Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638343a313730323a3a2f34382d3438203d3e203630393030.roa
File:                     326130363a396638343a313730323a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          A8jCSPsehc+mG6RGvDXhHlqGXakDR9j7D9ziUzVeFiU=
Subject key identifier:   EB:29:A1:76:B5:5F:2D:73:5A:39:B5:5F:8E:78:AC:08:4C:F5:91:54
Certificate issuer:       /CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
Certificate serial:       6802F2DB309CF221191A30E4A251AB236BB7256C
Authority key identifier: C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638343a313730323a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 26 May 2023 01:58:34 +0000
ROA not before:           Fri 26 May 2023 01:53:34 +0000
ROA not after:            Fri 24 May 2024 01:58:34 +0000
asID:                     60900
IP address blocks:        2a06:9f84:1702::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:02:f2:db:30:9c:f2:21:19:1a:30:e4:a2:51:ab:23:6b:b7:25:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
        Validity
            Not Before: May 26 01:53:34 2023 GMT
            Not After : May 24 01:58:34 2024 GMT
        Subject: CN=EB29A176B55F2D735A39B55F8E78AC084CF59154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:57:48:49:cd:5f:a1:15:46:12:93:32:9f:da:
                    e5:ff:1a:d0:bf:ce:1b:4a:da:fc:d3:f6:d0:7b:96:
                    4c:99:ab:20:22:13:7b:1b:05:72:3a:81:c8:43:ff:
                    fd:ed:70:81:ef:3f:0e:3c:4b:c2:d0:33:fc:3a:1c:
                    f7:6c:a4:48:db:e6:c8:cf:70:54:05:46:50:e3:e1:
                    74:a2:a6:59:17:74:d1:c7:be:b5:5d:fe:11:dd:8c:
                    7b:cd:63:79:4b:e4:76:15:a4:e3:e2:30:76:26:83:
                    60:60:af:fe:59:69:62:56:47:fd:9f:35:e8:ef:9f:
                    e0:3e:00:6a:da:b4:12:53:d7:0d:dc:86:f1:0d:2c:
                    86:99:1b:31:cc:ae:1b:0c:4f:ca:f2:81:9a:05:07:
                    42:d9:be:fe:30:c7:b1:12:52:44:cd:d1:af:45:18:
                    62:62:0c:43:3e:5b:f5:96:7c:f1:1c:69:87:25:b6:
                    3b:b9:8f:f7:2f:2e:15:5e:66:14:ed:d2:7e:d8:72:
                    bf:54:9f:22:e0:19:f9:9b:52:c7:83:1b:2e:65:d1:
                    1d:96:51:58:8c:4a:02:22:2a:f1:10:d7:23:43:7e:
                    62:86:5e:0e:4b:95:27:d1:52:bd:ad:7e:b6:06:72:
                    8d:56:dd:24:e2:53:96:bf:a3:c1:b8:77:e7:b4:a9:
                    83:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:29:A1:76:B5:5F:2D:73:5A:39:B5:5F:8E:78:AC:08:4C:F5:91:54
            X509v3 Authority Key Identifier:
                keyid:C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638343a313730323a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f84:1702::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:f5:ca:95:1a:c5:0b:50:c7:c5:42:41:8d:c2:e5:1f:37:11:
         6e:c5:87:a9:a7:50:a9:54:7c:c0:5e:5f:63:82:96:0e:96:25:
         48:8e:03:05:43:e4:dd:ec:35:11:f5:16:11:b0:de:9e:68:b6:
         79:ee:a7:ad:83:6b:00:14:86:1d:91:d8:7e:44:42:a3:78:2a:
         5c:f3:1f:c1:bf:73:40:2b:86:19:8c:07:dd:fd:53:83:0a:9f:
         2a:ed:cd:78:7e:4a:ba:40:8b:56:ea:5d:bf:3e:67:9a:9e:e0:
         b7:e2:e4:52:49:9e:52:d4:07:b6:fe:d2:22:af:4c:ea:3a:42:
         8a:78:d3:55:35:1f:51:dc:11:82:12:3e:ef:a5:e8:15:a0:a1:
         cd:c1:0a:9d:a1:42:14:3e:b9:40:40:9a:a6:ca:b5:03:0b:34:
         3e:4a:f4:e3:8d:2d:da:9c:62:aa:fb:5c:ed:29:e5:b3:3f:65:
         c5:cd:be:29:07:65:3f:07:30:cd:fa:95:ea:2e:37:83:0c:d3:
         36:5a:6f:22:17:fc:7d:11:a4:45:ae:f6:8f:f7:78:08:a2:85:
         5b:e8:0c:dd:95:d3:4b:87:4f:a2:28:2b:52:5e:51:6a:f7:55:
         a7:3e:70:b2:a6:aa:3c:0e:a8:12:d6:bc:12:49:72:d3:4d:57:
         6b:7a:b9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----