Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/326130353a646663333a646561643a3a2f34382d3438203d3e203534363831.roa
File:                     326130353a646663333a646561643a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier:          Djgzo4AazdZfty16K2nYnqXvDHpiTZwvhoBo0LN1uGg=
Subject key identifier:   0D:05:43:C7:DF:C0:F3:1E:37:88:69:88:A8:2B:55:BF:10:75:09:2E
Certificate issuer:       /CN=F27941BF58751CDB1302EAF661DCF88D1CF5D49F
Certificate serial:       01ECB4E85E5CE0146AD1DAFFAFA987965B2F962F
Authority key identifier: F2:79:41:BF:58:75:1C:DB:13:02:EA:F6:61:DC:F8:8D:1C:F5:D4:9F
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F27941BF58751CDB1302EAF661DCF88D1CF5D49F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/326130353a646663333a646561643a3a2f34382d3438203d3e203534363831.roa
Signing time:             Sat 20 Jan 2024 19:50:40 +0000
ROA not before:           Sat 20 Jan 2024 19:45:40 +0000
ROA not after:            Sat 18 Jan 2025 19:50:40 +0000
asID:                     54681
IP address blocks:        2a05:dfc3:dead::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ec:b4:e8:5e:5c:e0:14:6a:d1:da:ff:af:a9:87:96:5b:2f:96:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F27941BF58751CDB1302EAF661DCF88D1CF5D49F
        Validity
            Not Before: Jan 20 19:45:40 2024 GMT
            Not After : Jan 18 19:50:40 2025 GMT
        Subject: CN=0D0543C7DFC0F31E37886988A82B55BF1075092E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:75:61:54:99:00:62:1b:e2:5a:77:68:c4:9f:
                    bf:b5:b0:6d:ef:62:5d:25:5c:bc:26:04:e5:02:ae:
                    99:cf:24:55:ff:48:32:fc:7d:e0:6e:54:eb:02:20:
                    1e:0a:41:70:78:bf:b1:b2:f7:06:ee:05:6e:b7:fb:
                    e7:d0:19:9d:93:83:04:48:c5:26:7d:6c:15:14:7a:
                    03:19:06:ca:c5:d8:b6:ed:fa:b8:64:2e:55:93:0e:
                    fc:00:4a:4b:1e:3b:96:52:0b:a3:6f:f3:84:e7:ee:
                    f7:80:63:bc:14:61:97:65:46:af:36:bd:2c:ea:a2:
                    42:a8:6d:8a:e2:1f:be:af:da:9b:25:7e:22:66:e3:
                    6a:88:2e:02:5f:c7:11:20:4b:58:75:b7:d7:7d:2b:
                    1b:63:79:3e:4a:be:f5:ae:32:ae:9c:fb:2a:a1:a9:
                    28:28:07:f3:b9:7e:a8:f1:e7:c1:59:55:1a:32:40:
                    67:06:0c:88:a0:6e:5c:11:af:52:4b:d2:6f:6c:ab:
                    ad:bd:76:0d:9e:1f:52:8e:58:74:c9:be:4b:a7:d8:
                    a7:01:5a:d9:79:b4:46:bc:ea:f1:83:8d:f3:eb:07:
                    4e:69:01:8c:61:14:1a:6b:6b:a0:1f:a7:0a:9c:2c:
                    07:03:c1:41:04:23:f0:8f:dc:76:66:4d:17:26:91:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:05:43:C7:DF:C0:F3:1E:37:88:69:88:A8:2B:55:BF:10:75:09:2E
            X509v3 Authority Key Identifier:
                keyid:F2:79:41:BF:58:75:1C:DB:13:02:EA:F6:61:DC:F8:8D:1C:F5:D4:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/F27941BF58751CDB1302EAF661DCF88D1CF5D49F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F27941BF58751CDB1302EAF661DCF88D1CF5D49F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/326130353a646663333a646561643a3a2f34382d3438203d3e203534363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:dead::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:0d:af:fd:cb:71:e3:1d:54:05:ee:08:54:8a:27:fc:44:e5:
         aa:84:72:6d:26:b5:60:56:1c:63:59:a4:0e:98:c6:85:a4:c1:
         38:c0:2b:ef:35:cc:37:22:f5:b5:51:34:7b:95:4c:85:ae:0e:
         a8:c4:8a:3c:0e:db:c6:a6:3d:c2:f0:fc:42:f6:ab:52:be:6d:
         af:55:dc:ab:fc:a5:47:bb:9c:0a:e7:ff:32:24:30:4f:74:b4:
         39:23:75:6f:cd:a0:83:47:27:d0:e7:a0:09:1e:85:8f:0f:84:
         e0:33:41:81:7e:28:9a:24:08:0e:65:71:5c:f3:86:ab:57:c6:
         a0:50:3c:56:3a:79:10:05:b0:10:61:91:1a:7b:0e:9d:be:d2:
         19:79:30:61:50:9f:d0:62:f7:4a:94:71:a1:ae:06:31:19:98:
         50:27:ee:54:f4:ca:6d:45:c7:a1:16:6a:25:f5:a3:3e:73:d4:
         8c:0f:4f:1c:40:85:10:37:7a:f7:0d:02:72:40:0d:79:ee:2d:
         33:82:d4:27:1f:78:64:18:5d:20:73:0a:20:3b:f8:ec:63:c9:
         2f:66:e4:10:17:15:52:c8:02:93:64:9c:c0:ce:72:78:cd:a5:
         63:ed:e3:cf:05:d7:54:e9:8f:ab:56:d6:d8:a6:3e:59:f7:e3:
         62:c3:81:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----