Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/1/326130363a396638313a333230303a3a2f34382d3438203d3e20323135373535.roa
File:                     326130363a396638313a333230303a3a2f34382d3438203d3e20323135373535.roa (raw, json)
Hash identifier:          xhIBk0ZVz7ruB5KgdvG6bF6Sm+3FEFCkAqxp4LRS/FY=
Subject key identifier:   CA:07:31:FA:B0:04:88:E4:D7:82:6E:14:CC:0F:70:5D:F8:22:52:5A
Certificate issuer:       /CN=59B3F040539A01CDC2A036F403A23CC53A672EB0
Certificate serial:       01F966E4D2DDF5D01D6865461B3B62C9E76F6F93
Authority key identifier: 59:B3:F0:40:53:9A:01:CD:C2:A0:36:F4:03:A2:3C:C5:3A:67:2E:B0
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/2/59B3F040539A01CDC2A036F403A23CC53A672EB0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/1/326130363a396638313a333230303a3a2f34382d3438203d3e20323135373535.roa
Signing time:             Wed 17 Jan 2024 02:12:06 +0000
ROA not before:           Wed 17 Jan 2024 02:07:06 +0000
ROA not after:            Wed 15 Jan 2025 02:12:06 +0000
asID:                     215755
IP address blocks:        2a06:9f81:3200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f9:66:e4:d2:dd:f5:d0:1d:68:65:46:1b:3b:62:c9:e7:6f:6f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B3F040539A01CDC2A036F403A23CC53A672EB0
        Validity
            Not Before: Jan 17 02:07:06 2024 GMT
            Not After : Jan 15 02:12:06 2025 GMT
        Subject: CN=CA0731FAB00488E4D7826E14CC0F705DF822525A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:6d:84:0f:9b:3d:e7:4b:db:81:b6:c7:08:
                    55:3e:64:0c:45:80:8c:0a:fa:e6:c7:4b:ae:73:4b:
                    20:7c:d4:0d:0e:cb:8a:9e:ed:1a:6d:5a:a4:8c:48:
                    08:8d:f4:1c:8e:17:2f:73:a1:e1:13:49:71:a5:12:
                    0d:10:1d:2a:a8:38:67:4c:b9:61:7d:6a:64:81:3e:
                    81:f7:9f:30:b6:57:45:4a:8e:0b:4e:92:02:e8:04:
                    8b:3b:15:de:6b:f6:40:11:f8:56:00:36:2b:04:56:
                    fb:c2:53:3b:3f:a5:cf:2f:ec:9a:9d:e3:67:e3:7c:
                    97:81:e0:2c:c3:89:db:59:37:7a:2a:90:e5:07:25:
                    1c:f7:e0:7d:8a:e0:36:22:12:e5:0e:98:85:19:8b:
                    5a:18:4d:35:94:d6:b4:3b:7f:ce:fd:4b:99:ed:98:
                    8f:ee:f5:af:05:73:06:b5:ae:5b:78:01:08:7f:01:
                    8c:5d:88:89:3a:c0:3b:50:60:b3:9f:48:c9:39:14:
                    d3:cc:e5:d3:b4:9c:1a:f9:9b:47:f6:0d:00:34:bf:
                    07:06:92:9e:74:1b:49:55:a1:40:3c:2c:a4:63:10:
                    bc:fc:3d:dc:67:fb:2a:14:02:ca:77:d5:09:8f:d4:
                    5a:02:7f:30:eb:bf:98:b3:31:65:1d:bf:f8:12:c5:
                    b2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:07:31:FA:B0:04:88:E4:D7:82:6E:14:CC:0F:70:5D:F8:22:52:5A
            X509v3 Authority Key Identifier:
                keyid:59:B3:F0:40:53:9A:01:CD:C2:A0:36:F4:03:A2:3C:C5:3A:67:2E:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/1/59B3F040539A01CDC2A036F403A23CC53A672EB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/2/59B3F040539A01CDC2A036F403A23CC53A672EB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/1/326130363a396638313a333230303a3a2f34382d3438203d3e20323135373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:4f:9a:83:8d:08:5b:1d:9f:0f:85:8f:ca:dd:9f:7b:47:4a:
         ad:b0:b9:87:e2:4a:d6:27:74:92:fe:07:93:d7:5a:96:26:95:
         05:6b:fc:c5:de:6d:56:4d:dd:12:b5:34:4d:e4:c3:52:ea:15:
         4c:17:79:2b:f5:9a:41:08:e5:24:24:d6:71:7a:13:a4:d0:c1:
         8e:cc:ae:0f:c0:9b:72:11:f1:27:38:b8:48:1b:32:e8:e7:2f:
         b7:bd:db:2e:b7:6c:cc:f0:44:95:a6:df:e6:16:9b:9a:96:4a:
         39:70:30:e5:a3:dd:26:14:d3:bd:6c:e2:b8:f0:12:30:f6:28:
         8c:50:7a:b3:ed:de:96:f1:36:65:49:d5:8d:f9:63:be:38:44:
         b0:23:27:e0:7f:ef:5d:d3:a2:fd:66:2c:bf:f6:30:e9:6e:42:
         c3:05:34:79:1c:51:8b:b9:0f:a4:de:08:0d:aa:5b:bd:80:83:
         61:6b:04:84:64:59:15:a9:a3:e3:66:4d:0c:a3:75:74:e6:6c:
         df:cf:65:a2:25:fb:28:91:c0:29:f0:ed:d3:f3:6d:44:5d:ed:
         61:6d:52:f9:dd:bd:fa:9b:33:92:df:db:f0:9d:21:b8:15:e5:
         ba:2a:34:16:21:cc:be:d9:c6:fd:33:89:a9:81:d7:00:33:e5:
         b5:fd:f9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----