Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/326130353a646663333a636166653a3a2f34382d3438203d3e20323035373839.roa
File:                     326130353a646663333a636166653a3a2f34382d3438203d3e20323035373839.roa (raw, json)
Hash identifier:          0NmMqHS3KD/Hppf9h2jpSZa0Ltu9RMCXqSGtew7pHNU=
Subject key identifier:   54:DD:46:53:F4:17:37:56:B4:D6:34:48:8E:1E:A5:49:2B:92:9E:FA
Certificate issuer:       /CN=F27941BF58751CDB1302EAF661DCF88D1CF5D49F
Certificate serial:       3837E1B5712AEC73D8B36198108AE2CA7E0A436E
Authority key identifier: F2:79:41:BF:58:75:1C:DB:13:02:EA:F6:61:DC:F8:8D:1C:F5:D4:9F
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F27941BF58751CDB1302EAF661DCF88D1CF5D49F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/326130353a646663333a636166653a3a2f34382d3438203d3e20323035373839.roa
Signing time:             Sat 20 Jan 2024 19:50:40 +0000
ROA not before:           Sat 20 Jan 2024 19:45:40 +0000
ROA not after:            Sat 18 Jan 2025 19:50:40 +0000
asID:                     205789
IP address blocks:        2a05:dfc3:cafe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:37:e1:b5:71:2a:ec:73:d8:b3:61:98:10:8a:e2:ca:7e:0a:43:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F27941BF58751CDB1302EAF661DCF88D1CF5D49F
        Validity
            Not Before: Jan 20 19:45:40 2024 GMT
            Not After : Jan 18 19:50:40 2025 GMT
        Subject: CN=54DD4653F4173756B4D634488E1EA5492B929EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:ba:d9:ab:0b:43:b9:d0:19:9d:1d:b6:41:
                    37:d0:59:42:c8:78:27:d9:f5:0a:8b:1c:1b:8b:c1:
                    c5:9c:f0:57:1a:0f:a6:e8:d8:fd:3f:ab:24:fb:ca:
                    aa:4d:f0:1f:7e:cf:51:40:0c:16:d7:b0:d9:73:ea:
                    18:30:a9:de:d5:ba:a4:c5:21:40:56:14:6f:c5:ed:
                    5a:f5:1b:f1:fd:9e:ef:75:07:32:5b:c4:8c:2c:a8:
                    85:33:31:63:49:fa:90:19:c1:f3:6d:6d:70:f5:5b:
                    26:95:20:8d:fd:7e:32:de:33:a9:fe:f1:53:46:a9:
                    da:63:89:b6:04:b3:9b:8b:2c:6e:d5:7f:1d:df:4b:
                    3a:f3:00:1c:b9:3d:23:2d:8d:6b:25:26:13:d3:ca:
                    fa:02:f3:db:c0:8b:d5:c4:c2:15:41:16:71:91:69:
                    45:cd:4b:09:cf:e0:4f:11:f5:c0:71:6b:46:66:5a:
                    d4:e9:a2:e8:5f:50:b1:1a:45:20:b6:b7:f0:7a:0b:
                    d8:fc:b1:38:85:cb:df:45:7d:b8:0e:4d:72:3e:b5:
                    89:7b:16:49:9e:3e:1a:02:1a:2c:c2:3a:3c:50:19:
                    c4:2b:9c:bb:6c:8c:11:03:d8:07:2b:f7:de:75:bc:
                    10:86:71:1e:b9:68:20:e5:0e:f3:41:41:b9:77:57:
                    90:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DD:46:53:F4:17:37:56:B4:D6:34:48:8E:1E:A5:49:2B:92:9E:FA
            X509v3 Authority Key Identifier:
                keyid:F2:79:41:BF:58:75:1C:DB:13:02:EA:F6:61:DC:F8:8D:1C:F5:D4:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/F27941BF58751CDB1302EAF661DCF88D1CF5D49F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F27941BF58751CDB1302EAF661DCF88D1CF5D49F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/326130353a646663333a636166653a3a2f34382d3438203d3e20323035373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:cafe::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:a0:c0:bf:20:d0:c7:c2:5c:eb:26:b9:e9:2d:e6:a5:1d:56:
         81:36:f8:f2:8d:8b:7c:fa:66:5f:b6:b4:aa:b8:2f:3d:77:b3:
         40:7d:18:63:cc:23:b0:ca:85:9a:cd:16:72:89:3b:18:9c:f9:
         c6:ad:e1:77:47:c5:66:9c:cb:50:9c:c7:d9:db:ab:be:6a:e9:
         e7:3e:f0:59:31:b2:8a:86:f7:a7:f3:14:a7:d5:a6:7c:d3:de:
         6a:ab:52:5a:1c:44:f0:36:77:74:b2:dc:de:7c:8d:c1:78:34:
         bf:64:62:54:fc:a7:c4:fd:6b:ad:14:e0:92:54:fd:9b:fa:bf:
         00:01:6b:30:d8:ac:70:40:4c:6b:6a:98:0d:1a:b2:ae:dd:6a:
         27:ab:77:98:e4:f3:c4:b4:64:af:c8:40:b5:91:83:09:19:b7:
         ae:90:9c:36:63:40:6e:0b:75:44:81:98:6d:eb:44:9a:72:28:
         3b:49:6a:6a:fe:c6:c6:6b:55:13:ab:f0:99:72:e6:68:5e:fb:
         54:90:e4:ab:e5:4a:1f:6d:c8:ab:57:90:39:e0:26:5f:79:c4:
         28:8d:7d:93:bf:3f:2a:ab:ec:26:e0:ed:ed:63:98:5b:fc:6b:
         25:e0:96:c0:e3:36:c4:a7:73:8b:38:0c:f5:41:52:86:08:1d:
         1f:c1:49:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----