Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/3/326130363a613030353a323038303a3a2f34342d3438203d3e2030.roa
File:                     326130363a613030353a323038303a3a2f34342d3438203d3e2030.roa (raw, json)
Hash identifier:          FikE9J43RRYGDbhoLPKC71ulOLU3Wc5xflyIgYL/ltw=
Subject key identifier:   C4:49:90:3C:A8:3A:E5:76:6D:23:A5:F2:82:F0:C3:59:A2:89:7C:AD
Certificate issuer:       /CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
Certificate serial:       2462FF976E277ACCB79B74E7192992D2A22FB79A
Authority key identifier: B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer
Subject info access:      rsync://rpki.co/repo/Cube/3/326130363a613030353a323038303a3a2f34342d3438203d3e2030.roa
Signing time:             Wed 06 Dec 2023 03:27:13 +0000
ROA not before:           Wed 06 Dec 2023 03:22:13 +0000
ROA not after:            Wed 04 Dec 2024 03:27:13 +0000
asID:                     0
IP address blocks:        2a06:a005:2080::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:62:ff:97:6e:27:7a:cc:b7:9b:74:e7:19:29:92:d2:a2:2f:b7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
        Validity
            Not Before: Dec  6 03:22:13 2023 GMT
            Not After : Dec  4 03:27:13 2024 GMT
        Subject: CN=C449903CA83AE5766D23A5F282F0C359A2897CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:6c:02:9c:35:37:1e:89:6d:bc:c4:05:64:
                    95:fa:d7:e9:71:a1:9a:a8:c8:2d:a9:b2:07:a8:4e:
                    7f:63:59:2b:53:01:e1:22:0d:ca:a1:ef:9c:37:0e:
                    0f:2f:40:b8:77:ba:04:a7:f3:8b:c1:92:85:6d:22:
                    dc:0f:41:42:60:60:ba:ed:b5:84:05:d2:db:37:11:
                    8c:44:82:10:98:e3:b7:5c:97:53:63:d3:f1:b3:e6:
                    2e:2a:8c:24:ef:49:30:0e:9e:cc:62:9b:f8:90:a5:
                    a0:cc:59:0b:ca:48:a6:29:84:11:7b:96:6e:de:33:
                    17:b6:91:bf:ef:6a:b1:db:79:22:84:5c:fd:5f:82:
                    89:91:f8:ca:82:01:8b:23:1c:a9:86:5d:e8:e0:33:
                    fc:d0:e5:56:56:47:ac:55:c7:3d:f4:ee:69:a4:d5:
                    70:36:9c:9e:7c:61:32:e7:f7:df:e9:57:0c:e6:43:
                    37:6f:35:b3:45:30:08:90:f6:54:b6:a6:23:05:1c:
                    0f:cf:03:aa:17:3f:e4:11:b1:c8:e2:10:ef:43:38:
                    58:eb:8b:08:49:b7:7f:a2:88:7e:51:cf:32:71:6f:
                    53:e2:80:d9:e2:8f:f9:51:e7:2f:55:26:c2:0e:9e:
                    3f:c1:6f:42:6c:ab:a4:82:27:e1:de:18:8c:71:47:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:49:90:3C:A8:3A:E5:76:6D:23:A5:F2:82:F0:C3:59:A2:89:7C:AD
            X509v3 Authority Key Identifier:
                keyid:B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/3/326130363a613030353a323038303a3a2f34342d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2080::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:aa:a9:b0:20:ea:b6:f5:45:c2:b7:56:e2:e8:96:c0:dd:84:
         5a:3f:59:0b:69:56:41:a3:a0:49:d1:05:a9:89:cc:25:5f:24:
         f0:ab:c7:6c:a0:be:10:6f:c1:9d:68:c3:9a:19:31:4f:ae:f2:
         84:f1:4b:12:00:91:3b:8c:d3:62:93:49:f1:b1:c3:07:e0:ee:
         d9:6d:36:55:67:32:c6:69:6c:4e:95:c5:9c:8f:c1:3a:41:c8:
         38:40:b9:4e:bd:44:de:eb:d3:e1:28:0a:77:55:5e:99:ac:4d:
         ec:d4:c6:c5:56:93:75:4f:c9:12:9f:62:f9:f3:28:e5:13:88:
         2f:3e:e3:38:83:ed:76:34:bd:b8:81:84:94:09:a3:29:eb:a2:
         73:11:3a:f2:00:53:70:63:b6:72:69:1f:c4:18:c6:fd:e4:5c:
         79:9c:fd:6c:04:c8:7e:6a:4c:00:4b:d9:a3:70:9b:c1:8e:93:
         bd:2f:7d:e7:c7:b4:a4:d5:e4:c8:2c:0e:18:07:49:85:86:64:
         cc:58:ad:de:e1:07:2f:d3:1c:2a:c7:16:e4:35:4d:4e:34:de:
         b7:0c:fb:96:41:15:3e:e9:01:d9:6a:ae:ca:1d:27:4f:e3:9e:
         3d:33:83:79:cc:2a:97:b9:f3:7d:18:8e:8c:f9:d7:19:f5:2f:
         e4:6d:21:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----