Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/5/323630323a666163323a363a3a2f34382d3438203d3e20323034383537.roa
File:                     323630323a666163323a363a3a2f34382d3438203d3e20323034383537.roa (raw, json)
Hash identifier:          V4oTI+GlVk0KMsWwXYO+q5EWAiUYe0BdEQP2MO7MhYE=
Subject key identifier:   A5:EE:5D:C7:A3:50:DE:28:F2:EE:EB:CB:42:8F:79:19:7F:63:75:69
Certificate issuer:       /CN=5B14756FB1A4B4485541E66E3DF5DE9CC1690F58
Certificate serial:       18A9EA416B70A03D3479B96F9BE5A2644C91B9F3
Authority key identifier: 5B:14:75:6F:B1:A4:B4:48:55:41:E6:6E:3D:F5:DE:9C:C1:69:0F:58
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/5B14756FB1A4B4485541E66E3DF5DE9CC1690F58.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/5/323630323a666163323a363a3a2f34382d3438203d3e20323034383537.roa
Signing time:             Fri 21 Apr 2023 03:29:21 +0000
ROA not before:           Fri 21 Apr 2023 03:24:21 +0000
ROA not after:            Fri 19 Apr 2024 03:29:21 +0000
asID:                     204857
IP address blocks:        2602:fac2:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a9:ea:41:6b:70:a0:3d:34:79:b9:6f:9b:e5:a2:64:4c:91:b9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B14756FB1A4B4485541E66E3DF5DE9CC1690F58
        Validity
            Not Before: Apr 21 03:24:21 2023 GMT
            Not After : Apr 19 03:29:21 2024 GMT
        Subject: CN=A5EE5DC7A350DE28F2EEEBCB428F79197F637569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:6a:62:ec:ff:66:61:81:d0:e6:be:84:dc:
                    6e:81:3c:69:77:f8:0b:5d:66:0a:80:a4:a7:77:75:
                    52:2a:06:01:58:4c:69:bd:e6:d4:7f:98:22:85:69:
                    3b:cf:f1:fb:fb:83:fa:c0:e1:bb:fa:38:93:62:f3:
                    14:87:24:06:d5:09:da:35:e9:e2:01:54:ee:71:7f:
                    76:b9:a8:5b:86:a1:a6:c8:63:6e:9c:19:9e:83:98:
                    ea:3d:66:ce:16:90:89:65:ea:c9:e9:fa:2a:cf:57:
                    9f:51:22:1a:7c:f5:02:38:02:84:55:34:52:e8:b5:
                    da:c1:f8:db:f6:18:f0:6a:69:38:69:24:84:87:56:
                    ae:74:f3:e2:29:10:7a:5e:2c:b1:85:b2:a8:ac:be:
                    bf:1f:69:83:57:12:ca:ff:b3:a7:23:2b:c8:d3:45:
                    88:41:68:5f:b7:10:ac:ee:5f:3f:ea:99:f0:38:bb:
                    c5:49:b2:63:17:ea:13:9e:ed:fe:8f:b9:b3:32:ea:
                    1b:4c:63:22:bc:d5:9e:02:87:2b:be:9a:50:05:f3:
                    d3:a1:6f:14:3e:6c:4a:8e:97:32:4b:f1:20:32:9d:
                    12:0b:58:83:fd:6c:52:9c:21:25:4c:1a:39:ea:aa:
                    1b:db:91:0d:21:e0:be:b3:ec:49:f6:c2:07:96:e3:
                    ee:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EE:5D:C7:A3:50:DE:28:F2:EE:EB:CB:42:8F:79:19:7F:63:75:69
            X509v3 Authority Key Identifier:
                keyid:5B:14:75:6F:B1:A4:B4:48:55:41:E6:6E:3D:F5:DE:9C:C1:69:0F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/5/5B14756FB1A4B4485541E66E3DF5DE9CC1690F58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/5B14756FB1A4B4485541E66E3DF5DE9CC1690F58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/5/323630323a666163323a363a3a2f34382d3438203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:a6:e0:05:74:a5:93:05:d2:ae:a6:46:c7:11:de:a9:f6:61:
         63:9d:02:cd:7d:cf:1b:1a:87:69:67:d6:0d:6b:32:15:84:0b:
         7d:87:8e:b2:00:23:79:ef:f7:b6:71:a1:f4:3a:59:fd:4e:02:
         97:f6:38:cb:c3:d5:62:e7:7b:7e:b3:8c:71:3b:8c:fb:15:a5:
         7e:6c:ac:13:64:3a:c3:38:92:88:cd:b7:ce:1d:56:19:3f:39:
         f8:ca:ce:ed:41:fe:52:f8:b6:87:4c:1d:eb:97:e1:35:22:aa:
         d9:4f:37:f7:22:36:b0:87:ae:b4:17:f7:0e:d0:02:44:51:0a:
         2f:1b:3d:7e:b0:25:d4:3e:03:3d:0b:7c:fb:ce:0e:b6:87:47:
         63:ba:7a:bb:99:69:f9:47:0b:5a:13:02:78:38:83:ca:6a:1e:
         5a:87:4e:c1:90:74:ee:e0:1f:13:69:10:39:9d:cd:96:7a:6b:
         cc:94:6f:5d:7b:60:db:26:7e:1f:e7:19:56:51:9f:ba:49:39:
         d7:f3:52:c3:a6:8b:d6:5a:89:06:de:24:08:6f:a4:97:a6:bd:
         30:d8:fd:3d:56:1d:ec:c5:03:36:5d:6b:47:c3:49:f3:5a:a9:
         ba:f5:4e:84:04:03:8b:d4:af:ae:54:f4:fb:6f:4c:7a:d0:e8:
         56:1c:25:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----