Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623530303a3a2f34302d3438203d3e20323135363439.roa
File:                     326130363a313238333a623530303a3a2f34302d3438203d3e20323135363439.roa (raw, json)
Hash identifier:          NwjrMNcYHrp684QYtobtPiQ2xslZOhzXJCkHvoHeNdY=
Subject key identifier:   9F:6E:7F:AC:C3:F8:31:4D:D1:BB:8D:9D:52:D3:31:CB:33:B3:09:59
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       362FBE8095BA07FE5EEC0B541CFA0923050C8FF5
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623530303a3a2f34302d3438203d3e20323135363439.roa
Signing time:             Wed 24 Jan 2024 18:14:26 +0000
ROA not before:           Wed 24 Jan 2024 18:09:26 +0000
ROA not after:            Wed 22 Jan 2025 18:14:26 +0000
asID:                     215649
IP address blocks:        2a06:1283:b500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2f:be:80:95:ba:07:fe:5e:ec:0b:54:1c:fa:09:23:05:0c:8f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Jan 24 18:09:26 2024 GMT
            Not After : Jan 22 18:14:26 2025 GMT
        Subject: CN=9F6E7FACC3F8314DD1BB8D9D52D331CB33B30959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:27:6a:2d:04:bb:9d:b0:cc:33:6e:30:e8:
                    c9:2f:1a:9d:0a:d0:bf:45:03:3b:d4:9f:d9:e0:e9:
                    c3:5c:6e:3b:68:80:30:5e:a3:8e:a3:f1:f3:af:d8:
                    b9:e8:47:ca:ee:46:3f:d5:2d:83:53:8b:86:b4:72:
                    ee:a1:24:58:71:1e:a8:f0:3e:0b:05:f1:bd:61:7d:
                    05:4e:f4:43:5c:3a:f2:42:ed:cf:19:1c:dc:7f:d7:
                    8f:62:8f:1d:b1:9c:3d:18:1f:16:af:aa:99:ae:72:
                    2e:e3:7c:ec:1e:bb:b3:5d:a3:b6:a1:ca:a5:b0:0d:
                    d3:80:78:ec:96:e4:89:4d:6e:99:cd:80:d1:b2:62:
                    09:ae:38:13:b9:b9:6f:50:80:d9:68:5a:a4:91:9e:
                    5d:dd:3e:15:72:18:57:99:53:94:9a:07:9e:7f:db:
                    58:81:67:ad:36:a6:ab:81:e2:01:d5:83:92:93:a3:
                    b9:40:9a:dc:b6:59:72:c2:64:96:4d:9f:a4:f4:4b:
                    28:e9:87:77:c0:0b:d2:05:d4:ff:00:26:b2:e1:62:
                    68:b9:4a:3c:1e:39:42:fd:cb:ab:11:ed:41:42:a5:
                    bc:e3:c5:34:08:68:96:ac:61:69:be:c7:25:a4:38:
                    07:81:cf:96:68:3f:d4:8b:73:05:c1:5b:aa:ad:fa:
                    a8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6E:7F:AC:C3:F8:31:4D:D1:BB:8D:9D:52:D3:31:CB:33:B3:09:59
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623530303a3a2f34302d3438203d3e20323135363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b500::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:8e:c4:1d:a5:20:f4:a4:0f:16:42:97:3c:c4:55:24:21:92:
         34:38:38:5a:43:f0:f3:e1:f3:bf:41:78:4a:ed:d7:e7:fa:2b:
         82:53:ec:17:1b:8f:b2:c3:13:3a:10:6f:09:5e:34:40:70:6d:
         f3:d3:a1:42:2d:97:ef:dd:d6:a0:a1:31:aa:4e:1e:9e:53:11:
         ad:79:2f:95:7d:bb:92:b1:b2:13:a5:94:28:cc:d9:ff:ff:c1:
         97:e4:5e:1a:f3:a7:98:b8:e7:47:06:a0:d1:70:a3:33:c8:04:
         49:a4:4e:d5:3d:18:f1:d8:a7:6f:de:41:d0:44:79:23:bc:e9:
         34:eb:0b:94:de:96:4c:34:29:8e:c3:88:fe:89:08:a9:43:fe:
         01:5e:0b:27:3f:14:8e:76:87:c5:81:24:5f:9f:f6:bb:ab:f2:
         ed:6c:dd:a3:c7:5b:e7:89:2a:83:e6:73:68:23:99:e3:f0:6d:
         6a:b8:7f:16:6d:7f:b0:3a:ec:c8:f7:48:ef:c5:38:b2:cd:0a:
         95:1f:39:c7:b6:33:86:1d:8d:ed:46:c1:48:14:9f:e4:19:af:
         99:32:89:26:f4:4d:ff:55:05:4f:34:a2:0d:88:d2:8a:ec:dc:
         65:fc:7b:6c:69:50:9d:32:c2:3b:39:94:df:5e:45:06:3c:d0:
         d3:79:67:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----