Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623030623a3a2f34382d3438203d3e20323037343234.roa
File:                     326130363a313238333a623030623a3a2f34382d3438203d3e20323037343234.roa (raw, json)
Hash identifier:          u5M1XGQbJ7n1BlES+oPqv+PnF4oD7XYoRY1JdvNxLaQ=
Subject key identifier:   F5:32:73:43:2A:A3:C1:ED:15:83:2B:8B:77:15:CD:89:C3:A2:09:D2
Certificate issuer:       /CN=20595BDBAD09C7D604202305854D1DF14F190959
Certificate serial:       5039D3E15B28240ACD0DF45C81EA53059E581598
Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623030623a3a2f34382d3438203d3e20323037343234.roa
Signing time:             Sun 15 Sep 2024 14:36:36 +0000
ROA not before:           Sun 15 Sep 2024 14:31:36 +0000
ROA not after:            Sun 14 Sep 2025 14:36:36 +0000
asID:                     207424
IP address blocks:        2a06:1283:b00b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:39:d3:e1:5b:28:24:0a:cd:0d:f4:5c:81:ea:53:05:9e:58:15:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959
        Validity
            Not Before: Sep 15 14:31:36 2024 GMT
            Not After : Sep 14 14:36:36 2025 GMT
        Subject: CN=F53273432AA3C1ED15832B8B7715CD89C3A209D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1f:c3:a4:29:1e:62:25:54:ab:3a:82:a5:42:
                    18:8d:ae:ef:ff:54:b5:cd:0a:43:a2:ae:86:55:13:
                    bb:95:9f:b7:37:9f:50:87:42:e0:03:a0:56:c4:32:
                    07:7c:19:fb:60:66:b0:83:44:68:d7:97:2e:81:3e:
                    76:d5:c5:75:2a:1d:ad:ce:6e:37:1e:3f:08:dd:c1:
                    57:75:6e:98:60:6e:9e:5e:79:1a:62:d6:93:f6:63:
                    67:de:9b:ef:4c:50:34:4d:9b:3f:6c:9f:15:29:a4:
                    1e:47:8c:9f:0f:ba:44:b7:c3:d8:bb:0c:c6:6a:ef:
                    63:7b:7e:43:65:7a:50:b7:1f:6e:99:35:19:9c:04:
                    3d:92:96:c2:d2:b8:bf:e6:5f:48:95:a3:60:1d:02:
                    12:f2:9d:9c:bb:a2:50:ce:39:67:30:ae:d9:bf:4a:
                    b2:f9:b3:15:ee:75:e9:ef:3d:88:9c:c9:fc:f5:df:
                    37:83:d8:ba:b7:ad:71:44:29:d3:71:bc:49:9b:3b:
                    5f:44:cf:10:85:0e:84:5a:a2:49:96:48:6b:10:4c:
                    d7:21:62:04:d1:d7:32:f6:e6:f6:47:41:d3:e3:d3:
                    b7:5e:dc:32:fd:67:92:50:15:bc:85:5e:d6:f6:0c:
                    52:5f:e5:6c:e1:25:b4:92:6b:73:d9:b5:1d:ab:e1:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:32:73:43:2A:A3:C1:ED:15:83:2B:8B:77:15:CD:89:C3:A2:09:D2
            X509v3 Authority Key Identifier:
                keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623030623a3a2f34382d3438203d3e20323037343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:ed:80:d1:3b:8e:e0:2a:7a:f0:47:46:91:dd:b2:be:96:12:
         8c:6d:5c:09:36:ea:ef:46:12:38:94:ee:46:f8:a7:8a:4d:83:
         30:d1:8e:63:ed:56:65:be:cc:86:2f:46:27:52:46:66:86:07:
         ee:ef:03:d7:17:fc:43:c0:f4:7f:35:bd:2c:3a:96:76:38:a0:
         9c:e4:d9:57:07:61:fb:62:aa:be:c1:26:48:67:9f:7c:a5:c6:
         a9:8d:7b:4f:e5:4d:09:10:ac:3b:67:d0:f2:12:6a:52:75:33:
         72:28:91:aa:6a:82:f8:70:2f:92:66:1f:ce:9a:09:26:98:aa:
         19:f1:4b:2b:1a:9e:2a:48:6e:68:ac:d4:0f:af:52:8d:5d:e9:
         9e:4a:99:fc:a1:d9:c5:74:7d:82:30:1d:73:f2:b8:72:0e:d0:
         b8:40:e3:5a:98:74:9d:c6:cf:ef:9c:12:a2:7c:3d:ce:2c:2e:
         ac:c6:67:dc:d7:16:0b:e7:c5:dc:4c:fb:12:a7:34:1d:b4:94:
         66:51:13:3d:43:4d:ef:5a:ae:73:15:f2:dc:8d:6d:97:86:3e:
         5e:a9:fc:4c:2a:85:27:9e:ff:29:c9:7f:5a:29:4d:c1:e3:e3:
         ae:b4:71:2e:10:d8:b7:42:7f:d4:19:69:3f:d0:8b:ef:4d:fe:
         4a:90:ea:f3
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUUDnT4VsoJArNDfRcgepTBZ5YFZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0
RjE5MDk1OTAeFw0yNDA5MTUxNDMxMzZaFw0yNTA5MTQxNDM2MzZaMDMxMTAvBgNV
BAMTKEY1MzI3MzQzMkFBM0MxRUQxNTgzMkI4Qjc3MTVDRDg5QzNBMjA5RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbH8OkKR5iJVSrOoKlQhiNru//
VLXNCkOiroZVE7uVn7c3n1CHQuADoFbEMgd8GftgZrCDRGjXly6BPnbVxXUqHa3O
bjcePwjdwVd1bphgbp5eeRpi1pP2Y2fem+9MUDRNmz9snxUppB5HjJ8PukS3w9i7
DMZq72N7fkNlelC3H26ZNRmcBD2SlsLSuL/mX0iVo2AdAhLynZy7olDOOWcwrtm/
SrL5sxXudenvPYicyfz13zeD2Lq3rXFEKdNxvEmbO19EzxCFDoRaokmWSGsQTNch
YgTR1zL25vZHQdPj07de3DL9Z5JQFbyFXtb2DFJf5WzhJbSSa3PZtR2r4Z6tAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQU9TJzQyqjwe0VgyuLdxXNicOiCdIwHwYDVR0j
BBgwFoAUIFlb260Jx9YEICMFhU0d8U8ZCVkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm
NDA5LzEvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5MDk1OS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5
MDk1OS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt
MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzEvMzI2MTMwMzYzYTMxMzIzODMz
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNzM0MzIzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoGEoOwCzANBgkqhkiG9w0BAQsFAAOCAQEAT+2A0TuO4Cp68EdG
kd2yvpYSjG1cCTbq70YSOJTuRvinik2DMNGOY+1WZb7Mhi9GJ1JGZoYH7u8D1xf8
Q8D0fzW9LDqWdjignOTZVwdh+2KqvsEmSGeffKXGqY17T+VNCRCsO2fQ8hJqUnUz
ciiRqmqC+HAvkmYfzpoJJpiqGfFLKxqeKkhuaKzUD69SjV3pnkqZ/KHZxXR9gjAd
c/K4cg7QuEDjWph0ncbP75wSonw9ziwurMZn3NcWC+fF3Ez7Eqc0HbSUZlETPUNN
71qucxXy3I1tl4Y+Xqn8TCqFJ57/Kcl/WilNwePjrrRxLhDYt0J/1BlpP9CL703+
SpDq8w==
-----END CERTIFICATE-----