:07:c9:7b:45:ea:86:43:
         d1:8f:4b:16:ae:41:01:f8:26:87:15:60:3e:fa:11:1b:e6:e2:
         10:ad:d1:55:9d:a2:5f:f4:c1:8d:e3:50:e4:4d:e1:62:bc:8a:
         cc:b9:c5:7d:88:24:45:85:ad:9b:53:4b:3c:95:07:ef:ad:d6:
         e5:9b:0a:ce:c8:33:7a:bc:1a:44:a4:9c:e2:01:ac:fd:9b:1e:
         97:5c:db:84:c8:c0:18:f9:de:49:70:4f:b7:b4:a1:7b:c3:ea:
         7f:1a:af:62:2e:d8:f0:d0:74:a9:87:cb:34:32:a4:67:d8:59:
         c7:e1:ad:ca:7a:4b:6d:57:6d:96:ca:69:60:4b:0c:5a:d7:3a:
         97:3c:48:ed:6a:5e:9d:d5:1b:aa:b3:f0:80:06:6b:d1:51:63:
         9b:64:0f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----