Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e203437323732.roa
File:                     326130363a313238333a623030623a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          1XtU6zOAHBCGqk1uzmHZocDEpZZvyNUHC1Q0ur3Nh3w=
Subject key identifier:   90:56:D1:5F:20:F3:EB:34:89:1A:1E:FE:87:34:96:C9:4D:6F:57:22
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       13A182F380F3AD1DD256095691AB0C74C4773A9A
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 12 Nov 2023 20:45:01 +0000
ROA not before:           Sun 12 Nov 2023 20:40:01 +0000
ROA not after:            Sun 10 Nov 2024 20:45:01 +0000
asID:                     47272
IP address blocks:        2a06:1283:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a1:82:f3:80:f3:ad:1d:d2:56:09:56:91:ab:0c:74:c4:77:3a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Nov 12 20:40:01 2023 GMT
            Not After : Nov 10 20:45:01 2024 GMT
        Subject: CN=9056D15F20F3EB34891A1EFE873496C94D6F5722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:8c:4d:07:95:42:31:0d:90:95:80:c1:fa:
                    fd:92:9d:f0:31:64:eb:db:6f:8f:a7:89:79:c1:88:
                    be:a9:b8:8d:3e:68:e7:ae:bc:6a:76:36:7d:89:a1:
                    20:f7:4f:77:de:37:2e:39:21:e6:88:77:a6:75:17:
                    27:c2:df:6f:cd:02:70:05:3a:9f:be:7d:aa:7c:e8:
                    0f:2a:f2:0d:52:2a:ee:00:73:ec:f5:d3:bd:88:58:
                    e2:f9:1f:82:07:aa:83:8b:50:87:29:c1:78:b1:e2:
                    44:58:5e:62:19:af:01:2d:3b:82:e3:de:8a:25:31:
                    bb:b6:24:81:e2:75:be:b7:29:8d:88:57:b5:54:06:
                    de:34:0f:01:fd:bd:c2:94:ba:86:c7:8d:01:72:5d:
                    1b:8b:a2:7b:e4:0b:de:ad:5c:c0:08:da:eb:00:0e:
                    f5:80:1c:1d:d6:a3:27:41:fe:6f:aa:34:82:da:d2:
                    91:6a:aa:af:54:ea:a7:0e:50:f8:1f:64:c5:56:1e:
                    8d:89:28:0a:21:17:3e:64:5c:fc:04:ea:16:f1:1b:
                    a6:a0:3f:56:24:bb:eb:cb:ef:09:9c:6c:42:f1:63:
                    6d:98:87:12:bf:23:c6:98:c1:c5:44:78:b0:01:17:
                    ab:10:6b:af:77:9d:99:28:85:82:09:af:fd:15:19:
                    58:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:56:D1:5F:20:F3:EB:34:89:1A:1E:FE:87:34:96:C9:4D:6F:57:22
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:d9:3b:c8:81:b5:2f:0f:60:44:df:d4:51:8b:ac:d5:4c:87:
         76:6f:b2:ed:e0:e2:ee:1a:73:0b:3f:00:48:42:d7:17:1c:58:
         bc:a1:76:4e:2f:65:a3:cc:25:5d:c0:99:6a:42:df:b4:93:2a:
         63:fd:50:a1:9f:7f:7b:a7:6a:37:35:a6:99:c4:de:49:b8:1c:
         28:6d:a7:ee:58:c4:b0:a2:7e:02:32:b3:b2:9b:93:75:8e:07:
         ab:bf:f0:95:4d:36:92:7a:0f:f2:ce:8a:0a:cc:22:9a:02:ab:
         70:e6:3c:6c:f6:5f:16:88:f9:e3:db:38:fa:ff:b5:f5:55:ba:
         a9:56:12:fa:47:26:2a:86:f9:ec:10:ae:35:13:79:9b:4e:00:
         83:77:33:48:b1:1d:4a:de:1c:c1:c4:89:32:ca:15:e1:a6:a8:
         60:61:e9:19:19:3c:60:82:6e:a9:67:1a:49:f7:20:92:ae:0f:
         81:e0:84:f3:c8:63:0f:db:56:01:68:12:66:55:8c:ae:52:c9:
         04:f2:ee:a9:b8:87:4b:bf:b5:c2:04:6d:28:81:46:e8:4b:26:
         4e:32:0a:de:b6:0f:4f:02:cc:d1:5f:de:48:cd:4a:8e:35:e4:
         85:0d:34:51:ca:bb:7b:86:4f:7e:a7:f8:21:ed:36:91:d0:c8:
         fb:76:47:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----