Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633031303a3a2f34342d3438203d3e20323037323532.roa
File:                     326130363a313238333a633031303a3a2f34342d3438203d3e20323037323532.roa (raw, json)
Hash identifier:          oRn6rKbqiDEPsFVbbbrONPbnEsvs+CX+gC2Bnb7Db0Q=
Subject key identifier:   3D:D2:FF:5F:1F:66:82:5C:94:96:DE:C6:FA:0F:74:8C:CC:AA:B8:9B
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       51B471D66A82EFDC781DC744199A81A8FCAC1A7F
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633031303a3a2f34342d3438203d3e20323037323532.roa
Signing time:             Tue 14 Nov 2023 16:46:26 +0000
ROA not before:           Tue 14 Nov 2023 16:41:26 +0000
ROA not after:            Tue 12 Nov 2024 16:46:26 +0000
asID:                     207252
IP address blocks:        2a06:1283:c010::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b4:71:d6:6a:82:ef:dc:78:1d:c7:44:19:9a:81:a8:fc:ac:1a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Nov 14 16:41:26 2023 GMT
            Not After : Nov 12 16:46:26 2024 GMT
        Subject: CN=3DD2FF5F1F66825C9496DEC6FA0F748CCCAAB89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:65:e8:d9:a9:58:9c:20:82:e8:27:4d:77:
                    70:08:82:35:13:f9:4d:63:11:0f:76:af:9c:1b:1d:
                    2b:57:50:58:0f:e0:e6:7e:27:49:26:98:e0:1a:5b:
                    5c:8e:ac:4a:c1:92:83:99:f9:71:93:28:48:7b:7a:
                    81:ec:f8:26:0b:56:45:cb:80:7d:fc:e7:3b:2d:2a:
                    c0:87:53:b8:fa:66:be:1b:a6:a9:f2:03:f4:67:11:
                    61:b6:54:9d:dd:4b:fe:00:8f:db:b4:e3:74:b7:73:
                    f0:ee:fd:8d:4e:d8:f0:78:be:de:90:2d:3f:aa:75:
                    af:b3:a2:d2:8f:58:b2:65:f2:9e:26:fc:6b:10:1c:
                    57:4c:43:8d:05:f9:84:ef:ac:b5:89:09:d6:0b:8c:
                    d0:31:e1:d4:86:12:d1:5b:d7:af:be:29:55:f3:4e:
                    69:8d:8f:95:c2:27:9c:bc:f6:40:b0:5b:cd:af:c6:
                    b5:16:91:ec:be:c2:4f:fd:84:0c:25:33:36:67:07:
                    18:be:07:7e:e2:c3:25:8e:32:cd:fd:1d:59:0c:41:
                    52:59:c9:f0:68:19:75:95:8d:aa:6c:59:66:b6:0b:
                    e6:94:95:7a:43:10:0b:ad:b9:dc:81:50:af:1d:6e:
                    40:6a:58:44:1c:fe:f7:98:ee:30:ba:14:d2:7a:1b:
                    01:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D2:FF:5F:1F:66:82:5C:94:96:DE:C6:FA:0F:74:8C:CC:AA:B8:9B
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633031303a3a2f34342d3438203d3e20323037323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c010::/44

    Signature Algorithm: sha256WithRSAEncryption
         67:fb:b4:14:93:ca:21:90:a2:b9:06:1d:7b:c2:00:83:b3:7d:
         bd:71:07:da:1d:4a:b8:54:d7:1b:ca:f8:4a:d5:2e:0f:83:d0:
         29:e8:bc:16:2e:30:83:56:0f:a3:f4:03:02:a1:cd:7a:cf:e0:
         9a:d4:6e:03:bb:0f:d4:ca:87:c0:d1:fe:7f:73:45:08:f0:0f:
         ca:80:7e:c8:b6:f8:cd:f9:1c:25:f5:91:87:46:54:0f:08:00:
         f8:ac:f2:ed:bf:e5:d6:f3:ce:a9:89:df:76:78:8f:7d:81:27:
         05:77:37:d8:f3:70:7e:97:33:c6:ab:79:b5:6f:1f:36:57:b0:
         35:bb:db:bd:20:d9:d4:b5:43:bf:dc:9c:41:9f:b4:68:62:02:
         6c:f7:fa:b8:bd:ea:a3:60:5a:92:dc:48:b8:3e:8d:e4:ae:ff:
         31:f1:7a:b7:f2:d9:c0:10:87:ae:e4:d0:bd:05:3d:6a:fd:8d:
         88:57:e6:9f:bd:6a:d9:4c:a5:39:a9:cf:d3:56:6b:99:e7:b0:
         27:9a:cc:23:86:0a:e8:04:6e:4f:a9:33:18:18:04:6c:c4:5d:
         6c:75:88:a7:1f:2d:5e:50:a8:a5:06:c7:c0:23:f1:ef:de:7b:
         be:3d:1d:73:55:bd:71:06:6f:69:c1:f8:da:c3:f4:87:55:63:
         c1:57:a5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----