Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623135303a3a2f34342d3434203d3e20323136303532.roa
File:                     326130363a313238333a623135303a3a2f34342d3434203d3e20323136303532.roa (raw, json)
Hash identifier:          gXaSjONRvdakmvZ1zKd0+vAgWvSPxoECeq33x06QHpc=
Subject key identifier:   E3:21:39:9D:EC:F6:BC:75:82:B4:07:74:24:1F:11:9D:57:D0:73:62
Certificate issuer:       /CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
Certificate serial:       0939C79C2C5B28DEBA23652F30DFC4801C1FED51
Authority key identifier: 72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623135303a3a2f34342d3434203d3e20323136303532.roa
Signing time:             Sun 28 Apr 2024 20:22:13 +0000
ROA not before:           Sun 28 Apr 2024 20:17:13 +0000
ROA not after:            Sun 27 Apr 2025 20:22:13 +0000
asID:                     216052
IP address blocks:        2a06:1283:b150::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:39:c7:9c:2c:5b:28:de:ba:23:65:2f:30:df:c4:80:1c:1f:ed:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
        Validity
            Not Before: Apr 28 20:17:13 2024 GMT
            Not After : Apr 27 20:22:13 2025 GMT
        Subject: CN=E321399DECF6BC7582B40774241F119D57D07362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:4b:da:36:47:4b:e6:1f:6a:be:33:ed:cf:
                    85:ba:c8:0a:77:81:e8:27:23:df:02:68:ed:15:dc:
                    cd:d3:45:d7:07:17:56:4b:5c:3b:a1:5d:bc:40:c8:
                    64:66:07:9f:3d:1f:16:8e:ea:74:de:f0:df:8a:26:
                    7c:9b:53:fe:b6:a4:01:6e:f7:9a:6a:8c:0e:85:f2:
                    ab:fb:fb:ab:71:33:19:bd:1f:c8:64:8b:45:3f:d0:
                    6c:5a:f0:3e:87:e0:0c:3e:a5:f8:c0:f1:5f:64:f0:
                    4d:62:6e:b0:e4:80:18:ac:5f:22:e6:cd:cb:da:0a:
                    5e:ce:58:58:c6:a0:50:a4:41:66:36:35:f8:9d:10:
                    fc:d4:3c:3e:38:61:6e:6c:b3:0a:2e:b2:a6:c3:6f:
                    5d:16:00:61:02:f7:21:f0:4b:4d:c1:3d:c4:dc:ba:
                    c6:80:82:c8:1d:8b:f3:1f:7b:87:8d:a4:b8:95:0c:
                    55:e8:21:d6:64:6a:56:d9:3b:f6:e2:2b:f0:25:cc:
                    7c:6f:6c:5b:f2:66:70:f1:3b:c1:87:ca:ff:f9:bb:
                    27:8a:06:8f:5e:26:83:96:cb:ed:db:e8:b1:c5:b3:
                    a6:0c:84:70:e3:8a:ce:bd:db:29:f8:d7:d6:4f:49:
                    86:8c:e8:30:b2:6d:2b:44:91:e8:b6:19:a1:90:2e:
                    f3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:21:39:9D:EC:F6:BC:75:82:B4:07:74:24:1F:11:9D:57:D0:73:62
            X509v3 Authority Key Identifier:
                keyid:72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623135303a3a2f34342d3434203d3e20323136303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b150::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:72:5c:15:c8:77:51:48:8d:f4:94:a3:f6:a6:48:8c:81:c6:
         22:74:63:27:34:e3:5c:f1:9c:d9:90:a4:6d:62:62:b4:ef:3e:
         a7:c0:d0:f5:01:8f:d0:91:64:7d:8e:6f:78:e7:6b:da:a5:bc:
         54:fc:b6:6e:66:65:b4:fa:51:ad:f7:6b:67:3c:e4:1f:7b:6f:
         cc:a4:64:17:4d:5c:78:28:10:f0:77:c1:94:e1:9e:d5:14:98:
         0c:e0:31:6b:87:c1:06:60:8b:a7:fa:93:ac:49:5f:0d:02:a3:
         c3:af:98:b4:80:ff:72:a2:ee:d2:bf:1d:92:a6:00:b5:d5:98:
         1f:09:d6:96:7a:ad:2d:ec:ab:9b:b9:53:df:28:2f:28:ae:da:
         ec:c2:37:0f:02:b2:52:0f:47:c9:47:a0:f2:e3:d0:8f:2a:01:
         28:a8:8c:27:d8:fb:22:c2:8a:62:1c:1a:48:07:68:ee:6e:f3:
         b8:62:ff:2f:e3:4a:cf:16:0c:2f:28:d3:3f:76:c3:32:9a:e5:
         05:2f:59:37:18:0d:57:a8:0e:61:d3:76:92:9b:b9:03:14:fd:
         10:df:52:4f:4c:7e:f4:c8:34:31:8a:0b:d7:83:8b:d2:79:41:
         13:f5:dd:e6:36:a0:de:7b:08:b0:54:54:7e:2a:0f:48:aa:a4:
         9e:64:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----