Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          kp4zuGmfALz4BBNbJHOCEzEIlaoLL2JZoqnMbF6HOVw=
Subject key identifier:   B0:84:34:2C:32:67:51:62:B0:E1:ED:2E:2D:D5:45:5B:04:BF:BA:C0
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       1EC091FDFDE361C878055C47CCE2FAB1A250800C
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Mon 10 Feb 2025 02:39:44 +0000
ROA not before:           Mon 10 Feb 2025 02:34:44 +0000
ROA not after:            Mon 09 Feb 2026 02:39:44 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8e30::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c0:91:fd:fd:e3:61:c8:78:05:5c:47:cc:e2:fa:b1:a2:50:80:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Feb 10 02:34:44 2025 GMT
            Not After : Feb  9 02:39:44 2026 GMT
        Subject: CN=B084342C32675162B0E1ED2E2DD5455B04BFBAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:ac:55:3f:84:63:16:ca:83:98:61:bb:3e:
                    f9:88:d0:5f:f0:42:80:54:44:97:29:9d:43:8e:99:
                    5d:d3:fc:75:7b:bd:a3:1f:2d:af:14:d3:60:b8:f8:
                    85:8b:0b:03:86:aa:19:21:03:c6:f9:aa:69:01:f6:
                    d5:0d:c7:3a:df:11:67:8c:33:f2:e9:a2:b3:29:a4:
                    51:f8:95:ec:7b:ca:22:a3:3d:14:82:9f:dc:d3:c5:
                    87:57:8b:da:0b:3c:12:28:5c:76:33:ba:08:19:5e:
                    1b:28:ae:98:3d:24:aa:3f:d8:47:26:3d:22:06:91:
                    b3:38:51:6b:93:e5:1e:f3:0a:ae:4c:3b:0a:9f:f4:
                    25:22:2e:b5:ce:38:96:c6:6a:60:46:7f:63:00:39:
                    24:c8:ac:9a:25:15:b4:22:13:95:7d:78:94:d0:2e:
                    ad:df:46:13:a6:ef:ff:eb:94:10:c0:6e:d8:6c:af:
                    83:bf:49:08:1b:cf:9a:e1:ff:91:35:6e:98:2a:f8:
                    d2:dd:35:8d:c3:4a:21:8e:8c:09:cd:26:67:77:68:
                    a8:44:f0:f7:32:ed:00:ff:dc:18:f7:5e:27:b1:53:
                    0c:64:a3:45:23:6b:be:a6:c9:97:b4:b6:91:02:6f:
                    2d:c1:01:36:a9:17:7d:95:2d:b8:57:95:cc:d2:d6:
                    48:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:84:34:2C:32:67:51:62:B0:E1:ED:2E:2D:D5:45:5B:04:BF:BA:C0
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8e30::/44

    Signature Algorithm: sha256WithRSAEncryption
         06:01:4e:d1:63:23:2b:58:18:6a:93:eb:5b:e3:42:38:2f:9b:
         51:1b:ba:1f:97:ac:51:7b:a3:d9:fe:a3:3e:67:64:79:1a:d8:
         af:c8:c2:f7:11:56:d3:37:a7:e2:53:31:c8:d5:9b:3e:3b:25:
         34:61:6d:8f:fd:3e:e2:3c:62:70:02:fb:e8:2f:0d:42:1b:a0:
         75:2c:7b:53:73:9d:23:0f:05:50:54:71:ec:c4:f4:49:4a:54:
         e0:bf:59:f8:a4:a6:4e:a6:80:8a:09:9e:ca:ee:ba:e5:a6:88:
         ab:64:a9:5f:5e:cf:b1:3f:a2:92:c3:76:32:7c:61:14:45:08:
         02:f3:56:03:5a:b5:cd:fe:4b:6b:c9:6c:40:89:5a:ed:4f:54:
         ae:cd:4c:bb:fd:27:40:e1:27:52:4e:1d:ee:da:38:4d:ac:be:
         7e:a6:e9:ad:43:e7:24:24:5d:9f:84:08:d4:4e:13:8b:ee:9b:
         86:22:7a:0c:00:26:ac:a4:d3:0c:a9:77:f4:ee:45:b2:c9:a6:
         59:e8:3e:73:88:5e:3d:cc:3e:7f:d7:40:89:04:5d:4f:32:c9:
         75:19:8c:32:ed:5e:30:00:84:9a:ae:93:13:be:49:2a:e2:a8:
         54:b5:ad:99:56:e5:54:a1:02:a0:d5:23:ee:dc:7f:7e:6b:03:
         85:e9:78:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----