Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/326130623a346530373a61613a3a2f34382d3438203d3e20333937363538.roa
File:                     326130623a346530373a61613a3a2f34382d3438203d3e20333937363538.roa (raw, json)
Hash identifier:          /LMCV8uaDgSXS27/31u6nmSrHG6w0dZBYdTMV8n2J6g=
Subject key identifier:   F3:0D:A3:74:46:0A:46:2D:33:DF:24:70:42:8D:5D:D7:E4:DE:AD:8E
Certificate issuer:       /CN=3D8C37B7277F72E3F4CAAA69DC30B22A2B662025
Certificate serial:       0EDA61EB0AFE6898EEB3BFCCC76E12F230A5BAA0
Authority key identifier: 3D:8C:37:B7:27:7F:72:E3:F4:CA:AA:69:DC:30:B2:2A:2B:66:20:25
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/326130623a346530373a61613a3a2f34382d3438203d3e20333937363538.roa
Signing time:             Fri 11 Apr 2025 12:10:42 +0000
ROA not before:           Fri 11 Apr 2025 12:05:42 +0000
ROA not after:            Fri 10 Apr 2026 12:10:42 +0000
asID:                     397658
IP address blocks:        2a0b:4e07:aa::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:da:61:eb:0a:fe:68:98:ee:b3:bf:cc:c7:6e:12:f2:30:a5:ba:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D8C37B7277F72E3F4CAAA69DC30B22A2B662025
        Validity
            Not Before: Apr 11 12:05:42 2025 GMT
            Not After : Apr 10 12:10:42 2026 GMT
        Subject: CN=F30DA374460A462D33DF2470428D5DD7E4DEAD8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:dd:d0:a8:26:9a:58:6b:8a:ce:6f:8c:aa:
                    51:ff:ca:fc:af:b8:8e:54:1c:b3:7d:3e:f7:4d:d5:
                    2f:6a:fc:7e:c0:51:8e:ca:d1:91:b5:48:46:31:bd:
                    6c:25:3b:96:3e:cb:fc:bd:06:c0:a3:6c:29:35:8c:
                    30:49:e9:83:da:a9:38:6f:c2:5f:a1:d8:b9:c4:c5:
                    4a:76:9c:23:44:b6:f2:2c:c1:79:c7:bf:8b:bb:bc:
                    2c:b3:72:4f:20:39:c2:9e:7b:01:be:19:35:86:6d:
                    91:a3:e5:75:7f:bf:97:5d:7e:b5:30:77:15:a5:3d:
                    2c:a2:4b:e2:af:45:a3:18:0e:d4:7a:1c:25:87:d2:
                    2b:e3:85:55:98:79:d4:22:a0:02:2e:8f:e6:03:13:
                    65:58:66:f9:0a:55:b9:f3:5f:85:a8:03:2f:8f:28:
                    9f:e7:27:ff:4f:0c:70:33:8d:ba:1a:bf:89:99:fb:
                    ad:89:67:57:8a:26:2d:4e:85:8b:b1:ab:1e:65:e5:
                    e2:ad:9f:4f:b4:7d:a2:37:0e:d0:3e:41:2a:ad:2d:
                    89:ce:03:4e:36:77:93:a1:7d:e2:d0:98:69:25:c1:
                    d3:a9:52:fe:d4:47:69:a2:91:54:a6:ff:c4:40:af:
                    44:c7:56:32:98:4f:e0:f3:8e:21:8f:f7:ea:50:fa:
                    a7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0D:A3:74:46:0A:46:2D:33:DF:24:70:42:8D:5D:D7:E4:DE:AD:8E
            X509v3 Authority Key Identifier:
                keyid:3D:8C:37:B7:27:7F:72:E3:F4:CA:AA:69:DC:30:B2:2A:2B:66:20:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/326130623a346530373a61613a3a2f34382d3438203d3e20333937363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         d9:e9:73:03:7d:f2:f2:91:50:a6:b0:44:ff:b0:40:57:1a:9b:
         f3:1a:cd:36:98:5a:11:ce:56:94:85:0a:1e:94:d6:83:b7:35:
         43:65:6a:cf:75:d1:92:c1:90:16:11:82:85:3c:23:02:ce:4d:
         2b:1a:9e:b9:28:3c:1f:4e:b5:0d:b8:13:a3:5b:f3:f8:4b:ad:
         a0:ac:4a:14:05:ee:2e:54:fd:74:71:59:f6:8e:f9:82:94:69:
         bc:92:23:d9:cf:b2:34:d7:d0:4e:ac:c0:66:4c:54:cb:5c:28:
         59:28:ae:90:db:a5:7e:84:20:fd:d9:1c:f1:16:1a:4c:58:7a:
         21:73:b4:c8:7d:78:6e:d3:c5:02:fb:cb:66:6e:5e:43:61:b2:
         23:4a:14:51:87:5f:1e:b5:6f:d1:47:6e:1b:9d:02:3f:00:c6:
         cb:17:74:e9:3e:8d:e9:a9:f0:cd:16:7f:ae:0b:34:da:ac:88:
         3d:4a:61:9f:8b:59:8d:cd:d1:2b:11:6d:e1:0f:e8:00:c1:4d:
         ee:53:77:c6:2a:75:84:7e:54:f3:bd:b9:e5:c5:ef:a6:be:92:
         1e:7c:ff:70:51:ea:06:3e:d1:3e:2e:84:d6:2c:4f:42:9b:56:
         f4:20:5f:fd:5a:b1:c3:d3:e9:95:d5:64:ac:f9:08:1a:fb:36:
         b0:30:6a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----