Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa
File:                     326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa (raw, json)
Hash identifier:          0PZ2HJID9XheP2ZR30M5e+uc9KFWb33URoG3R3EDvcw=
Subject key identifier:   C0:1B:61:E2:8C:A9:BC:B2:B5:75:57:8C:03:C4:9B:55:F0:11:1F:BD
Certificate issuer:       /CN=341DD247820B7D2AD4F085FF7F5988ADF10F4AC6
Certificate serial:       3F31A0EFCF310FC3CD10C4857D23CB5FE087A45D
Authority key identifier: 34:1D:D2:47:82:0B:7D:2A:D4:F0:85:FF:7F:59:88:AD:F1:0F:4A:C6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa
Signing time:             Fri 14 Jun 2024 02:20:23 +0000
ROA not before:           Fri 14 Jun 2024 02:15:23 +0000
ROA not after:            Fri 13 Jun 2025 02:20:23 +0000
asID:                     215885
IP address blocks:        2a0f:85c1:331::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:31:a0:ef:cf:31:0f:c3:cd:10:c4:85:7d:23:cb:5f:e0:87:a4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341DD247820B7D2AD4F085FF7F5988ADF10F4AC6
        Validity
            Not Before: Jun 14 02:15:23 2024 GMT
            Not After : Jun 13 02:20:23 2025 GMT
        Subject: CN=C01B61E28CA9BCB2B575578C03C49B55F0111FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:50:19:fb:1d:c6:21:8f:00:46:67:a7:43:
                    05:f8:6a:5f:84:ce:dd:7f:48:78:a2:ef:05:b1:a8:
                    1a:72:b3:97:5b:69:63:ff:30:b3:b0:2c:3a:c4:87:
                    ca:c7:03:b6:87:73:de:83:49:f9:90:f2:50:4a:bb:
                    3b:da:d3:92:d7:95:72:f8:70:e4:3b:8e:c9:f1:85:
                    c8:e6:c0:c9:a4:9b:05:9d:9e:b5:1f:42:87:34:1e:
                    40:d5:65:69:24:bf:62:1f:e9:16:6d:50:ba:58:6e:
                    5e:42:14:d4:6c:26:9a:80:8f:63:b3:b8:b7:58:d4:
                    e2:72:91:b1:d6:fd:3b:68:ea:0b:54:93:29:1a:ca:
                    b6:b8:9a:2b:6d:f9:48:7f:ec:ff:73:05:2f:a3:94:
                    f4:d9:99:e6:81:d7:c1:33:42:99:87:11:24:9c:4b:
                    bb:2f:98:6b:5c:94:48:84:a3:63:86:de:bf:32:80:
                    15:34:76:b4:1c:31:ea:49:bd:6e:76:99:ca:1f:79:
                    87:0e:9f:7c:5f:66:e0:9c:e5:f0:b6:de:7e:da:19:
                    c6:cc:44:6e:58:6c:81:9c:31:59:8d:a3:18:c8:69:
                    a6:66:26:2b:6b:52:e6:74:fa:86:78:d7:2b:ae:8a:
                    8d:40:7a:a0:2f:66:b7:28:e8:f6:61:ac:51:72:e9:
                    23:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1B:61:E2:8C:A9:BC:B2:B5:75:57:8C:03:C4:9B:55:F0:11:1F:BD
            X509v3 Authority Key Identifier:
                keyid:34:1D:D2:47:82:0B:7D:2A:D4:F0:85:FF:7F:59:88:AD:F1:0F:4A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:331::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:63:fb:a1:20:fa:e4:09:4b:bd:e3:49:06:21:b3:d7:e3:1f:
         72:57:05:96:18:20:5f:90:55:15:77:eb:f2:a8:09:58:8d:f3:
         2e:51:5d:a4:24:0a:a8:89:4e:05:27:22:87:bb:84:24:2d:49:
         01:84:09:ef:0a:16:45:05:2d:4f:03:b4:ee:9f:ec:c7:b9:f9:
         43:66:33:a6:51:59:18:c1:95:0e:a3:9f:6d:22:19:4b:62:d6:
         14:f4:9b:e5:3f:62:e6:94:1c:13:da:07:95:d7:a0:ea:99:8a:
         f5:d7:f4:6f:45:a1:06:c9:4e:12:75:5c:b6:67:da:0b:b6:83:
         6f:9b:2a:45:e5:71:fd:77:dd:2c:ae:a7:e1:fc:95:39:6d:43:
         3d:c1:e4:be:9f:52:bf:8f:0d:54:5a:56:36:38:cc:bb:eb:2b:
         64:e9:24:e8:98:a7:08:b8:5f:41:2e:8c:2e:67:6e:e2:3d:df:
         7c:09:b6:00:09:df:49:07:b1:b1:9f:bc:3e:99:a9:42:d9:7f:
         86:c4:d2:13:14:2b:58:2f:fb:d6:a2:05:5c:8f:c2:f3:4f:85:
         1c:5e:df:8e:ff:0a:33:ad:f0:64:e4:5a:98:f9:a6:97:5b:b6:
         87:69:28:45:3b:9c:67:0e:ae:8d:ab:8a:a7:77:ba:f8:79:f1:
         71:06:87:1f
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUPzGg788xD8PNEMSFfSPLX+CHpF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQxREQyNDc4MjBCN0QyQUQ0RjA4NUZGN0Y1OTg4QURG
MTBGNEFDNjAeFw0yNDA2MTQwMjE1MjNaFw0yNTA2MTMwMjIwMjNaMDMxMTAvBgNV
BAMTKEMwMUI2MUUyOENBOUJDQjJCNTc1NTc4QzAzQzQ5QjU1RjAxMTFGQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDFAZ+x3GIY8ARmenQwX4al+E
zt1/SHii7wWxqBpys5dbaWP/MLOwLDrEh8rHA7aHc96DSfmQ8lBKuzva05LXlXL4
cOQ7jsnxhcjmwMmkmwWdnrUfQoc0HkDVZWkkv2If6RZtULpYbl5CFNRsJpqAj2Oz
uLdY1OJykbHW/Tto6gtUkykayra4mitt+Uh/7P9zBS+jlPTZmeaB18EzQpmHESSc
S7svmGtclEiEo2OG3r8ygBU0drQcMepJvW52mcofeYcOn3xfZuCc5fC23n7aGcbM
RG5YbIGcMVmNoxjIaaZmJitrUuZ0+oZ41yuuio1AeqAvZrco6PZhrFFy6SMXAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUwBth4oypvLK1dVeMA8SbVfARH70wHwYDVR0j
BBgwFoAUNB3SR4ILfSrU8IX/f1mIrfEPSsYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGE5ZjIxNWQtYTk3OC00MDJjLTkwNjQtNGRlNGZkNDk0
M2FmLzEvMzQxREQyNDc4MjBCN0QyQUQ0RjA4NUZGN0Y1OTg4QURGMTBGNEFDNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzIwYWRkMy1hODhlLTRi
YjItYTg0ZC01NWRhMjEyOGYxOTYvMC8zNDFERDI0NzgyMEI3RDJBRDRGMDg1RkY3
RjU5ODhBREYxMEY0QUM2LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9kYTlmMjE1ZC1hOTc4LTQwMmMtOTA2NC00ZGU0ZmQ0OTQzYWYvMS8zMjYxMzA2
NjNhMzgzNTYzMzEzYTMzMzMzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz
NTM4MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEDMTANBgkqhkiG9w0BAQsFAAOCAQEAVmP7
oSD65AlLveNJBiGz1+MfclcFlhggX5BVFXfr8qgJWI3zLlFdpCQKqIlOBScih7uE
JC1JAYQJ7woWRQUtTwO07p/sx7n5Q2YzplFZGMGVDqOfbSIZS2LWFPSb5T9i5pQc
E9oHldeg6pmK9df0b0WhBslOEnVctmfaC7aDb5sqReVx/XfdLK6n4fyVOW1DPcHk
vp9Sv48NVFpWNjjMu+srZOkk6JinCLhfQS6MLmdu4j3ffAm2AAnfSQexsZ+8Ppmp
Qtl/hsTSExQrWC/71qIFXI/C80+FHF7fjv8KM63wZORamPmml1u2h2koRTucZw6u
jauKp3e6+HnxcQaHHw==
-----END CERTIFICATE-----