Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633062303a3a2f34342d3434203d3e20323135363134.roa
File:                     326130363a313238333a633062303a3a2f34342d3434203d3e20323135363134.roa (raw, json)
Hash identifier:          0Ilf2Mj+Pz59mOIiBARdhrENe+uBjSlzf54xxnJ5s+g=
Subject key identifier:   57:90:F0:63:80:7F:B0:9C:DF:85:94:E0:5E:C8:08:33:EE:09:BD:E9
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       5AA73CBE00419245B1F617B8735361791F451870
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633062303a3a2f34342d3434203d3e20323135363134.roa
Signing time:             Sun 21 Apr 2024 18:59:22 +0000
ROA not before:           Sun 21 Apr 2024 18:54:22 +0000
ROA not after:            Sun 20 Apr 2025 18:59:22 +0000
asID:                     215614
IP address blocks:        2a06:1283:c0b0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a7:3c:be:00:41:92:45:b1:f6:17:b8:73:53:61:79:1f:45:18:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Apr 21 18:54:22 2024 GMT
            Not After : Apr 20 18:59:22 2025 GMT
        Subject: CN=5790F063807FB09CDF8594E05EC80833EE09BDE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c7:01:c4:cd:b2:10:36:00:23:1a:76:7d:1f:
                    18:1b:ff:0b:eb:7c:0f:0e:80:02:39:b2:d7:4f:9e:
                    f3:57:e5:66:4e:01:06:2e:34:51:34:fd:06:01:81:
                    8e:6a:aa:a4:3a:5b:ec:06:2b:d0:2d:4f:68:fb:95:
                    50:18:88:94:aa:ae:56:75:f1:85:91:6a:71:42:dd:
                    41:fe:63:a0:51:d2:25:f8:7e:c5:7f:88:be:c9:43:
                    9e:13:d3:89:bd:5e:78:9d:34:d0:2e:ce:2b:e7:72:
                    9a:b3:46:b0:27:a5:61:10:40:05:ea:7f:28:66:51:
                    f1:a8:15:5a:10:62:a3:cc:a4:47:7c:ac:5c:53:4e:
                    94:55:cf:d4:39:00:62:37:bd:73:ab:67:de:44:91:
                    0a:a3:34:55:ed:c5:c6:04:9d:c9:04:7c:26:57:6c:
                    c2:86:19:5b:dd:7b:75:90:a7:3f:14:1c:35:98:36:
                    cd:97:8b:42:43:f7:00:65:e7:7e:13:35:70:2d:91:
                    d3:aa:f1:d5:31:3a:1f:9e:0f:bb:76:62:ee:7a:6e:
                    16:a9:1c:55:4b:32:72:37:db:2c:ca:08:af:46:82:
                    e9:9d:94:3d:8b:22:38:14:fb:7c:43:e4:45:90:6d:
                    e6:c5:18:58:d0:5b:27:1d:dc:fc:dd:a2:2f:fc:49:
                    3c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:90:F0:63:80:7F:B0:9C:DF:85:94:E0:5E:C8:08:33:EE:09:BD:E9
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633062303a3a2f34342d3434203d3e20323135363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c0b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:8c:33:2b:5c:86:75:96:5f:b5:7a:56:c3:cb:c2:14:0c:09:
         55:10:d2:c3:6a:25:9d:8e:78:a0:00:c2:b3:4d:74:3b:d5:ed:
         7d:8f:67:3b:00:db:f9:d0:94:e3:5b:46:0d:f2:28:4f:5b:2b:
         60:3f:d1:60:e0:0a:2c:d5:79:ca:c8:91:af:d3:29:b7:44:d9:
         63:99:b1:f3:f0:ff:5a:7f:2d:cb:f7:52:22:3c:b1:7e:d0:f5:
         b0:40:bc:ae:6e:9c:91:b3:57:eb:b1:93:8f:93:66:dd:55:df:
         0c:1a:40:ac:fd:ba:2e:3f:97:cf:ca:22:c5:fd:88:97:cb:2e:
         b0:e8:c9:94:1e:a0:d3:46:fd:be:8b:8d:cb:54:09:f3:90:54:
         87:b1:8d:7e:2b:c2:93:62:8a:3f:e7:1d:9d:d1:00:ba:ad:77:
         78:ef:09:16:40:72:b4:15:78:a2:d9:a1:1d:b8:9b:c0:de:9d:
         2f:11:de:ea:e3:0a:5e:80:10:58:7f:9e:53:f1:31:23:13:3e:
         1b:32:be:1b:a0:d9:5c:7c:c9:25:22:65:92:4e:c3:eb:66:cc:
         13:7b:b7:7e:1b:35:aa:2a:46:75:23:4c:8a:46:1e:da:06:d8:
         aa:30:19:87:d7:84:c2:94:53:b1:58:6d:14:90:2a:14:14:73:
         e5:9b:79:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----