Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/326131343a373538303a3765303a3a2f34382d3438203d3e20323134353334.roa
File:                     326131343a373538303a3765303a3a2f34382d3438203d3e20323134353334.roa (raw, json)
Hash identifier:          CpYftnzlZeDqedYjZ6V5exipLdXe535/qHz7Sz54bro=
Subject key identifier:   23:20:B5:30:A0:96:FD:C0:69:43:13:AA:11:EE:49:B9:4E:52:2F:45
Certificate issuer:       /CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13
Certificate serial:       151F2BBBC297E8F0937E28B743962199C46BC722
Authority key identifier: F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/326131343a373538303a3765303a3a2f34382d3438203d3e20323134353334.roa
Signing time:             Fri 31 Jul 2026 09:41:33 +0000
ROA not before:           Fri 31 Jul 2026 09:36:33 +0000
ROA not after:            Fri 30 Jul 2027 09:41:33 +0000
asID:                     214534
IP address blocks:        2a14:7580:7e0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1f:2b:bb:c2:97:e8:f0:93:7e:28:b7:43:96:21:99:c4:6b:c7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13
        Validity
            Not Before: Jul 31 09:36:33 2026 GMT
            Not After : Jul 30 09:41:33 2027 GMT
        Subject: CN=2320B530A096FDC0694313AA11EE49B94E522F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:c2:b4:c3:94:c4:3c:19:7c:95:60:c5:fe:
                    11:f1:06:74:d1:06:ba:bf:ad:61:3a:0c:8b:e7:16:
                    be:f3:6f:38:c2:23:67:6d:4e:15:6a:50:f1:12:15:
                    f3:81:5b:57:d1:c1:7a:05:bb:75:ca:5c:58:dc:a6:
                    ab:93:0b:7e:2f:f4:15:70:2f:89:d9:6c:7b:bf:67:
                    b2:74:29:87:03:3c:26:4d:c0:68:10:2c:89:89:8d:
                    29:b1:e0:3e:a6:cf:3e:8d:8a:76:b5:d8:7b:63:04:
                    63:b0:ac:4b:da:85:e8:c2:0e:d9:0c:c3:d7:eb:89:
                    c6:38:f2:17:a5:00:66:9b:82:ce:db:93:b3:7f:e9:
                    a3:d0:e8:38:3a:32:4e:67:e6:40:50:8f:cb:96:e6:
                    b6:bd:8a:c4:98:a6:5e:a9:17:6e:ee:49:46:bc:88:
                    cd:b9:21:19:a1:50:aa:ee:3b:28:0e:cc:05:08:67:
                    7f:74:aa:b3:7c:7a:1b:44:07:5d:24:be:8a:db:a2:
                    85:a8:36:5d:2f:4b:30:b2:06:bf:f4:b2:e7:ee:a1:
                    6a:27:eb:a0:97:fd:32:e7:48:1e:f2:94:bf:20:c7:
                    e2:a6:13:7f:f4:89:24:8c:37:d0:67:2c:97:9b:69:
                    8b:07:49:39:0e:24:78:01:10:d2:d4:17:a8:d6:ba:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:20:B5:30:A0:96:FD:C0:69:43:13:AA:11:EE:49:B9:4E:52:2F:45
            X509v3 Authority Key Identifier:
                keyid:F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/326131343a373538303a3765303a3a2f34382d3438203d3e20323134353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:7e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:a6:29:fc:96:a0:2d:5e:fc:b6:83:33:04:47:ed:92:ed:04:
         e5:bf:fb:ef:31:cb:e9:7c:a5:f4:b4:20:fc:b2:9f:1a:15:71:
         37:f7:27:9c:d8:e4:a2:a1:ca:1b:a2:d2:a2:ff:0d:5a:79:1a:
         ad:61:ed:28:60:ed:e7:48:4f:bb:2a:c9:ed:fb:66:63:32:69:
         ec:84:3d:6c:ff:dd:79:ae:9b:60:68:20:c7:d6:f6:8f:14:13:
         7a:cc:c5:40:42:b5:fa:41:37:bb:40:db:93:88:14:0a:92:4b:
         96:30:8a:a1:05:cf:30:54:3a:a5:9e:d6:88:0b:46:fa:fd:69:
         27:d0:fc:fa:b6:58:e3:90:69:52:94:7e:77:f3:66:76:85:55:
         9a:5d:46:e3:00:94:8d:3e:d9:e4:b1:5c:8b:00:96:3b:1d:39:
         c5:bb:80:ef:14:36:0c:09:18:0d:61:01:a7:4e:73:ff:dd:05:
         9d:ed:e0:61:5f:ba:ee:2c:66:30:41:a2:3a:11:cb:b8:39:68:
         27:3d:12:23:e3:4c:03:98:99:2e:d7:aa:1e:86:e4:85:84:7b:
         a0:b2:f2:57:73:40:ed:21:49:24:60:93:b2:38:c5:9f:ed:ca:
         3f:ae:34:18:16:d0:9c:61:42:d9:b0:0f:cc:6c:c8:c9:ab:6f:
         bf:eb:9e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----