Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a373030303a3a2f33362d3434203d3e20323133383634.roa
File:                     326130363a313238313a373030303a3a2f33362d3434203d3e20323133383634.roa (raw, json)
Hash identifier:          66j9DqBEXVlBoeUS8fnf0qQDqnhODTiSfReSxvKeiI8=
Subject key identifier:   C7:A6:70:AD:8A:BA:1B:75:B8:26:B6:5F:6B:D0:B4:63:96:7B:18:E8
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       2877741992DBC2F4312B199A99D249D121916E0F
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a373030303a3a2f33362d3434203d3e20323133383634.roa
Signing time:             Tue 01 Apr 2025 18:50:29 +0000
ROA not before:           Tue 01 Apr 2025 18:45:29 +0000
ROA not after:            Tue 31 Mar 2026 18:50:29 +0000
asID:                     213864
IP address blocks:        2a06:1281:7000::/36 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:77:74:19:92:db:c2:f4:31:2b:19:9a:99:d2:49:d1:21:91:6e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Apr  1 18:45:29 2025 GMT
            Not After : Mar 31 18:50:29 2026 GMT
        Subject: CN=C7A670AD8ABA1B75B826B65F6BD0B463967B18E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:3b:b5:d2:12:e5:ed:3d:6a:4f:8d:49:d9:
                    0d:9a:fd:e8:7a:42:ed:d7:86:0c:2d:2c:cb:a6:83:
                    c4:72:27:f8:a7:d0:4f:99:27:5c:b5:52:94:63:7c:
                    d2:b9:a0:f8:ce:55:4b:2b:3f:72:59:28:79:90:94:
                    dd:d2:31:e9:e5:c1:5c:0c:f4:5b:ff:50:b3:e7:9c:
                    53:75:71:11:7b:99:2a:67:51:b9:6a:2d:33:a0:21:
                    9d:40:26:5a:3d:8a:02:1c:73:a0:6a:56:17:b9:61:
                    a1:06:d7:2a:70:95:e5:68:26:dc:9a:b6:59:cb:b6:
                    85:c6:ab:40:a5:4c:33:9e:f3:19:40:b2:f4:64:54:
                    ed:f7:64:ff:82:bc:77:57:51:54:6c:86:ad:c1:29:
                    df:df:a5:e2:e4:cd:39:65:63:5d:bd:0d:19:9c:73:
                    19:2f:ac:d7:61:1e:5c:fb:5d:2a:e0:17:16:03:8b:
                    f5:d7:9d:b7:a8:0d:69:d7:86:e5:90:d6:84:26:62:
                    c1:c7:e0:64:70:aa:57:de:91:8e:cc:25:31:1e:64:
                    57:89:1f:15:83:96:e3:b7:c7:ce:24:58:9e:ea:b6:
                    9c:91:9b:03:f8:73:8a:27:da:92:da:4a:71:48:dd:
                    14:6b:b3:5f:88:7b:df:bb:8c:e9:fe:5b:ac:74:93:
                    55:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A6:70:AD:8A:BA:1B:75:B8:26:B6:5F:6B:D0:B4:63:96:7B:18:E8
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a373030303a3a2f33362d3434203d3e20323133383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         58:9a:a5:5d:77:50:53:01:0d:5e:c5:c3:c9:e5:bb:a7:a8:0b:
         6a:1f:c8:d7:49:0f:1f:4d:72:cc:58:49:74:5b:e2:95:6f:ee:
         86:ce:f2:54:37:04:66:0c:d2:07:cf:db:a7:3a:d1:a7:1d:64:
         a3:8e:c5:3a:71:f3:b2:3c:44:fb:ef:3c:4d:e2:bf:0e:8f:8b:
         18:5b:e2:1c:32:54:57:e4:c8:4f:6c:db:02:bd:92:a7:54:38:
         f8:07:a8:71:87:2b:60:86:fb:d7:a6:6a:74:82:0a:1f:51:82:
         b9:22:e8:c2:58:d7:46:59:60:b3:76:42:04:41:41:59:d4:09:
         05:38:df:54:5d:af:80:0b:f1:0f:c2:ec:a4:cc:48:44:eb:1f:
         fb:f2:4f:e8:04:05:75:fa:0b:63:ec:d0:98:9c:bf:93:07:12:
         ab:36:f1:05:b5:fa:d1:46:96:a2:e6:5c:f9:80:f6:54:7b:d0:
         44:f8:fb:d0:04:e3:72:8e:da:14:20:36:31:03:a5:f0:fd:21:
         05:af:0d:42:3e:f1:b6:82:80:19:a8:e1:83:a2:e3:22:43:84:
         df:74:c3:89:2b:c2:d6:a1:c6:4d:b4:25:0b:4d:16:e4:91:c3:
         d3:5b:b3:81:5a:04:39:ba:15:15:ef:19:1b:92:a2:16:2f:c4:
         3f:29:ee:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----