Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530303a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613530303a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          xUPPpdCDSqoWg3s5y1davUFioaoYAU/44ExaIUjs6aI=
Subject key identifier:   97:17:08:85:77:62:A7:FE:31:87:20:EB:DA:61:1D:56:DE:66:6D:12
Certificate issuer:       /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial:       16D9279FE0A606A1E10532D18D83F1E21C0E92DF
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530303a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sat 08 Feb 2025 19:35:55 +0000
ROA not before:           Sat 08 Feb 2025 19:30:55 +0000
ROA not after:            Sat 07 Feb 2026 19:35:55 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a500::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d9:27:9f:e0:a6:06:a1:e1:05:32:d1:8d:83:f1:e2:1c:0e:92:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
        Validity
            Not Before: Feb  8 19:30:55 2025 GMT
            Not After : Feb  7 19:35:55 2026 GMT
        Subject: CN=971708857762A7FE318720EBDA611D56DE666D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:dd:9f:d3:13:ff:2d:e4:e7:4a:c4:de:f8:
                    38:8f:0d:e6:23:a3:2d:d8:c9:2c:ad:24:9a:36:96:
                    62:48:67:5e:4a:7b:5d:2b:6d:71:73:46:db:2b:cf:
                    b9:d0:1e:40:93:0a:48:cb:8f:3e:89:6e:4f:e6:ba:
                    42:55:91:e1:fc:fd:4a:b5:25:d6:4f:5d:a3:2d:88:
                    0c:2b:77:64:ff:cb:60:75:80:f4:af:24:ec:2f:48:
                    5f:6b:c8:ee:c0:9a:57:ce:94:e6:f6:b7:cd:89:d3:
                    c4:69:57:2e:58:40:20:84:f0:fe:57:b4:f0:ab:41:
                    62:d5:4b:18:f6:ec:c2:41:df:c6:e2:b3:59:4c:d5:
                    76:37:b4:3c:88:27:f0:1c:26:ab:08:e3:d2:2a:77:
                    9f:d3:56:e1:2d:be:8c:83:f9:37:29:8a:72:de:39:
                    bf:ad:70:f0:63:02:85:3e:d3:2f:48:c6:36:87:22:
                    79:83:a7:61:82:62:d9:05:6b:c6:63:3b:2e:f0:fa:
                    fe:0e:58:a7:b1:1a:0b:55:5b:95:9a:e7:03:00:27:
                    8d:5a:ef:0f:59:c4:bd:4a:9d:13:c5:99:ff:47:ef:
                    48:48:36:05:fc:32:93:ed:d4:72:ec:ed:4a:81:d4:
                    32:7a:6e:36:9f:ab:1f:55:ef:e2:c7:aa:a0:31:57:
                    c9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:17:08:85:77:62:A7:FE:31:87:20:EB:DA:61:1D:56:DE:66:6D:12
            X509v3 Authority Key Identifier:
                keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530303a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a500::/46

    Signature Algorithm: sha256WithRSAEncryption
         5a:29:cc:78:8c:1e:5b:12:28:8a:e1:21:18:be:1d:32:9e:80:
         98:82:be:f7:53:71:d3:27:d1:13:05:dc:88:85:0e:4e:3b:d3:
         29:74:52:84:ca:55:f6:a8:0a:33:d1:b1:35:f7:d9:26:62:40:
         b0:a3:8c:fa:18:48:ed:f0:a0:0e:57:f4:2f:23:3a:c3:24:ae:
         16:43:28:5f:69:53:47:7a:e2:cb:4a:ba:43:36:68:ca:cd:4a:
         93:eb:97:97:bf:f9:a9:ff:a3:d4:8c:e7:29:99:98:23:17:ca:
         09:d4:88:31:f0:e6:db:3d:b0:cf:8e:eb:2b:16:ae:a8:86:f2:
         94:a3:f6:ef:73:8f:ec:39:a9:cf:df:26:aa:84:93:9b:91:3b:
         9f:d4:31:b9:21:f7:44:29:aa:b3:6c:fc:97:33:f8:68:1c:e3:
         e3:4d:d6:bb:77:d4:0b:cf:bc:6c:39:31:d1:1b:ff:fe:0a:b4:
         f2:33:b4:c4:ab:af:98:1c:3b:b7:4b:9d:17:07:7b:c1:7d:29:
         ea:5c:c9:b7:9c:e8:f6:00:4c:9d:64:23:42:4f:9f:37:ac:99:
         dd:ec:14:ea:5d:b3:60:12:9c:63:90:48:a4:72:b0:82:87:3d:
         c5:1e:22:b7:cd:fb:83:8c:5a:c9:2e:28:75:5e:7c:90:41:d4:
         af:6f:32:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----