Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/2/3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa
File:                     3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa (raw, json)
Hash identifier:          d0rdazPqMZ+ChX8iV0l2atzT72PDkCv0cNNLfxEzG00=
Subject key identifier:   A9:40:FD:32:DE:69:BD:6A:B7:76:64:7D:56:76:A7:EB:C4:2C:DD:16
Certificate issuer:       /CN=6C6053697962B9CC704C022D9795D07E54358C1D
Certificate serial:       1A298AF3204C923B2D17D59F217EDA4D5524A3F7
Authority key identifier: 6C:60:53:69:79:62:B9:CC:70:4C:02:2D:97:95:D0:7E:54:35:8C:1D
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/6C6053697962B9CC704C022D9795D07E54358C1D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/2/3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa
Signing time:             Mon 17 Jul 2023 20:39:39 +0000
ROA not before:           Mon 17 Jul 2023 20:34:39 +0000
ROA not after:            Mon 15 Jul 2024 20:39:39 +0000
asID:                     199751
IP address blocks:        128.254.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:29:8a:f3:20:4c:92:3b:2d:17:d5:9f:21:7e:da:4d:55:24:a3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C6053697962B9CC704C022D9795D07E54358C1D
        Validity
            Not Before: Jul 17 20:34:39 2023 GMT
            Not After : Jul 15 20:39:39 2024 GMT
        Subject: CN=A940FD32DE69BD6AB776647D5676A7EBC42CDD16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:66:b9:7a:02:24:89:64:96:87:3b:25:68:
                    76:3a:bf:e8:76:0c:18:bd:fc:e1:e7:9a:4e:10:d0:
                    ca:0c:5d:67:f0:39:9e:b5:33:a5:5a:ca:3b:6b:5d:
                    74:be:65:55:9c:9f:96:43:93:3f:8b:3f:b5:60:2e:
                    59:91:d9:13:58:12:21:8e:27:53:2e:fd:95:f1:00:
                    72:66:18:49:27:2b:2d:ab:9f:e5:98:49:9d:48:83:
                    d4:37:e9:6d:f6:87:54:a9:b1:03:e3:27:41:5e:82:
                    29:8b:39:35:e1:db:8b:a0:b5:81:74:0f:5d:00:ac:
                    34:5f:d3:1b:47:b8:43:d2:a9:32:e6:35:dd:94:a9:
                    91:3a:04:c7:fa:ec:4c:ff:49:eb:09:af:92:36:82:
                    e9:c8:7c:3a:82:d9:1c:52:d6:60:d7:c5:67:19:b8:
                    f4:ed:87:39:5b:f3:e7:91:0f:39:03:4a:b0:60:bf:
                    50:63:86:07:04:02:b5:93:4f:39:df:e7:4f:5d:82:
                    15:77:cb:23:54:93:fe:51:d7:31:8a:80:5c:5e:e3:
                    cc:c8:41:28:2f:7a:df:e9:b8:8b:f1:c3:0a:ca:a5:
                    7d:b9:c7:9e:21:80:ae:1e:1b:27:99:90:0f:45:05:
                    89:f0:65:20:68:31:79:77:ec:48:02:b8:62:54:5a:
                    47:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:40:FD:32:DE:69:BD:6A:B7:76:64:7D:56:76:A7:EB:C4:2C:DD:16
            X509v3 Authority Key Identifier:
                keyid:6C:60:53:69:79:62:B9:CC:70:4C:02:2D:97:95:D0:7E:54:35:8C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/2/6C6053697962B9CC704C022D9795D07E54358C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/6C6053697962B9CC704C022D9795D07E54358C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/2/3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:b6:5c:35:71:df:b5:9c:00:33:ad:3f:7d:ed:25:e5:52:e9:
         fa:f6:91:cd:3a:cf:58:ad:2d:5c:38:2b:3a:0f:0d:20:d3:f5:
         1d:05:38:9e:53:31:b0:53:a7:e2:6d:4d:90:f6:5c:ec:d8:48:
         4b:c2:8e:81:99:e4:29:97:f3:04:0e:91:0c:bb:77:cf:60:a2:
         d6:ea:06:ae:52:9f:e1:e0:d3:ed:d8:eb:7d:09:78:d0:eb:40:
         ec:66:d4:a9:97:db:b6:b6:49:19:14:2d:e8:e8:86:9c:0c:c0:
         36:e9:90:0e:7f:5f:34:5a:f6:da:19:b2:c8:0b:a7:b3:19:66:
         b3:a2:b0:a7:66:c9:06:41:0c:dc:06:87:e9:cf:e2:d8:d4:78:
         99:30:51:b0:d7:1f:7c:4e:ef:f1:6c:0c:4e:fc:f1:c3:80:a0:
         57:f1:0e:94:22:c4:ff:80:c1:d3:16:cd:3d:95:76:75:bd:ab:
         cc:80:c6:1f:51:7e:ec:0f:74:84:d5:23:c3:19:21:7a:9f:17:
         2e:d0:ac:68:8a:7a:80:3e:0e:d7:5f:63:8c:5d:17:a4:6c:97:
         f7:dd:ea:db:54:e6:e1:0c:f7:5f:ff:c6:8b:8a:5b:f5:55:52:
         1e:50:6c:9f:89:03:a8:53:ec:9b:59:0f:ed:58:70:aa:8d:c3:
         63:bd:83:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----