Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/326131343a373538303a3765303a3a2f34342d3438203d3e20323131353735.roa
File:                     326131343a373538303a3765303a3a2f34342d3438203d3e20323131353735.roa (raw, json)
Hash identifier:          2yW2cTrURBWc1KghoJNqvMr3yilY8hjaJGrRfYNrlnI=
Subject key identifier:   F2:6C:2C:B6:61:58:0A:81:F5:D4:54:6D:55:50:3F:33:92:0D:97:C7
Certificate issuer:       /CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13
Certificate serial:       01CE99309EA9ACAB4154ED6CC3255D4C604172EE
Authority key identifier: F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/326131343a373538303a3765303a3a2f34342d3438203d3e20323131353735.roa
Signing time:             Fri 31 Jul 2026 09:41:33 +0000
ROA not before:           Fri 31 Jul 2026 09:36:33 +0000
ROA not after:            Fri 30 Jul 2027 09:41:33 +0000
asID:                     211575
IP address blocks:        2a14:7580:7e0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ce:99:30:9e:a9:ac:ab:41:54:ed:6c:c3:25:5d:4c:60:41:72:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13
        Validity
            Not Before: Jul 31 09:36:33 2026 GMT
            Not After : Jul 30 09:41:33 2027 GMT
        Subject: CN=F26C2CB661580A81F5D4546D55503F33920D97C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a3:a4:7f:fa:d4:27:41:02:80:8e:59:aa:17:
                    05:df:18:0a:15:ae:b6:1f:30:ba:30:11:1f:cf:6d:
                    de:1a:1d:37:47:ad:06:0d:8e:f1:47:df:98:e2:63:
                    c7:8d:86:b1:2b:b7:e6:1f:bc:b3:89:e8:94:7f:b5:
                    d3:a0:b7:3e:f0:fb:8c:e8:b4:8f:f7:28:12:14:f6:
                    03:15:d3:d1:17:87:2c:1a:82:45:c2:d5:2c:4a:5b:
                    fe:39:d3:ab:1c:08:32:d4:5e:a3:81:6c:0e:e8:b0:
                    62:bb:bb:22:24:56:4b:8e:77:4b:8b:81:45:1f:6b:
                    ee:e8:70:96:1b:ef:61:7d:d9:9b:64:fc:4e:bd:a8:
                    ed:f8:7c:8c:b1:07:ab:6d:66:c4:3d:0d:77:e7:76:
                    06:d6:d3:91:7b:3f:05:e1:b9:bb:1f:09:ff:90:86:
                    3c:9b:01:fc:d1:67:05:ba:fd:14:77:b1:48:6a:d4:
                    89:f7:7f:d9:28:20:12:7d:91:c2:84:a9:c5:4e:89:
                    ef:27:77:1f:73:b1:c5:ae:f1:74:97:80:2a:92:89:
                    e2:62:d7:1f:1c:0a:fd:19:64:c7:e6:63:8c:62:51:
                    0b:2d:d9:67:71:24:e0:11:c9:12:85:42:23:0a:64:
                    6a:66:bb:38:21:c5:b1:16:3d:79:73:b5:cf:ce:62:
                    df:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6C:2C:B6:61:58:0A:81:F5:D4:54:6D:55:50:3F:33:92:0D:97:C7
            X509v3 Authority Key Identifier:
                keyid:F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/326131343a373538303a3765303a3a2f34342d3438203d3e20323131353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:7e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2b:87:df:ba:62:2d:49:70:45:e4:9f:e6:25:bf:d6:3c:c9:59:
         ef:a8:67:5c:9a:c7:a9:69:14:39:75:6f:4d:e4:5d:4f:fb:98:
         d2:10:a9:e9:3c:97:af:54:64:55:db:6c:2b:56:2c:71:b2:3a:
         6d:4f:14:e6:f0:e1:a5:72:1e:7f:1f:d3:5f:53:2f:f8:ce:04:
         ad:e6:4a:fb:0e:c1:29:32:39:71:36:b3:91:3d:b3:1a:d4:18:
         50:23:a8:c5:e5:c3:81:6a:ca:2c:eb:4b:5a:f3:7a:fa:4e:a7:
         4b:b4:29:bf:09:b8:ee:c1:07:2a:92:e2:1e:71:3f:ae:87:e4:
         29:33:1f:a0:fd:27:e7:d8:28:05:ad:5a:47:83:18:83:48:7a:
         86:d0:ec:48:dc:be:73:0e:b8:97:41:e9:67:04:61:d4:a5:18:
         bb:5b:34:07:e2:a6:c3:d2:12:f6:20:1a:fc:da:00:45:eb:0e:
         20:47:3e:58:51:ce:6e:3f:2a:e3:fe:97:e4:d3:e3:12:51:4c:
         a4:02:4e:b9:c4:32:7f:35:31:9b:1b:0d:3b:4c:cd:ad:e3:52:
         aa:9c:85:45:ea:62:fb:90:a8:b9:14:20:88:ad:31:89:d7:56:
         47:76:63:f0:7d:ef:98:68:b6:b8:1e:f3:c5:50:05:7a:31:45:
         f8:b2:ff:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----