Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/326130363a613030353a313630303a3a2f34342d3438203d3e20323033363335.roa
File:                     326130363a613030353a313630303a3a2f34342d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          C0bKHik84pvurc+IofR361syryHbIJxKnSsCTF9g6a4=
Subject key identifier:   C3:4D:D8:41:13:59:13:0D:EA:3E:62:E1:48:DF:90:FB:85:D1:2A:C2
Certificate issuer:       /CN=CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06
Certificate serial:       4B8497A50C0B2CEE0CEA156D315041C19BAA1B9E
Authority key identifier: CD:EF:17:1B:E1:DF:C4:92:DB:DF:9F:EB:FB:40:C2:C0:BA:32:6F:06
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/326130363a613030353a313630303a3a2f34342d3438203d3e20323033363335.roa
Signing time:             Fri 21 Apr 2023 03:34:08 +0000
ROA not before:           Fri 21 Apr 2023 03:29:08 +0000
ROA not after:            Fri 19 Apr 2024 03:34:08 +0000
asID:                     203635
IP address blocks:        2a06:a005:1600::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:84:97:a5:0c:0b:2c:ee:0c:ea:15:6d:31:50:41:c1:9b:aa:1b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06
        Validity
            Not Before: Apr 21 03:29:08 2023 GMT
            Not After : Apr 19 03:34:08 2024 GMT
        Subject: CN=C34DD8411359130DEA3E62E148DF90FB85D12AC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:4d:00:c5:c6:c0:61:2d:8d:1a:45:63:d7:
                    81:ac:cb:fc:a2:1a:ab:f5:1b:2f:4a:46:36:d6:94:
                    d9:cf:23:c2:5c:18:0d:fd:62:13:a0:ad:4f:02:6a:
                    9d:3d:3b:26:1a:8f:49:4f:b4:d3:46:6d:af:d3:c4:
                    70:56:98:53:9d:8e:86:d3:9c:74:60:d0:e3:09:a5:
                    d1:f3:b2:c2:93:18:91:95:b1:38:89:26:b6:eb:c0:
                    53:7e:f3:b0:2e:58:a3:c5:fd:28:6f:b7:05:28:b7:
                    09:cd:2b:49:5e:c1:9f:a7:44:90:3f:be:2a:48:7d:
                    77:c7:cc:e8:06:af:38:cb:b2:cf:f7:ef:43:d9:ab:
                    c7:73:86:b0:a5:8e:3a:d5:4b:fe:70:1e:d9:9d:69:
                    03:c3:c8:71:5c:24:98:b5:90:da:65:85:71:c8:2f:
                    e5:ed:95:f3:8e:e9:f4:db:e5:79:56:3e:99:82:c6:
                    24:70:ec:d8:3e:3f:cd:54:f4:ee:fb:ec:1c:9b:0c:
                    33:a5:64:d8:c4:cb:99:31:df:a2:ff:73:d7:9b:f9:
                    ed:0c:86:c7:5c:1c:91:19:94:10:4c:22:dc:34:57:
                    e0:dc:cb:56:42:83:a5:22:d1:31:5d:d3:99:ac:b7:
                    4e:12:88:6a:94:eb:1f:26:94:b5:f7:51:c6:ee:46:
                    8a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4D:D8:41:13:59:13:0D:EA:3E:62:E1:48:DF:90:FB:85:D1:2A:C2
            X509v3 Authority Key Identifier:
                keyid:CD:EF:17:1B:E1:DF:C4:92:DB:DF:9F:EB:FB:40:C2:C0:BA:32:6F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/326130363a613030353a313630303a3a2f34342d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1600::/44

    Signature Algorithm: sha256WithRSAEncryption
         5f:1f:59:cb:87:ee:d0:57:09:13:72:4f:f5:ad:7e:ad:eb:ac:
         41:72:9c:e2:02:90:d5:85:64:21:0b:b6:2d:9a:d8:87:08:41:
         96:f2:c3:31:6b:4c:f4:5d:a4:d7:52:86:72:85:5d:57:ea:bf:
         53:cd:18:77:8c:5b:e5:4e:3e:4f:b2:c8:c7:af:a8:4c:2b:7d:
         76:64:54:cb:12:11:4b:d9:d6:87:65:31:ff:e9:68:40:e9:4b:
         84:59:59:89:3b:2c:48:7c:58:1c:6e:6e:71:f0:44:a7:de:40:
         80:1d:40:65:ee:19:e7:b1:86:60:06:fc:ea:f4:e5:07:e0:26:
         09:1a:aa:c0:a2:96:98:ed:44:45:1b:ff:16:0f:16:5f:84:65:
         95:16:f0:2a:63:95:93:82:06:12:b1:8a:28:cb:fb:b2:42:ea:
         e0:dc:a1:10:49:32:c5:7b:6e:85:10:31:45:3d:78:50:f9:cf:
         18:0b:70:63:60:81:8b:0c:e5:68:42:09:d4:b1:9e:c9:76:be:
         db:06:10:0a:67:d7:7f:71:86:2a:aa:06:f7:a9:5a:db:fd:bb:
         9b:5a:6d:2f:1e:a4:d5:8a:f0:bd:62:63:51:30:ac:74:c8:23:
         8e:50:a8:5c:64:96:c3:bc:26:e9:1c:39:a3:38:26:35:34:b3:
         c5:43:db:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----