Route Origin Authorization

$ rpki-client -vvf rpki.netiface.net/repo/AquaHost/0/326131333a646638373a623530303a3a2f34302d3438203d3e20313939303532.roa
File:                     326131333a646638373a623530303a3a2f34302d3438203d3e20313939303532.roa (raw, json)
Hash identifier:          f2Dpgn+cOfDJOZkuhxyBTGsVhdQ+2UCAbGPONcBc5uY=
Subject key identifier:   98:E7:94:B6:1C:25:7B:14:DA:3E:7E:74:B2:D5:81:F4:B1:EC:FF:CF
Certificate issuer:       /CN=C97E7DD81B07D53E3C076F9D1810810F6E2DC227
Certificate serial:       2043AE07D32A8F8B0C6DDE259FB646C02F7706C0
Authority key identifier: C9:7E:7D:D8:1B:07:D5:3E:3C:07:6F:9D:18:10:81:0F:6E:2D:C2:27
Authority info access:    rsync://rpki.netiface.net/repo/Apricot/1/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.cer
Subject info access:      rsync://rpki.netiface.net/repo/AquaHost/0/326131333a646638373a623530303a3a2f34302d3438203d3e20313939303532.roa
Signing time:             Sat 13 Jan 2024 23:07:23 +0000
ROA not before:           Sat 13 Jan 2024 23:02:23 +0000
ROA not after:            Sat 11 Jan 2025 23:07:23 +0000
asID:                     199052
IP address blocks:        2a13:df87:b500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:43:ae:07:d3:2a:8f:8b:0c:6d:de:25:9f:b6:46:c0:2f:77:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C97E7DD81B07D53E3C076F9D1810810F6E2DC227
        Validity
            Not Before: Jan 13 23:02:23 2024 GMT
            Not After : Jan 11 23:07:23 2025 GMT
        Subject: CN=98E794B61C257B14DA3E7E74B2D581F4B1ECFFCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cd:2f:d0:22:9e:c8:67:bc:83:2b:24:b6:89:
                    96:d2:09:ac:a3:7c:e4:cc:cd:2f:3d:35:5f:9c:6e:
                    19:14:09:04:d2:ee:9f:d1:d2:66:9c:6a:e4:3d:f3:
                    2a:17:ef:b8:96:81:00:d8:2a:79:03:32:16:39:84:
                    62:5f:c9:b3:43:1c:d2:6e:1c:83:e1:df:9f:8c:15:
                    f4:b8:cf:05:87:5e:73:00:bc:51:84:02:77:b9:b1:
                    8f:0e:09:27:d7:a9:b6:73:00:a0:4f:13:3e:89:38:
                    bc:cf:42:3d:66:d6:02:0f:76:3b:95:ee:af:2e:e4:
                    15:49:52:90:4c:b9:1a:75:cf:bb:0f:60:3d:66:ec:
                    d8:9c:aa:64:8d:a5:df:00:a1:69:e6:d2:36:8e:88:
                    e5:c5:58:a4:c7:6a:98:ca:d7:9f:24:3e:52:1f:e7:
                    34:fa:45:7f:8f:a7:81:be:4e:7b:e6:2e:19:5c:ee:
                    0d:c1:d0:4b:10:a8:d1:c5:7b:42:89:ba:00:d3:b5:
                    b0:71:62:2f:7d:4d:e7:54:fb:9f:ad:73:13:68:d6:
                    bc:2e:6e:30:28:25:20:a1:17:18:10:9d:5c:3a:1f:
                    e5:2c:02:f1:68:ef:08:a0:26:9f:84:fe:27:e3:a4:
                    63:58:6b:b9:9c:fb:d2:fa:79:1f:10:3e:7d:e9:a6:
                    8e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E7:94:B6:1C:25:7B:14:DA:3E:7E:74:B2:D5:81:F4:B1:EC:FF:CF
            X509v3 Authority Key Identifier:
                keyid:C9:7E:7D:D8:1B:07:D5:3E:3C:07:6F:9D:18:10:81:0F:6E:2D:C2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/AquaHost/0/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/AquaHost/0/326131333a646638373a623530303a3a2f34302d3438203d3e20313939303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:b500::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:76:4e:66:7a:2d:27:f1:f0:9d:d4:32:b8:6e:b8:e8:6b:5d:
         e3:fd:ac:cf:0e:ec:06:8b:39:13:8b:a6:9b:82:81:52:ca:d5:
         7b:e4:cf:1f:93:d5:5f:51:fd:6e:b5:c6:a1:65:0e:8d:2b:9a:
         76:6b:6c:0d:5c:dd:84:de:b9:f8:d1:4f:20:cb:83:63:8f:ea:
         a4:86:b0:aa:7e:fb:00:8c:a4:e4:c6:d5:94:15:25:53:6b:d3:
         b4:dd:ba:9a:7e:4c:a7:36:fe:c3:28:ef:4f:91:c4:37:47:b9:
         81:63:46:a8:af:36:8c:82:44:cb:02:5c:70:05:c2:ca:15:f3:
         bc:c2:da:50:02:b5:02:29:ca:19:cc:b4:dd:02:ec:ac:ca:d1:
         d0:c7:75:63:75:19:7d:b4:dd:63:2f:f1:f6:12:49:e2:34:d0:
         65:b8:83:1e:91:03:94:1c:8b:01:39:4a:5c:af:b3:78:4d:6c:
         80:b8:91:d1:11:da:d0:c3:b7:f3:f9:e3:4e:e9:4e:80:cc:4b:
         06:74:8d:eb:7d:8c:1c:82:77:7e:cf:fb:e0:d0:b8:70:7c:fb:
         c9:70:bd:77:c3:23:49:89:ab:e0:78:98:8a:c6:08:88:4e:18:
         f5:40:31:07:e1:71:35:bd:a2:b3:52:72:e5:e1:af:38:44:1a:
         13:03:72:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----