Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638343a313530303a3a2f34302d3438203d3e20313939313737.roa
File:                     326130363a396638343a313530303a3a2f34302d3438203d3e20313939313737.roa (raw, json)
Hash identifier:          I0Y1hSehTXZyTqffWWgTw3+n18YYqGYbh7uI1FT6fcs=
Subject key identifier:   C4:55:56:14:94:3D:62:79:1A:53:49:96:30:30:E0:2C:3F:E1:A0:9E
Certificate issuer:       /CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
Certificate serial:       5DBE56E79DB8D988A2207309327E14B853DF982D
Authority key identifier: C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638343a313530303a3a2f34302d3438203d3e20313939313737.roa
Signing time:             Fri 26 May 2023 02:02:28 +0000
ROA not before:           Fri 26 May 2023 01:57:28 +0000
ROA not after:            Fri 24 May 2024 02:02:28 +0000
asID:                     199177
IP address blocks:        2a06:9f84:1500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:be:56:e7:9d:b8:d9:88:a2:20:73:09:32:7e:14:b8:53:df:98:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
        Validity
            Not Before: May 26 01:57:28 2023 GMT
            Not After : May 24 02:02:28 2024 GMT
        Subject: CN=C4555614943D62791A5349963030E02C3FE1A09E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:64:19:40:aa:c7:30:99:70:e1:3b:cf:8b:61:
                    dd:fa:bc:f8:01:95:cb:1e:48:9f:45:4e:6c:8f:f5:
                    84:cd:0e:cf:d2:50:34:0a:a9:ad:f9:c7:7b:36:3d:
                    33:a2:12:5c:03:1e:05:0d:15:df:29:95:58:e0:c6:
                    28:31:c2:b2:57:3f:82:0e:12:94:b4:cd:1d:cf:9c:
                    00:14:d0:8e:8d:45:08:46:92:a2:9b:d6:4c:08:8f:
                    3a:e6:82:9b:ee:41:5c:c2:8e:89:47:37:23:13:cf:
                    f7:12:1d:a1:52:71:be:79:da:05:20:18:b6:b1:17:
                    8a:44:0c:2f:25:2a:40:22:9e:36:29:0f:bd:a4:39:
                    46:de:32:65:e9:03:c3:2e:5a:76:45:04:e6:d1:a6:
                    16:37:1c:47:1c:58:02:f5:27:c2:93:03:95:a1:51:
                    df:f3:78:79:69:e6:6d:27:b1:9c:59:32:d5:13:26:
                    4e:c1:94:e3:d1:a1:55:a9:94:27:76:1d:b4:8e:94:
                    b8:4c:6e:5d:86:37:d0:be:60:6c:8f:2a:f5:51:62:
                    02:1c:81:0c:5e:7d:03:23:61:17:33:2d:f4:ff:4f:
                    cb:bd:40:9e:b5:3b:05:51:3a:23:27:a3:ed:df:19:
                    da:d7:96:c0:80:15:14:4c:d2:24:e6:49:6b:36:74:
                    f4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:55:56:14:94:3D:62:79:1A:53:49:96:30:30:E0:2C:3F:E1:A0:9E
            X509v3 Authority Key Identifier:
                keyid:C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638343a313530303a3a2f34302d3438203d3e20313939313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f84:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:1f:73:ed:b1:92:b7:7b:3b:9f:fc:61:3b:74:81:30:1c:dd:
         9d:c1:ef:7b:1b:75:3a:c8:85:2c:21:98:34:60:53:83:98:ec:
         91:c7:df:e7:67:6d:08:e6:6d:73:f8:bb:f1:2b:b8:1c:fc:f6:
         82:da:d8:88:ed:0b:53:0f:d2:e3:79:3b:4c:57:dd:ab:06:62:
         a8:f0:54:fb:a3:38:02:2d:65:04:81:b7:72:ea:b3:1f:ea:6e:
         6a:b9:b3:5a:5a:66:b6:44:9e:97:e0:f1:f9:7b:e3:45:f8:d6:
         53:51:c4:0d:d2:64:4e:fe:66:dc:4c:c5:6e:85:9b:93:c3:fb:
         36:14:b3:c6:0e:af:a6:ba:26:83:7f:3d:0f:49:b2:56:d8:ff:
         a2:44:47:8f:8d:f5:df:cc:d0:5d:75:54:4f:a0:d4:03:04:1e:
         e3:c0:32:61:49:38:aa:d4:c7:14:43:aa:22:db:28:bb:1e:ef:
         7a:a4:8f:00:ce:55:22:36:c0:db:21:e3:11:62:6b:82:0b:ff:
         38:69:0a:c2:fd:14:f0:3e:ff:67:14:e1:9f:74:8f:68:77:eb:
         0c:5f:01:ca:38:97:87:d4:04:3c:ec:0f:86:b6:64:0d:10:e7:
         26:ae:c7:6f:c5:eb:71:1f:8e:0b:61:5e:d3:c6:d9:e0:5b:70:
         5c:08:14:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----