Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/326130363a613030353a313630303a3a2f34342d3438203d3e203438353831.roa
File:                     326130363a613030353a313630303a3a2f34342d3438203d3e203438353831.roa (raw, json)
Hash identifier:          mVHLWv9gZkMyrBPEl2xi6Lz/fs8hr9iuqiX3RIlAuCw=
Subject key identifier:   E6:3D:6C:7E:A6:DF:06:C1:76:A8:C2:80:B8:33:5B:EC:32:81:0E:98
Certificate issuer:       /CN=CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06
Certificate serial:       46415A9857448284A3106A6F378EC5B5CD496487
Authority key identifier: CD:EF:17:1B:E1:DF:C4:92:DB:DF:9F:EB:FB:40:C2:C0:BA:32:6F:06
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/326130363a613030353a313630303a3a2f34342d3438203d3e203438353831.roa
Signing time:             Fri 21 Apr 2023 03:34:08 +0000
ROA not before:           Fri 21 Apr 2023 03:29:08 +0000
ROA not after:            Fri 19 Apr 2024 03:34:08 +0000
asID:                     48581
IP address blocks:        2a06:a005:1600::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:41:5a:98:57:44:82:84:a3:10:6a:6f:37:8e:c5:b5:cd:49:64:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06
        Validity
            Not Before: Apr 21 03:29:08 2023 GMT
            Not After : Apr 19 03:34:08 2024 GMT
        Subject: CN=E63D6C7EA6DF06C176A8C280B8335BEC32810E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:fe:ef:59:8b:ff:89:37:c7:a5:10:d8:87:
                    91:ea:08:2b:27:7d:22:d0:33:66:8d:51:11:f8:bd:
                    fc:dd:57:63:76:82:14:24:65:3e:b7:a9:50:28:23:
                    0a:3b:3f:28:8f:c6:b4:5f:5d:fe:9b:3d:fd:ed:03:
                    d3:2d:f3:26:e2:59:8b:cc:00:5a:37:70:57:30:32:
                    26:5b:de:c5:17:18:54:61:40:25:79:a0:9f:02:73:
                    04:d7:45:ea:47:8e:d2:28:c6:8d:2c:2f:1f:37:87:
                    2a:76:4f:09:f9:f9:9d:f6:f9:03:46:59:b0:20:70:
                    66:9b:a8:f7:a5:b0:51:13:54:ed:2c:56:ae:bb:ac:
                    50:0e:ae:d4:c9:b7:01:d2:0a:8d:e4:20:f3:6d:ac:
                    f4:75:48:86:40:85:4e:38:05:fb:2a:5f:18:1a:1a:
                    ab:be:cb:a9:18:7d:d3:85:13:4f:b0:1a:1e:b4:a6:
                    c0:80:29:f5:fb:21:09:7a:58:fe:98:f0:91:19:b3:
                    bc:c9:7d:38:30:d7:47:ea:09:df:e1:0b:86:95:a5:
                    00:9e:7d:a8:67:50:29:bf:6b:5f:61:66:4b:3a:26:
                    22:9c:9f:b2:0b:4f:9a:b3:90:3c:cc:d6:df:6e:ed:
                    e2:c8:4b:60:37:1b:f4:0e:6f:90:8b:26:84:25:1d:
                    eb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3D:6C:7E:A6:DF:06:C1:76:A8:C2:80:B8:33:5B:EC:32:81:0E:98
            X509v3 Authority Key Identifier:
                keyid:CD:EF:17:1B:E1:DF:C4:92:DB:DF:9F:EB:FB:40:C2:C0:BA:32:6F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CDEF171BE1DFC492DBDF9FEBFB40C2C0BA326F06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/7/326130363a613030353a313630303a3a2f34342d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1600::/44

    Signature Algorithm: sha256WithRSAEncryption
         33:50:60:5d:12:f8:cf:ce:d3:e5:79:37:eb:f8:7d:ec:bd:c1:
         85:52:ed:16:4d:ee:74:12:62:dd:4f:f1:de:0d:9b:bb:52:f4:
         e2:4b:f2:20:28:d3:04:ed:b7:82:1a:d7:39:50:fa:61:02:e8:
         e7:c1:df:e7:18:fd:a4:12:9e:af:b5:c8:84:06:40:70:68:06:
         6d:8b:b1:2e:24:a6:b1:be:b2:bf:2b:8b:a7:ff:1c:a1:22:e6:
         84:e9:49:72:2d:48:02:a1:1f:45:ce:89:e9:2b:2f:6a:e1:39:
         2b:e6:4e:fc:1f:04:8d:2f:be:bf:49:bf:ca:d1:aa:dc:2c:40:
         a2:d3:ab:8b:57:a0:1d:4e:14:b1:29:4a:48:dd:80:65:15:c6:
         94:f2:4e:ff:4e:5f:55:26:81:3c:f6:b8:f2:3d:f1:a3:ee:7e:
         a7:24:33:42:7a:64:dc:dc:46:11:b8:d5:ae:15:69:d8:e0:96:
         36:79:8f:a3:35:b7:09:0b:0a:f1:d5:70:d7:1a:a7:81:53:eb:
         cf:7f:6b:15:6d:6b:56:39:ce:c8:41:cc:b5:da:cb:e5:29:f4:
         54:80:7c:28:da:ec:ce:7a:e7:33:69:3b:cd:d2:4d:bb:c2:00:
         06:20:f7:23:e9:cb:c7:c4:6a:b2:24:ff:a9:5b:d8:c7:c4:07:
         6e:83:3e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----