Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20323030343534.roa
File:                     326130363a313238333a623030623a3a2f34382d3438203d3e20323030343534.roa (raw, json)
Hash identifier:          DcmfaFOukvUb854D4O7xv9SYZszOhn9+jUAQLvkFPbI=
Subject key identifier:   E0:B6:4A:34:CD:3A:BB:0E:14:DD:9D:73:A9:8B:19:9E:69:3D:5C:61
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       1031FD3FB1FB3AD3C43604B547289E51350AAE94
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20323030343534.roa
Signing time:             Sun 12 Nov 2023 20:52:00 +0000
ROA not before:           Sun 12 Nov 2023 20:47:00 +0000
ROA not after:            Sun 10 Nov 2024 20:52:00 +0000
asID:                     200454
IP address blocks:        2a06:1283:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:31:fd:3f:b1:fb:3a:d3:c4:36:04:b5:47:28:9e:51:35:0a:ae:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Nov 12 20:47:00 2023 GMT
            Not After : Nov 10 20:52:00 2024 GMT
        Subject: CN=E0B64A34CD3ABB0E14DD9D73A98B199E693D5C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:26:6b:cd:46:a8:f7:79:59:2e:e4:b5:39:49:
                    11:20:bc:b8:ea:81:38:fd:7a:eb:3d:b2:5a:6f:44:
                    2d:ef:3f:29:e0:e7:e4:63:60:32:75:e9:a1:d7:24:
                    c8:e8:f7:7f:14:51:ee:d3:21:5f:19:d1:d2:77:32:
                    65:3a:d7:92:9b:dc:fa:83:db:13:66:fd:3b:9e:81:
                    fe:f1:eb:21:54:b3:fb:50:88:9d:45:c3:d2:b3:42:
                    76:59:3b:83:d4:05:e6:b9:b9:fc:44:bf:cb:45:d6:
                    f5:61:dc:4c:39:77:41:ba:06:99:ce:e2:01:b9:a8:
                    49:02:c5:c5:6a:9b:69:44:41:20:5b:a9:1a:8a:07:
                    bb:23:b9:78:1b:00:e9:cb:a0:d6:7e:72:59:6b:65:
                    7c:e2:d8:bb:7d:c2:9a:60:b8:1e:e8:7f:ca:19:80:
                    3f:ba:f2:dd:d4:72:af:d7:e8:b4:6c:83:98:f5:e6:
                    24:aa:66:5b:1d:e8:b9:c8:b6:1e:c2:76:d0:e0:63:
                    3b:92:8b:05:93:fc:99:34:4c:00:b2:a2:c9:fc:08:
                    33:a9:84:25:f9:95:5e:ce:3d:a2:b9:c8:ab:a1:db:
                    48:9f:4e:91:21:7b:c1:1a:df:25:9e:c5:fc:e3:17:
                    7a:3d:23:a3:79:64:04:39:1d:d8:32:9a:11:03:2f:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B6:4A:34:CD:3A:BB:0E:14:DD:9D:73:A9:8B:19:9E:69:3D:5C:61
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:05:62:3f:98:90:7e:72:fc:a4:d8:f6:b0:00:a3:79:3d:1b:
         33:2a:81:e9:47:7f:4f:88:95:2b:5f:3d:9f:12:f4:6b:0d:cb:
         7a:d8:63:72:68:8a:ae:82:af:89:7b:b7:c7:86:f3:b6:2f:ee:
         ec:b2:46:a5:f1:df:ee:94:98:7c:97:91:00:a8:fa:24:66:9f:
         56:66:78:71:b2:50:80:2e:e8:1a:77:cd:9f:2d:bb:be:ff:08:
         27:c2:8e:fa:4f:5a:cb:59:8c:fa:50:f5:9b:5b:49:1e:51:bf:
         95:38:d8:09:37:d3:5c:1e:20:db:06:b2:6b:2f:69:28:52:c4:
         4d:0e:98:43:7a:79:3b:a2:71:72:50:e7:e3:84:0b:ca:eb:51:
         47:98:dd:fa:a1:cc:a1:b4:cb:3f:b2:e9:f5:8c:fd:fd:66:42:
         9e:e6:92:ae:3d:f2:01:48:37:d2:ad:4a:8b:cb:91:bc:8c:a4:
         04:5b:4a:c4:81:c8:63:3b:65:f5:7e:26:8e:b5:4c:9d:70:e3:
         15:22:75:b2:d5:9e:23:a4:76:d0:40:24:c6:f5:90:85:2f:dc:
         03:a5:7d:06:2c:06:16:ef:2d:10:c2:fd:e8:c8:ec:ef:61:37:
         4e:df:93:04:65:51:8e:cd:ca:ba:05:48:1e:be:73:c4:56:29:
         29:8b:96:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----