Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a313030303a3a2f33362d3336203d3e20323134393131.roa
File:                     326130393a353463363a313030303a3a2f33362d3336203d3e20323134393131.roa (raw, json)
Hash identifier:          OR9y6k1Lelq0eji0iXrLBN1FX1R+t77dZ/V7wRNOcdc=
Subject key identifier:   92:E8:C0:06:69:B3:DF:62:F4:24:C3:A8:C0:F8:27:8D:E3:18:0F:F7
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       41141B5147F3185A03C742CA0A634197A4EFEE00
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a313030303a3a2f33362d3336203d3e20323134393131.roa
Signing time:             Fri 11 Apr 2025 04:57:07 +0000
ROA not before:           Fri 11 Apr 2025 04:52:07 +0000
ROA not after:            Fri 10 Apr 2026 04:57:07 +0000
asID:                     214911
IP address blocks:        2a09:54c6:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:14:1b:51:47:f3:18:5a:03:c7:42:ca:0a:63:41:97:a4:ef:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Apr 11 04:52:07 2025 GMT
            Not After : Apr 10 04:57:07 2026 GMT
        Subject: CN=92E8C00669B3DF62F424C3A8C0F8278DE3180FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:06:b0:3d:1d:7d:ad:ce:e4:84:13:ef:3e:
                    59:ef:b2:aa:1d:a9:35:a2:90:9e:35:ab:0b:69:12:
                    b5:70:69:15:00:89:f9:6f:1e:c1:70:3f:ee:a9:de:
                    5d:ff:17:30:e3:f5:05:51:27:2c:da:af:89:c4:ca:
                    0d:98:0b:58:5c:aa:1d:97:78:67:1e:54:ce:b2:a6:
                    71:86:a9:6a:40:df:4c:0b:bf:86:10:5f:cf:6d:7b:
                    36:9b:47:21:85:17:82:bb:28:e8:1e:57:97:71:63:
                    d1:9a:18:3d:b6:11:41:ed:57:38:ac:f1:9a:74:84:
                    b7:1f:0b:c3:d2:78:37:1e:48:a7:02:f6:cb:de:67:
                    8b:5f:3d:92:eb:58:07:c7:29:a7:5b:d5:40:1c:7b:
                    a8:98:f7:7b:2c:fc:be:5e:94:a7:28:82:d3:07:98:
                    ba:19:d2:c1:7a:29:d9:36:90:fd:73:e4:ae:e6:a5:
                    d1:7d:09:d1:88:b0:a6:97:82:bb:db:ca:ad:cc:ac:
                    05:dc:0d:4c:6c:4c:96:e6:50:9d:24:65:c0:5c:3f:
                    08:00:80:8e:66:d8:51:c9:8a:bd:b3:75:57:04:a5:
                    b6:d9:c0:64:42:23:8f:da:b4:c0:8a:11:9a:92:18:
                    13:28:7b:62:ca:77:d3:da:8c:65:bf:70:38:b1:82:
                    dd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E8:C0:06:69:B3:DF:62:F4:24:C3:A8:C0:F8:27:8D:E3:18:0F:F7
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a313030303a3a2f33362d3336203d3e20323134393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8a:01:7f:25:fc:d5:83:f9:48:aa:12:6f:d1:dc:ee:99:3e:5c:
         95:7a:1d:94:00:6c:cb:6f:1d:bc:0b:69:14:d0:e8:92:83:f9:
         c8:8b:71:62:e9:c5:31:9f:6b:28:e1:17:34:3a:a9:05:7f:a0:
         15:94:85:b0:7a:02:fe:fd:b4:f5:72:c8:7c:62:dd:4c:97:ee:
         d5:64:7b:ae:97:a5:24:93:3b:0f:81:af:a6:80:4d:52:46:7c:
         41:d9:0d:e5:f6:e0:cf:dd:24:4b:8b:8a:99:8c:a2:0e:2b:93:
         d6:81:82:7d:63:41:a0:3f:e2:ca:64:7f:af:ba:bb:73:b1:0f:
         7f:94:bc:3d:d9:7d:58:9c:25:86:68:f8:f2:35:a3:8b:c0:d6:
         91:b8:b6:da:65:69:91:0c:98:8a:fe:0e:ec:98:13:d4:36:ed:
         31:84:3c:04:13:e6:01:66:0b:d2:c7:1d:b4:76:4c:62:6a:d3:
         a0:63:9f:46:8c:6f:4a:35:9c:92:4e:e3:30:6a:02:af:e4:86:
         92:4e:79:ab:1a:05:a7:63:b8:9d:f7:f6:da:b4:2a:07:a7:7c:
         35:39:7b:4d:e6:a3:73:35:82:4a:f1:fb:be:87:64:a0:0f:5b:
         38:db:b3:ad:d6:01:af:db:f2:34:f2:81:67:3f:96:68:3f:51:
         97:71:6a:e3
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUQRQbUUfzGFoDx0LKCmNBl6Tv7gAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA0MTEwNDUyMDdaFw0yNjA0MTAwNDU3MDdaMDMxMTAvBgNV
BAMTKDkyRThDMDA2NjlCM0RGNjJGNDI0QzNBOEMwRjgyNzhERTMxODBGRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYgawPR19rc7khBPvPlnvsqod
qTWikJ41qwtpErVwaRUAiflvHsFwP+6p3l3/FzDj9QVRJyzar4nEyg2YC1hcqh2X
eGceVM6ypnGGqWpA30wLv4YQX89tezabRyGFF4K7KOgeV5dxY9GaGD22EUHtVzis
8Zp0hLcfC8PSeDceSKcC9sveZ4tfPZLrWAfHKadb1UAce6iY93ss/L5elKcogtMH
mLoZ0sF6Kdk2kP1z5K7mpdF9CdGIsKaXgrvbyq3MrAXcDUxsTJbmUJ0kZcBcPwgA
gI5m2FHJir2zdVcEpbbZwGRCI4/atMCKEZqSGBMoe2LKd9PajGW/cDixgt1FAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUkujABmmz32L0JMOowPgnjeMYD/cwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt
MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzkzYTM1MzQ2MzM2
M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzEzNDM5MzEzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGBCoJVMYQMA0GCSqGSIb3DQEBCwUAA4IBAQCKAX8l/NWD+UiqEm/R
3O6ZPlyVeh2UAGzLbx28C2kU0OiSg/nIi3Fi6cUxn2so4Rc0OqkFf6AVlIWwegL+
/bT1csh8Yt1Ml+7VZHuul6UkkzsPga+mgE1SRnxB2Q3l9uDP3SRLi4qZjKIOK5PW
gYJ9Y0GgP+LKZH+vurtzsQ9/lLw92X1YnCWGaPjyNaOLwNaRuLbaZWmRDJiK/g7s
mBPUNu0xhDwEE+YBZgvSxx20dkxiatOgY59GjG9KNZySTuMwagKv5IaSTnmrGgWn
Y7id9/batCoHp3w1OXtN5qNzNYJK8fu+h2SgD1s427Ot1gGv2/I08oFnP5ZoP1GX
cWrj
-----END CERTIFICATE-----