Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333430303a3a2f34382d3438203d3e20323134323233.roa
File:                     326130623a346530373a333430303a3a2f34382d3438203d3e20323134323233.roa (raw, json)
Hash identifier:          TuzG5Abf1/npqqnPdFZgb/L0RItdq1VAulkCBrRYCAk=
Subject key identifier:   9A:B0:8C:12:51:E2:01:E9:B8:99:7F:E6:F0:EF:B3:E3:B8:B0:1C:B4
Certificate issuer:       /CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
Certificate serial:       6D2E1481B5A9FEFA800A6CBF35D5FC4801A117F6
Authority key identifier: E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333430303a3a2f34382d3438203d3e20323134323233.roa
Signing time:             Sat 25 Jan 2025 23:18:28 +0000
ROA not before:           Sat 25 Jan 2025 23:13:28 +0000
ROA not after:            Sat 24 Jan 2026 23:18:28 +0000
asID:                     214223
IP address blocks:        2a0b:4e07:3400::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2e:14:81:b5:a9:fe:fa:80:0a:6c:bf:35:d5:fc:48:01:a1:17:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
        Validity
            Not Before: Jan 25 23:13:28 2025 GMT
            Not After : Jan 24 23:18:28 2026 GMT
        Subject: CN=9AB08C1251E201E9B8997FE6F0EFB3E3B8B01CB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:8e:29:33:37:37:5e:0f:13:1f:02:77:ba:
                    35:0f:e4:15:27:69:36:7d:9b:27:87:96:e0:5e:19:
                    15:8d:39:ba:db:97:6a:e0:2f:49:75:e3:7f:b2:cc:
                    1b:9b:ef:c3:53:85:6f:31:e1:df:b8:15:70:97:67:
                    20:4e:19:69:97:8d:7e:a0:68:27:80:b9:ee:01:1f:
                    4e:52:27:aa:04:8c:5b:09:46:8b:eb:20:fc:c0:4c:
                    4b:2d:b2:36:98:d3:50:71:6f:3b:f3:e3:07:5f:67:
                    8f:21:5e:04:37:37:a4:78:6c:aa:bd:05:5f:27:9b:
                    ac:92:8e:03:76:9d:56:ad:7e:90:9b:e5:03:0a:a0:
                    6f:d0:76:5a:d8:2b:4b:a0:57:6a:73:66:4b:76:80:
                    1c:c3:e5:06:61:15:41:88:28:54:c7:fe:a7:3d:80:
                    e7:f7:c3:51:b9:5b:2f:7d:c0:1c:d1:53:b2:d0:5c:
                    86:cb:18:47:54:7d:bf:8e:80:a4:87:58:18:92:30:
                    1b:de:cd:19:d2:5f:24:33:45:e6:4e:7a:b3:1f:ee:
                    1f:47:84:d2:ff:ba:bc:c8:b5:70:5d:3c:74:6d:f5:
                    68:c4:f9:c8:46:26:9d:1c:f9:33:6f:2d:ab:10:a4:
                    8f:c1:29:92:c5:5e:8a:51:d0:b3:57:a7:88:ce:ca:
                    06:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B0:8C:12:51:E2:01:E9:B8:99:7F:E6:F0:EF:B3:E3:B8:B0:1C:B4
            X509v3 Authority Key Identifier:
                keyid:E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333430303a3a2f34382d3438203d3e20323134323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:3400::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:d3:77:5f:21:c4:3e:f9:26:9f:a8:53:48:df:91:85:dd:47:
         c4:7d:28:52:2b:89:c7:e2:43:60:e4:94:e4:35:99:0b:12:b0:
         79:f4:c8:d4:e8:64:5f:89:bd:47:a4:a3:f2:44:c5:7a:2c:93:
         5b:58:cc:6c:3d:e2:cc:84:09:1d:3c:48:a4:8c:ae:98:2c:25:
         48:d7:1f:8f:1c:d7:4b:cc:4c:7b:ff:6d:d9:3f:e9:22:0c:3c:
         1c:b4:b6:c9:f6:bc:b9:14:8c:5b:d1:0b:06:9f:3f:33:52:01:
         d1:27:e0:2f:a8:c3:9c:a0:f0:d8:73:e6:d2:78:54:7b:17:91:
         ef:44:ee:ac:48:ae:f1:bd:a2:af:d7:50:be:9a:07:47:33:51:
         c6:70:4c:d5:e4:33:7f:e6:85:81:9f:7c:0c:cc:12:e6:5a:04:
         18:96:1a:da:be:7a:af:f6:a4:84:f6:01:e9:00:9c:97:c7:c1:
         7d:9b:09:77:71:d7:0e:b9:82:26:dc:24:32:10:96:c9:a0:f6:
         19:0d:9c:b9:73:1b:9f:f3:fa:8c:ae:46:dc:21:1c:97:84:19:
         3c:c8:33:ff:e2:08:01:b8:f5:e2:57:3c:6c:61:4e:88:b6:2f:
         10:ad:ad:eb:4f:05:fa:5f:76:09:b9:af:29:26:1b:2c:48:58:
         e9:e0:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----