Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633034303a3a2f34342d3438203d3e20323037323532.roa
File:                     326130363a313238333a633034303a3a2f34342d3438203d3e20323037323532.roa (raw, json)
Hash identifier:          T2LEydZHIS3qPWFDlzG8Ln9d09PmFL1ItJZSIFqanMY=
Subject key identifier:   BF:37:3E:DF:0F:98:99:76:62:2E:33:31:E6:52:ED:8E:82:99:45:6B
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       5931F52E8A9BEB0B138CCD75044F3E71CE0169D8
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633034303a3a2f34342d3438203d3e20323037323532.roa
Signing time:             Tue 14 Nov 2023 16:57:38 +0000
ROA not before:           Tue 14 Nov 2023 16:52:38 +0000
ROA not after:            Tue 12 Nov 2024 16:57:38 +0000
asID:                     207252
IP address blocks:        2a06:1283:c040::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:31:f5:2e:8a:9b:eb:0b:13:8c:cd:75:04:4f:3e:71:ce:01:69:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Nov 14 16:52:38 2023 GMT
            Not After : Nov 12 16:57:38 2024 GMT
        Subject: CN=BF373EDF0F989976622E3331E652ED8E8299456B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:e9:f2:78:8f:60:2d:a9:ca:b1:1c:36:98:
                    16:8b:e8:a9:77:26:39:96:1a:cf:1a:11:1b:3f:31:
                    8a:6b:e9:c3:44:1e:30:95:86:a9:1a:ac:ff:3c:4f:
                    73:71:7e:ea:60:ee:41:55:61:0b:6a:75:63:52:d1:
                    d8:1e:7e:ab:37:8b:16:a3:25:3b:cc:36:5e:cb:e7:
                    aa:60:d5:ed:27:bf:65:40:7c:8a:a1:92:64:da:9c:
                    74:86:bc:30:a8:c5:5f:58:d6:b0:6e:e2:0a:8f:61:
                    57:52:e9:f2:a5:b2:bc:ff:c7:b7:75:fc:b1:7d:f9:
                    59:bb:86:45:96:ed:f7:24:bb:f6:9b:f3:b2:62:f9:
                    de:22:ba:e1:52:4c:4e:1c:9a:49:9c:69:4e:cd:42:
                    c9:9d:96:af:8c:6d:de:3d:fd:6c:0b:3f:43:fc:2e:
                    77:5b:29:fa:1a:1a:53:ac:11:73:5d:0d:84:b6:b6:
                    77:20:9d:f4:0e:14:94:3a:26:3a:05:1b:5b:68:b9:
                    cf:cb:87:99:92:55:a6:91:f5:51:f0:d3:a8:0e:07:
                    85:1c:d9:b6:1d:b1:dc:2e:40:46:bc:7c:36:6f:0a:
                    bc:f9:b7:24:5e:6d:18:7c:73:98:2b:1c:39:a1:c4:
                    af:c8:0b:64:a0:ce:01:36:dd:11:d2:b8:04:c3:a9:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:37:3E:DF:0F:98:99:76:62:2E:33:31:E6:52:ED:8E:82:99:45:6B
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633034303a3a2f34342d3438203d3e20323037323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c040::/44

    Signature Algorithm: sha256WithRSAEncryption
         8c:30:da:c6:e8:05:1b:c1:a3:5a:db:8e:7b:a9:3e:d3:4a:17:
         1a:cd:4e:d0:35:e6:e3:c5:88:d6:1b:e8:05:cc:ad:a1:37:54:
         77:a7:c2:eb:e5:7a:c1:5b:f2:f1:4d:d2:a1:3f:68:3b:6f:9a:
         58:58:83:59:23:b8:a8:d5:a5:0f:f1:59:fb:fd:0f:fd:c3:1f:
         dc:54:a9:f0:c4:07:a2:30:be:94:54:ff:74:46:71:10:17:42:
         3c:d5:6a:86:fb:98:06:98:4a:c5:03:21:01:02:10:4b:d2:9f:
         c1:4d:f4:42:fe:ac:e0:6c:3a:05:a7:e1:f3:a8:e8:49:b7:61:
         71:96:f8:2c:e9:1a:a8:bd:86:50:0f:a4:33:80:04:98:e7:e9:
         84:23:97:43:85:76:71:39:ab:e9:11:b3:7f:37:8b:a9:21:c9:
         c8:13:2b:27:06:51:ec:82:bc:29:a6:2d:bd:57:a4:36:4b:8e:
         b1:d4:04:92:2d:e8:1c:fa:71:46:ce:fa:8b:99:0a:57:43:0f:
         52:b3:93:92:2a:9b:84:1e:ee:2d:22:ec:08:c6:17:12:b9:8d:
         be:d1:85:31:f9:ee:c4:dc:2d:c9:b9:cc:b2:4f:b2:80:a2:f9:
         7a:b1:77:dd:f6:02:97:5f:a8:97:0c:5d:a8:6e:f0:cd:7a:54:
         37:0c:7c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----