Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa
File:                     326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa (raw, json)
Hash identifier:          /JgrvpSR1ZDGP36oDONfP8baAAR4FG/skafz4v4Fs6E=
Subject key identifier:   F2:7D:10:7A:5A:0C:59:4F:6E:8E:34:E5:7C:A4:30:04:5C:87:12:CD
Certificate issuer:       /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118
Certificate serial:       248804F8D6CEAA474B60BF9B8A1E74D033800B09
Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa
Signing time:             Sat 12 Apr 2025 14:06:36 +0000
ROA not before:           Sat 12 Apr 2025 14:01:36 +0000
ROA not after:            Sat 11 Apr 2026 14:06:36 +0000
asID:                     39351
IP address blocks:        2a0b:4e07:60e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:88:04:f8:d6:ce:aa:47:4b:60:bf:9b:8a:1e:74:d0:33:80:0b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118
        Validity
            Not Before: Apr 12 14:01:36 2025 GMT
            Not After : Apr 11 14:06:36 2026 GMT
        Subject: CN=F27D107A5A0C594F6E8E34E57CA430045C8712CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:54:4e:70:f9:8a:75:33:fa:d0:3c:9d:43:
                    88:e8:0b:e1:cf:be:f8:66:89:f8:e5:8e:6e:81:b4:
                    a8:6f:a3:a1:dd:3c:54:d5:72:97:e8:45:1c:01:72:
                    bf:3f:88:b8:9d:6d:93:b6:0a:2b:10:ae:db:fa:81:
                    36:92:21:c1:ea:3b:a4:24:0b:b0:3d:d7:86:3f:40:
                    69:78:d1:04:9a:47:c4:12:e8:dc:65:19:a9:89:01:
                    6b:50:56:c9:69:7f:0e:24:ed:3e:f2:85:ee:dc:bd:
                    93:b2:b3:c9:d4:e1:29:83:74:47:f8:56:65:62:36:
                    0f:ba:5c:39:b2:27:02:6a:e4:bd:07:0a:38:a0:d4:
                    a3:8f:5f:7e:7e:db:4c:21:ce:f9:1a:b0:4d:7e:cb:
                    2d:54:57:6b:4d:e6:8d:97:5b:ad:51:90:d4:10:3c:
                    99:b3:fe:56:fb:33:74:00:83:a7:46:0c:d6:d0:3f:
                    2f:d9:36:b0:68:24:44:3a:91:f2:bd:6e:b6:72:ea:
                    3b:91:00:84:a2:74:ea:d5:f7:de:2b:81:16:50:83:
                    b8:ef:b2:73:14:b0:65:e4:74:8e:f6:d4:db:0a:da:
                    a6:59:d1:9c:1c:92:64:e0:35:e4:ac:06:81:0d:28:
                    89:fa:3a:ab:fd:8a:cc:04:5d:24:7a:09:fe:71:39:
                    c0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7D:10:7A:5A:0C:59:4F:6E:8E:34:E5:7C:A4:30:04:5C:87:12:CD
            X509v3 Authority Key Identifier:
                keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:60e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         10:c2:5f:a6:bc:af:5c:bb:f6:20:b8:3a:a3:e6:a9:0b:d6:db:
         28:e9:d2:71:6d:48:f2:4d:b4:f1:5d:87:2e:36:5a:40:61:04:
         27:ae:96:29:76:ac:9b:d8:ba:f3:fb:b4:fd:06:2c:43:2f:90:
         b8:62:9e:ea:4e:b4:64:d6:27:d7:33:15:66:20:da:c0:14:85:
         e7:5c:c0:71:de:6f:f0:4f:07:82:cb:2a:20:d0:21:6b:5d:44:
         ab:63:6b:8a:a7:62:34:b2:b8:f0:e9:a4:75:68:0a:29:fa:81:
         5e:fd:d2:05:39:27:f0:ea:bf:1b:20:cb:38:ef:17:68:d0:ea:
         74:9f:d0:cd:a7:7a:35:d5:ac:d3:c9:1f:b5:d7:61:b6:8c:25:
         f6:0c:6b:67:91:42:d8:03:4e:3c:43:20:6b:fc:00:5f:b8:ed:
         83:d6:55:9d:cc:d6:f6:f4:f9:b2:de:8a:b3:31:6d:ca:39:92:
         78:32:3f:ea:2d:35:5b:bb:0d:bc:74:14:52:e6:2c:d9:7a:c6:
         bb:a1:d7:42:3d:e6:15:4b:98:c3:22:0d:e3:82:20:df:4c:54:
         bf:6f:cd:2c:92:a7:ec:2d:ef:6d:fa:dc:43:35:fa:53:58:13:
         9f:a1:4c:1e:a2:12:e0:87:85:e1:70:21:ae:17:c1:5f:af:4e:
         9d:43:ab:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----