Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/326130363a613030353a313034303a3a2f34332d3438203d3e20323033363335.roa
File:                     326130363a613030353a313034303a3a2f34332d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          Wt80jRCEtVfs6JuGvDP3nl8pkrvTZ/gL+5f/S726AEI=
Subject key identifier:   8E:33:F3:85:03:4F:14:DB:16:D9:B5:54:59:D4:AD:CD:B4:F4:43:90
Certificate issuer:       /CN=CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06
Certificate serial:       22CF09BB959C5B40BC680012F5AA521A33A992C7
Authority key identifier: CD:EF:17:1B:E1:DF:C4:92:DB:DF:9F:EB:FB:40:C2:C0:BA:32:6F:06
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/326130363a613030353a313034303a3a2f34332d3438203d3e20323033363335.roa
Signing time:             Fri 21 Apr 2023 03:34:08 +0000
ROA not before:           Fri 21 Apr 2023 03:29:08 +0000
ROA not after:            Fri 19 Apr 2024 03:34:08 +0000
asID:                     203635
IP address blocks:        2a06:a005:1040::/43 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cf:09:bb:95:9c:5b:40:bc:68:00:12:f5:aa:52:1a:33:a9:92:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06
        Validity
            Not Before: Apr 21 03:29:08 2023 GMT
            Not After : Apr 19 03:34:08 2024 GMT
        Subject: CN=8E33F385034F14DB16D9B55459D4ADCDB4F44390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:21:f0:2c:44:d5:be:90:1a:b7:fa:1a:df:56:
                    b4:5b:0a:89:65:b9:d9:cb:ee:0a:2b:11:c2:52:3f:
                    6a:ad:c1:30:32:1b:7a:53:3d:bf:53:98:19:a1:1b:
                    83:4a:d4:cb:42:2e:90:90:18:97:61:92:1a:c9:49:
                    cb:59:39:e0:c3:74:e3:ce:1c:9e:fe:12:43:53:b4:
                    65:60:19:0f:5a:05:7b:03:15:38:dc:0d:48:2f:bb:
                    f3:7b:e1:3f:7a:89:c6:71:c9:dd:73:30:f9:7d:f9:
                    21:91:5a:be:1c:61:21:16:80:fa:05:12:4b:b9:bd:
                    4c:15:aa:32:3f:cf:69:44:fe:27:a5:a0:7c:96:a4:
                    a5:12:79:4e:fb:2f:5f:65:03:2a:4d:84:b4:13:22:
                    6e:5d:3e:ce:8f:44:a5:77:96:a4:f5:86:79:f5:77:
                    6c:c8:2b:7b:8e:ce:28:9a:00:4b:69:5d:aa:37:a1:
                    4b:33:9d:ac:77:ef:1e:8b:51:ea:28:9d:82:b0:1e:
                    6c:13:6f:03:88:aa:a1:3f:ae:7b:90:98:b8:1c:08:
                    0c:8b:f4:6b:25:dc:3f:d5:b3:a7:ef:0b:c5:60:fe:
                    6b:f1:ed:b8:59:51:01:d8:65:cd:d7:3a:8e:cb:9d:
                    a8:7b:f2:2e:b9:a7:e1:cf:57:c0:0c:29:5f:2b:f0:
                    bc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:33:F3:85:03:4F:14:DB:16:D9:B5:54:59:D4:AD:CD:B4:F4:43:90
            X509v3 Authority Key Identifier:
                keyid:CD:EF:17:1B:E1:DF:C4:92:DB:DF:9F:EB:FB:40:C2:C0:BA:32:6F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/326130363a613030353a313034303a3a2f34332d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1040::/43

    Signature Algorithm: sha256WithRSAEncryption
         37:9f:18:22:c5:ab:99:15:62:61:53:9d:e1:5c:e8:37:88:9d:
         93:3f:7a:b9:b3:f1:3c:15:bf:d3:69:94:d2:8c:2c:3a:b6:c0:
         c4:9b:e7:82:00:34:3d:45:69:2f:a9:0e:82:43:d1:ed:2a:dc:
         8b:66:1a:99:83:5a:86:7b:8e:21:4d:d8:55:4c:1d:52:f0:a7:
         af:1a:62:9c:a1:8b:6a:e3:04:c9:37:d6:5c:2e:60:f0:42:b2:
         8e:b0:61:b0:ac:be:3b:23:7d:19:ea:4f:50:60:7c:9e:c1:90:
         c0:66:c9:f1:66:48:39:47:ce:b9:3d:fe:7b:4e:60:e5:12:09:
         aa:44:54:0b:da:c8:dd:c3:9e:36:27:87:ed:bb:c5:c3:5a:2a:
         5b:58:8a:f0:49:8a:f3:9c:58:9d:f5:0e:da:12:ad:b0:bd:e1:
         b0:9e:23:69:17:66:ca:0a:21:64:22:cb:d8:08:32:06:49:3c:
         94:b4:a3:48:ed:40:98:86:fe:95:83:30:e7:c2:0f:84:55:6e:
         4b:b6:05:8f:9b:e3:05:11:63:60:2d:d5:26:77:79:5b:d5:49:
         9c:7d:66:5a:c0:e3:cb:07:ee:4e:ea:54:c7:49:56:17:cd:ad:
         02:80:68:7a:82:1d:be:b2:df:64:38:da:70:81:77:c5:bb:ef:
         5e:8c:a0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----