Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623330303a3a2f34302d3438203d3e20323136323930.roa
File:                     326130363a313238333a623330303a3a2f34302d3438203d3e20323136323930.roa (raw, json)
Hash identifier:          1dwuFmKTEFfwnJFd6N02IKBrGA9k+d4PjOg2UP5712I=
Subject key identifier:   47:91:1B:F7:08:CB:A6:7B:4A:E1:22:F7:82:D4:AE:BA:06:58:62:29
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       55CCC24C4FCA6A230DAA3525B4B527BE6951D8B5
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623330303a3a2f34302d3438203d3e20323136323930.roa
Signing time:             Mon 13 Nov 2023 19:16:24 +0000
ROA not before:           Mon 13 Nov 2023 19:11:24 +0000
ROA not after:            Mon 11 Nov 2024 19:16:24 +0000
asID:                     216290
IP address blocks:        2a06:1283:b300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:cc:c2:4c:4f:ca:6a:23:0d:aa:35:25:b4:b5:27:be:69:51:d8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Nov 13 19:11:24 2023 GMT
            Not After : Nov 11 19:16:24 2024 GMT
        Subject: CN=47911BF708CBA67B4AE122F782D4AEBA06586229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:68:81:22:2c:9c:47:eb:02:84:b3:0c:93:f3:
                    3f:a6:3d:e8:da:b7:49:11:e5:94:75:d6:91:00:7a:
                    85:9c:2b:36:59:0e:57:df:0d:df:3b:9d:17:f6:fc:
                    05:0e:45:50:7e:38:1c:54:1d:a6:ee:36:fa:7c:dd:
                    21:fb:f7:18:52:f7:92:44:18:5a:83:5e:99:ee:0c:
                    1d:aa:f1:f8:9c:8d:57:e1:0b:c5:cb:0f:7f:37:33:
                    5a:1c:6d:ff:bc:fa:cc:40:2f:62:17:cf:30:11:21:
                    62:50:1b:03:af:4e:12:06:b0:d1:e0:a3:7b:c7:e0:
                    3f:9d:b4:f4:17:92:5c:d7:8b:14:a7:27:01:a5:69:
                    ea:6f:84:49:2c:f3:da:46:75:54:0a:86:1a:3d:f6:
                    72:79:67:90:81:dc:12:61:32:c0:aa:4d:09:ca:19:
                    48:a4:7d:57:56:a8:71:32:d8:ae:d6:39:87:14:56:
                    0b:1b:6e:9c:a2:1d:b2:cf:fc:1d:d5:e1:3b:46:4f:
                    4f:49:0f:3c:cb:18:98:51:7e:25:2a:60:8a:f9:36:
                    55:b3:3b:72:c9:a2:a9:9d:11:0d:d9:4b:5a:d0:3f:
                    77:05:67:5c:48:74:22:d7:25:ae:0e:a2:7a:76:fa:
                    48:4d:ae:13:a8:9e:e9:c7:1e:87:5f:b3:2a:1b:83:
                    28:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:91:1B:F7:08:CB:A6:7B:4A:E1:22:F7:82:D4:AE:BA:06:58:62:29
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623330303a3a2f34302d3438203d3e20323136323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b300::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:4f:12:52:4b:a9:ba:04:bb:86:e8:41:c9:14:f1:77:8a:eb:
         bd:47:85:d3:cf:e1:db:32:49:e1:ea:e7:bc:9f:e2:65:40:c9:
         dd:cf:1c:49:03:a6:db:4e:90:cb:63:20:07:ad:1b:61:7a:3a:
         9a:38:f2:f2:25:f3:de:02:a5:6b:52:7e:b3:3f:19:4d:30:ef:
         0d:08:4a:76:98:a6:99:20:bd:b1:28:0a:bb:44:fd:b0:9b:0a:
         d0:9a:ae:c1:81:22:52:ba:10:4a:0f:d6:84:ff:a4:ab:ff:15:
         5f:82:e5:55:69:37:af:84:99:16:71:30:b6:c2:7c:38:3d:20:
         4c:c8:ce:c8:ee:43:31:80:27:63:45:e5:88:50:4f:aa:61:d5:
         11:51:9d:9e:26:b2:82:95:2a:47:b6:5d:9a:e7:a3:c8:b3:c8:
         5f:eb:a4:bf:d9:7c:60:e3:a4:a4:4c:48:f5:d6:75:84:28:cc:
         c6:40:1f:91:46:03:db:26:b3:f1:23:15:47:27:12:2a:a2:8c:
         d3:5f:ba:60:e3:18:1e:b6:30:06:5e:c9:af:95:27:b6:8b:75:
         4d:c6:89:2e:1f:f1:65:0e:df:59:3a:2d:14:e5:61:a9:4a:e6:
         2c:d9:5d:57:22:14:e0:bc:94:90:28:90:b4:db:7e:f4:0b:f0:
         f3:f2:83:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----