Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638353a663030303a3a2f33362d3438203d3e203630393030.roa
File:                     326130363a396638353a663030303a3a2f33362d3438203d3e203630393030.roa (raw, json)
Hash identifier:          J1vujVXy9uIbIDe+P9ZAf10KfrzrxfGQWdtrP1FD3n0=
Subject key identifier:   F8:D7:17:D7:CA:A6:48:56:85:74:8B:7B:B5:28:6C:30:74:24:CF:4C
Certificate issuer:       /CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
Certificate serial:       02E6C9D9F92D85DA909625622A7A5A41299B7CD2
Authority key identifier: C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638353a663030303a3a2f33362d3438203d3e203630393030.roa
Signing time:             Sat 27 May 2023 20:55:07 +0000
ROA not before:           Sat 27 May 2023 20:50:07 +0000
ROA not after:            Sat 25 May 2024 20:55:07 +0000
asID:                     60900
IP address blocks:        2a06:9f85:f000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e6:c9:d9:f9:2d:85:da:90:96:25:62:2a:7a:5a:41:29:9b:7c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
        Validity
            Not Before: May 27 20:50:07 2023 GMT
            Not After : May 25 20:55:07 2024 GMT
        Subject: CN=F8D717D7CAA6485685748B7BB5286C307424CF4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:f5:ba:f2:8b:3d:90:d1:fc:55:cb:90:26:
                    70:1e:77:cd:e9:3e:f5:cd:ab:98:53:ed:18:91:6b:
                    63:34:e6:7e:48:61:17:b4:2b:64:e5:9f:cc:6a:a1:
                    a7:f9:c7:37:cb:ad:dc:a9:45:d6:1f:06:da:90:2f:
                    04:5c:a6:7d:c2:fe:92:61:aa:7d:a5:41:23:7c:01:
                    45:32:e6:c7:72:3b:52:57:8a:59:3c:34:9d:4e:59:
                    a2:32:b0:1f:46:98:54:05:9a:29:fe:1e:dc:1c:c4:
                    3c:ad:a1:75:ff:24:80:8c:a9:44:f3:e4:d2:4d:90:
                    f5:ab:26:69:dc:3c:84:d0:0a:0c:a0:ae:73:ae:8d:
                    ec:d8:00:7d:7a:e1:3b:1f:1c:60:c7:a1:bd:c0:6c:
                    be:9d:57:6d:d0:e7:90:42:32:87:35:d3:6f:d9:b5:
                    8b:9b:5d:bd:c2:ad:95:c3:d4:e6:2a:dd:82:92:17:
                    59:29:eb:e3:66:db:de:28:30:fb:a9:c6:5a:86:1c:
                    84:c9:96:97:18:c3:1e:33:d8:3d:c9:6e:f8:71:bf:
                    61:9d:92:9d:3b:eb:a8:79:89:d2:46:36:b6:dd:40:
                    e5:a3:fe:6a:f6:0e:31:52:c1:94:12:83:95:79:e4:
                    b4:86:02:af:c8:ee:cb:b3:4b:c0:73:0e:7d:bc:bc:
                    57:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D7:17:D7:CA:A6:48:56:85:74:8B:7B:B5:28:6C:30:74:24:CF:4C
            X509v3 Authority Key Identifier:
                keyid:C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638353a663030303a3a2f33362d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f85:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         33:f8:e0:de:d1:22:a6:8c:9d:da:a1:d3:c9:3d:28:3a:97:94:
         12:1b:0d:44:23:d4:82:d0:97:99:76:58:51:19:d9:30:d3:0b:
         eb:88:3e:f8:86:f6:0d:06:f1:50:ff:99:b2:e8:4a:82:e8:f0:
         ea:fb:e2:01:75:34:65:15:43:5b:82:8d:03:f8:4f:87:a6:9f:
         33:93:be:fb:c3:18:83:64:1c:2e:48:1c:c4:3c:6a:55:09:ff:
         10:af:c6:fa:c9:8d:37:d0:d9:7b:c1:f0:f5:7e:50:73:1d:ab:
         d5:3b:3b:b7:45:93:e9:40:8b:21:9c:48:68:51:6d:3f:65:55:
         9a:dc:a9:11:d8:ff:1d:74:e6:83:e5:b8:31:94:82:55:c8:3d:
         c7:38:eb:f8:3b:0c:03:60:ee:5e:99:bb:d5:95:60:f1:40:9e:
         77:6c:37:29:1c:2a:2d:32:75:1f:7d:68:98:5a:65:99:4e:f2:
         9c:c4:27:05:cf:74:68:01:8d:ea:d1:cd:fd:6f:11:f9:70:22:
         82:a3:88:cc:62:c6:d8:31:e8:48:36:fe:ff:1d:d6:fd:3e:7c:
         47:1d:e1:49:bf:44:2a:e5:15:f9:9a:32:e2:26:06:97:74:1e:
         20:68:b2:ae:09:5a:83:fa:3a:c3:23:aa:c6:af:8c:f4:06:fa:
         ce:f2:8c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----