Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/326130363a613030353a313034303a3a2f34332d3438203d3e203438353831.roa
File:                     326130363a613030353a313034303a3a2f34332d3438203d3e203438353831.roa (raw, json)
Hash identifier:          I2fxsrW0y6+EDjjKaTgBA5R6WWECKPF3RcYRoCPWPmk=
Subject key identifier:   FB:36:09:E1:49:D9:87:95:B7:04:89:47:33:8B:70:1A:44:29:99:59
Certificate issuer:       /CN=CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06
Certificate serial:       31981B3D22A35E0ADA9002536B74BB9FB076DF99
Authority key identifier: CD:EF:17:1B:E1:DF:C4:92:DB:DF:9F:EB:FB:40:C2:C0:BA:32:6F:06
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/326130363a613030353a313034303a3a2f34332d3438203d3e203438353831.roa
Signing time:             Fri 21 Apr 2023 03:34:08 +0000
ROA not before:           Fri 21 Apr 2023 03:29:08 +0000
ROA not after:            Fri 19 Apr 2024 03:34:08 +0000
asID:                     48581
IP address blocks:        2a06:a005:1040::/43 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:98:1b:3d:22:a3:5e:0a:da:90:02:53:6b:74:bb:9f:b0:76:df:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06
        Validity
            Not Before: Apr 21 03:29:08 2023 GMT
            Not After : Apr 19 03:34:08 2024 GMT
        Subject: CN=FB3609E149D98795B7048947338B701A44299959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:94:a5:8d:1f:82:bb:fe:d4:1a:56:77:92:c7:
                    a1:80:8c:7f:0c:b5:e6:88:99:42:88:05:82:5b:a7:
                    e2:03:ae:a5:b8:14:31:8f:8f:ef:2c:ca:0a:d5:2c:
                    e9:30:67:fa:04:ff:36:8e:f8:3c:ed:f6:0d:fe:03:
                    07:68:c0:91:9b:d8:f8:8a:4a:d1:d6:be:9f:24:35:
                    57:6c:78:b6:d0:71:ef:ef:84:d0:46:b5:48:ff:9b:
                    ea:56:59:40:44:4e:31:25:53:13:e0:79:cf:9a:24:
                    fd:64:20:cb:3c:a9:21:29:5b:39:3e:89:df:20:db:
                    ae:1a:b4:9b:da:84:18:ac:af:05:b3:2d:a5:d7:07:
                    0e:7e:c8:d4:19:42:5c:2b:cb:9d:3e:bd:31:91:83:
                    8d:ad:d1:01:9d:1f:2c:75:65:97:8c:dc:43:94:a3:
                    21:a4:e2:ec:d3:67:92:4c:dc:4b:a1:6d:d7:32:8a:
                    a6:64:35:c6:03:42:e6:59:f9:03:ed:04:28:1f:53:
                    bb:0a:d3:9c:49:7e:05:2b:0c:e4:e4:c6:d4:d6:4f:
                    bf:ac:d6:c1:a5:57:10:fc:9f:fb:a0:23:4c:05:18:
                    c3:a3:25:8a:85:15:63:11:fe:50:2c:84:99:aa:9e:
                    6d:30:89:66:73:55:56:f1:92:ec:0c:4d:bd:92:59:
                    db:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:36:09:E1:49:D9:87:95:B7:04:89:47:33:8B:70:1A:44:29:99:59
            X509v3 Authority Key Identifier:
                keyid:CD:EF:17:1B:E1:DF:C4:92:DB:DF:9F:EB:FB:40:C2:C0:BA:32:6F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/326130363a613030353a313034303a3a2f34332d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1040::/43

    Signature Algorithm: sha256WithRSAEncryption
         c1:a8:ce:18:57:b4:cc:67:56:44:fe:36:c9:46:1c:bf:6d:1a:
         c0:86:e5:86:74:09:2f:3f:ff:ce:8a:62:aa:c4:f8:18:27:31:
         cb:5f:02:14:10:a1:27:0c:97:21:99:a1:43:09:d1:48:57:4a:
         76:9b:a1:2a:96:41:90:58:c9:e2:5a:15:ab:af:66:4e:df:0d:
         10:ea:0e:18:71:07:cd:63:00:1a:db:de:60:0c:85:9f:37:77:
         d8:6f:00:7a:7f:fa:9f:56:ce:7d:94:8d:fd:b8:d3:54:0c:17:
         78:fc:6f:ba:5a:a7:3b:db:0b:eb:c5:b9:fe:31:ec:30:e3:f1:
         b6:1d:9f:d3:b6:fd:3c:bf:72:35:46:d1:e6:c0:25:ba:66:b1:
         38:e2:26:6d:1c:54:b5:56:02:b7:01:28:d8:6a:78:20:60:9b:
         ac:8e:0c:65:54:4d:70:e2:3e:d5:06:c5:a9:d3:59:1b:01:d5:
         82:1d:db:25:ac:ce:62:90:a9:5e:cd:75:ea:1e:e6:c3:d9:41:
         d0:1c:f9:4e:d4:ab:26:0d:49:22:16:72:f2:32:b0:a4:0f:51:
         2b:1b:c3:49:47:99:fa:90:a1:71:97:61:c1:56:5d:1c:2c:45:
         5e:ca:00:fd:be:8e:b3:7d:4e:b5:a1:1f:b3:9a:b7:20:e3:f1:
         9e:d2:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----