Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663365303a3a2f34382d3438203d3e20313530323439.roa
File:                     326130363a396634343a663365303a3a2f34382d3438203d3e20313530323439.roa (raw, json)
Hash identifier:          gE6iYfz2r+m/dRvPySLMnEuOx2zeFosfukja8zr/Ehc=
Subject key identifier:   62:F6:55:55:E1:46:E1:6D:FE:30:6B:00:0C:AE:28:43:DA:F3:A1:D7
Certificate issuer:       /CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
Certificate serial:       77970A25773B6B20B080AB5B83ECE064D95C41AA
Authority key identifier: B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663365303a3a2f34382d3438203d3e20313530323439.roa
Signing time:             Wed 29 Nov 2023 02:32:58 +0000
ROA not before:           Wed 29 Nov 2023 02:27:58 +0000
ROA not after:            Wed 27 Nov 2024 02:32:58 +0000
asID:                     150249
IP address blocks:        2a06:9f44:f3e0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:97:0a:25:77:3b:6b:20:b0:80:ab:5b:83:ec:e0:64:d9:5c:41:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
        Validity
            Not Before: Nov 29 02:27:58 2023 GMT
            Not After : Nov 27 02:32:58 2024 GMT
        Subject: CN=62F65555E146E16DFE306B000CAE2843DAF3A1D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:75:5d:1f:2d:2c:12:fc:d2:5d:02:72:12:99:
                    39:ba:f4:26:b0:08:61:85:23:c2:cc:b8:3d:ac:c5:
                    93:03:0f:05:65:81:59:0f:31:ed:c7:2c:59:25:6e:
                    37:b4:2e:3c:26:a5:ab:a3:b4:16:6e:8a:98:d2:56:
                    cd:30:11:d8:93:3c:c2:6f:3c:97:94:11:32:98:66:
                    0b:a0:d4:bf:b9:3e:02:45:51:ed:60:09:d0:66:4f:
                    ff:42:15:65:f2:e4:0a:63:93:55:0c:1d:66:4a:90:
                    ff:88:ba:04:13:99:01:ab:82:ba:5e:f2:6a:67:37:
                    15:a3:6b:90:f7:cb:06:fe:6f:3f:ed:7b:1e:5f:95:
                    f3:ce:bf:92:d4:e6:29:26:39:09:64:1b:ec:b2:68:
                    47:ad:9d:ce:63:ad:fa:76:63:1e:ca:14:68:d6:25:
                    e8:91:d2:1d:ca:91:26:b8:af:41:ba:9a:42:e5:23:
                    20:74:55:58:f7:b0:af:30:b7:09:53:6d:a8:fb:7f:
                    aa:75:63:a5:28:17:5f:98:34:a5:dc:f1:7b:0e:f1:
                    ec:56:62:42:9a:8b:67:09:39:75:5b:1e:7a:af:b1:
                    49:63:b0:20:c4:83:84:0b:83:cd:3c:2d:e9:c4:6f:
                    19:72:8d:6f:0a:98:68:19:40:9a:28:a8:8e:ac:c6:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F6:55:55:E1:46:E1:6D:FE:30:6B:00:0C:AE:28:43:DA:F3:A1:D7
            X509v3 Authority Key Identifier:
                keyid:B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663365303a3a2f34382d3438203d3e20313530323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f44:f3e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:4f:71:f2:1e:82:06:22:78:1d:21:46:fb:b9:10:64:77:27:
         76:e1:6d:8d:14:c8:19:50:84:ee:66:49:87:55:1a:d0:14:91:
         fb:4d:7f:0a:5f:ab:0a:46:b8:73:6e:9a:ce:54:1d:f7:d3:47:
         c1:ea:81:59:00:ff:eb:11:60:07:e9:81:a5:ab:c8:af:9a:09:
         1b:39:64:d2:52:0b:59:80:92:bc:47:a4:b2:03:a0:63:b4:47:
         d9:92:e2:69:f3:5e:a5:db:d7:6e:7d:a3:fd:5b:52:5f:ea:83:
         22:82:f0:1e:84:12:86:8a:80:01:60:bf:3c:fa:b4:ee:2b:64:
         f9:4b:7c:18:cd:bc:b0:88:50:0b:48:86:97:19:fb:c9:6d:95:
         7e:12:2b:6f:10:63:73:29:db:ea:9a:1d:73:35:d6:ec:1b:eb:
         ad:a3:7f:2e:93:40:e9:a7:06:f1:90:87:25:ef:07:34:dd:1a:
         d1:96:c2:5f:a4:eb:d2:b9:ec:5f:03:33:11:90:42:ea:4c:7c:
         6e:b7:a1:be:56:61:14:47:31:e9:9a:a2:e8:32:77:78:c8:6d:
         e9:b9:72:03:f1:a8:a6:97:57:37:c1:af:34:18:0d:7a:d4:62:
         59:89:52:c3:f7:19:27:e4:34:36:19:be:b1:db:38:22:44:13:
         43:dc:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----