Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/326130623a346530373a61623a3a2f34382d3438203d3e20333937363538.roa
File:                     326130623a346530373a61623a3a2f34382d3438203d3e20333937363538.roa (raw, json)
Hash identifier:          Zw9WYR4eMzymgQSAsiOwFTFyltw+FJXqEAqW7cuaqPc=
Subject key identifier:   7C:66:AE:1A:32:D7:83:B2:F3:73:C0:EA:8D:0A:B9:30:DA:53:D8:1C
Certificate issuer:       /CN=3D8C37B7277F72E3F4CAAA69DC30B22A2B662025
Certificate serial:       2768254623B27B024E06FC588A82A9EC06F02366
Authority key identifier: 3D:8C:37:B7:27:7F:72:E3:F4:CA:AA:69:DC:30:B2:2A:2B:66:20:25
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/326130623a346530373a61623a3a2f34382d3438203d3e20333937363538.roa
Signing time:             Fri 11 Apr 2025 12:10:29 +0000
ROA not before:           Fri 11 Apr 2025 12:05:29 +0000
ROA not after:            Fri 10 Apr 2026 12:10:29 +0000
asID:                     397658
IP address blocks:        2a0b:4e07:ab::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:68:25:46:23:b2:7b:02:4e:06:fc:58:8a:82:a9:ec:06:f0:23:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D8C37B7277F72E3F4CAAA69DC30B22A2B662025
        Validity
            Not Before: Apr 11 12:05:29 2025 GMT
            Not After : Apr 10 12:10:29 2026 GMT
        Subject: CN=7C66AE1A32D783B2F373C0EA8D0AB930DA53D81C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bf:9e:4e:31:27:68:b0:ac:a3:f0:bd:38:50:
                    46:51:8c:be:7d:24:ed:58:80:63:ff:ba:54:41:c7:
                    b4:df:f0:f2:ea:ca:24:df:3f:a5:0c:e1:c9:ec:18:
                    61:81:a8:1b:c2:d0:b0:a8:a1:83:6f:bb:b8:26:30:
                    9f:0f:5b:d9:7c:7b:a7:da:f4:ec:a3:f5:97:18:2f:
                    4d:27:3d:9b:2f:69:c5:b9:f3:05:84:27:04:fa:1b:
                    43:d2:52:56:28:c6:3b:0e:a2:6f:ff:51:f4:ec:7d:
                    4e:2f:5b:b5:c0:49:96:3c:50:bc:ba:b0:7d:d4:ff:
                    5d:39:42:ea:33:d0:e0:8f:10:2a:13:ba:4c:a5:17:
                    87:40:2b:19:6f:03:e1:e6:2b:8a:b9:ab:68:67:34:
                    80:56:5a:4c:f9:24:85:cb:67:4c:05:37:e5:bb:f7:
                    4f:df:dc:89:37:8c:e3:fe:50:35:9a:c5:b9:9e:a1:
                    8e:b9:65:b5:ab:ab:49:49:53:28:27:97:df:64:bb:
                    ca:93:ed:62:fb:81:28:75:c1:d4:f4:1a:d4:2f:72:
                    48:15:9f:9d:71:8f:cd:27:28:17:9b:63:e4:fb:99:
                    f0:9d:17:33:64:0e:3f:72:2f:d5:7c:08:1b:ae:0c:
                    4f:16:ff:f3:a8:45:2a:29:53:0a:7d:94:3c:f5:51:
                    f9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:66:AE:1A:32:D7:83:B2:F3:73:C0:EA:8D:0A:B9:30:DA:53:D8:1C
            X509v3 Authority Key Identifier:
                keyid:3D:8C:37:B7:27:7F:72:E3:F4:CA:AA:69:DC:30:B2:2A:2B:66:20:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/326130623a346530373a61623a3a2f34382d3438203d3e20333937363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:ab::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:ae:e3:ff:dd:d7:6f:25:e7:5e:c6:bb:0b:4d:39:69:35:9e:
         39:bf:9d:fa:fc:27:ea:91:ab:68:1a:84:7c:db:6b:9c:72:ae:
         5e:db:2a:0d:98:0a:19:b8:a3:29:00:02:93:01:15:a6:a0:c8:
         a0:e4:e4:f7:21:6b:69:f9:37:0e:76:ee:3f:9c:e8:d9:d0:b5:
         3c:04:57:49:5a:46:19:50:51:5c:58:2e:ce:48:ff:22:17:4f:
         7f:b0:f1:97:26:8e:32:fe:14:84:ff:53:c2:6b:54:76:55:f3:
         c7:88:5f:62:cd:d2:73:ce:df:ac:cb:63:26:b5:17:f2:31:ff:
         01:01:48:47:32:e3:b0:2f:0c:4d:12:fd:61:e6:b0:1c:d3:64:
         b5:b5:82:08:0f:a2:f3:82:a3:de:26:3d:dd:ff:73:4b:04:da:
         36:56:fc:86:3a:c6:ef:48:49:4e:10:6e:e8:72:37:c7:b2:78:
         ca:0b:f7:bb:75:ef:f1:26:db:af:7f:53:5e:ab:88:72:6f:f5:
         5d:a3:e3:d7:37:d7:1d:86:3b:4c:af:ea:7c:a0:f5:67:5f:6c:
         17:a9:56:02:08:ce:ba:d9:cd:83:9f:36:2b:ae:83:47:15:49:
         46:c8:79:9b:60:1b:c7:d0:df:e7:6d:5a:ad:14:d6:6e:dd:9e:
         56:51:f5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----