Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a3230303a3a2f34302d3634203d3e203437323732.roa
File:                     326130613a363034343a3230303a3a2f34302d3634203d3e203437323732.roa (raw, json)
Hash identifier:          T7S0H9C2ySiZzRkVjkMZHSmP9CcKOIko4ZTvdzSbe0g=
Subject key identifier:   94:F1:98:17:F2:78:20:0D:AA:7E:9A:F7:CF:C8:13:1A:59:33:59:5B
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       05CE8E1F55CA32BA583AA7B87A65E02C3E381FF3
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a3230303a3a2f34302d3634203d3e203437323732.roa
Signing time:             Tue 14 Nov 2023 11:55:03 +0000
ROA not before:           Tue 14 Nov 2023 11:50:03 +0000
ROA not after:            Tue 12 Nov 2024 11:55:03 +0000
asID:                     47272
IP address blocks:        2a0a:6044:200::/40 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ce:8e:1f:55:ca:32:ba:58:3a:a7:b8:7a:65:e0:2c:3e:38:1f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 14 11:50:03 2023 GMT
            Not After : Nov 12 11:55:03 2024 GMT
        Subject: CN=94F19817F278200DAA7E9AF7CFC8131A5933595B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:11:92:77:65:19:f5:3f:51:d0:70:cc:bc:8d:
                    3e:49:c4:3e:2b:fc:f0:a6:c4:0d:53:ef:6e:30:d0:
                    eb:e1:65:c0:b8:62:74:f0:8a:8b:4c:b6:32:b7:88:
                    a6:2c:3c:a3:0c:50:d0:fa:07:a9:16:65:a7:15:a6:
                    86:e2:3c:ef:12:41:c2:c5:8d:a3:92:3d:3c:d1:5e:
                    07:2c:20:00:59:3e:83:0f:59:e2:7a:7f:65:3e:66:
                    09:89:5d:8d:44:33:3e:16:23:fd:a6:40:a2:73:12:
                    74:66:08:5a:30:fb:a4:ba:af:d6:cc:e7:61:8b:22:
                    2a:e0:d8:9d:83:96:d1:06:9a:49:5c:19:19:51:0f:
                    49:4d:58:75:21:85:64:ac:d1:6b:c5:e3:06:63:53:
                    c9:07:09:e7:12:ca:66:78:48:ff:9d:2c:0f:11:0a:
                    9a:ee:9a:86:fa:40:e1:f8:eb:6e:19:c8:34:3f:88:
                    ea:6f:7e:a1:60:56:92:75:38:44:b2:bb:78:1e:97:
                    b5:54:87:9b:55:ff:e6:89:d4:b3:60:53:de:a0:58:
                    b3:2b:42:2f:a6:f0:5a:5f:e7:73:59:b2:73:13:4d:
                    76:b2:d1:94:f1:f3:61:1e:4d:db:e9:c3:36:37:c0:
                    eb:2f:a9:29:d7:9a:af:4c:42:bd:a7:5d:4e:81:1d:
                    80:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F1:98:17:F2:78:20:0D:AA:7E:9A:F7:CF:C8:13:1A:59:33:59:5B
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a3230303a3a2f34302d3634203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:f0:ac:51:3d:2d:49:bb:c0:66:47:cf:fb:d3:59:dd:d0:a7:
         97:ff:c7:6a:e3:71:29:84:ca:5b:0f:7a:44:a7:53:63:05:e7:
         ae:a7:7a:bc:1a:1f:7f:d3:7e:dd:51:a0:fe:50:e5:68:16:a2:
         fe:1c:af:d1:c7:b9:d3:01:01:49:86:1f:19:08:63:07:4e:cf:
         45:48:cb:e2:41:3e:b7:95:4a:c8:7a:77:df:24:f2:eb:69:db:
         a6:56:dd:1f:e6:52:ec:dd:58:42:63:07:e1:54:f7:5d:d3:c4:
         1a:c8:55:e6:81:77:3e:30:0b:b5:00:b5:61:48:dc:08:40:e2:
         7c:95:f2:1c:be:57:67:9c:1a:fb:da:d2:6d:a8:c9:56:b7:47:
         f4:2d:0d:61:44:b1:7e:72:05:21:88:19:3f:bd:97:ea:e7:88:
         38:3e:01:6d:b1:9d:f8:d2:6a:71:61:4f:c9:62:85:ca:50:5e:
         29:b7:e1:11:d4:ec:e4:ab:e3:b5:0f:4d:6d:8d:09:08:0f:4e:
         3a:a3:36:5e:17:9d:4c:b7:5d:6d:83:10:ce:8c:e3:24:01:35:
         eb:4a:29:76:39:fd:8b:66:aa:92:b0:f0:ca:b7:76:ac:36:a2:
         81:ab:05:65:20:2c:96:b1:2a:f9:3e:93:94:79:8b:2f:ad:f5:
         8c:48:13:50
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIUBc6OH1XKMrpYOqe4emXgLD44H/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFDQTY1ODU3QzQzMzlDNjkyM0NGNUE5Rjg2Mjk5NDhC
RjNBNEI3OTAeFw0yMzExMTQxMTUwMDNaFw0yNDExMTIxMTU1MDNaMDMxMTAvBgNV
BAMTKDk0RjE5ODE3RjI3ODIwMERBQTdFOUFGN0NGQzgxMzFBNTkzMzU5NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfEZJ3ZRn1P1HQcMy8jT5JxD4r
/PCmxA1T724w0OvhZcC4YnTwiotMtjK3iKYsPKMMUND6B6kWZacVpobiPO8SQcLF
jaOSPTzRXgcsIABZPoMPWeJ6f2U+ZgmJXY1EMz4WI/2mQKJzEnRmCFow+6S6r9bM
52GLIirg2J2DltEGmklcGRlRD0lNWHUhhWSs0WvF4wZjU8kHCecSymZ4SP+dLA8R
Cprumob6QOH4624ZyDQ/iOpvfqFgVpJ1OESyu3gel7VUh5tV/+aJ1LNgU96gWLMr
Qi+m8Fpf53NZsnMTTXay0ZTx82EeTdvpwzY3wOsvqSnXmq9MQr2nXU6BHYD3AgMB
AAGjggJ1MIICcTAdBgNVHQ4EFgQUlPGYF/J4IA2qfpr3z8gTGlkzWVswHwYDVR0j
BBgwFoAUIcplhXxDOcaSPPWp+GKZSL86S3kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYtZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhk
N2RhLzQvMjFDQTY1ODU3QzQzMzlDNjkyM0NGNUE5Rjg2Mjk5NDhCRjNBNEI3OS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvMjFDQTY1ODU3QzQzMzlDNjkyM0NGNUE5Rjg2Mjk5NDhCRjNB
NEI3OS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYt
ZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhkN2RhLzQvMzI2MTMwNjEzYTM2MzAzNDM0
M2EzMjMwMzAzYTNhMmYzNDMwMmQzNjM0MjAzZDNlMjAzNDM3MzIzNzMyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYAKgpgRAIwDQYJKoZIhvcNAQELBQADggEBAFLwrFE9LUm7wGZHz/vTWd3Q
p5f/x2rjcSmEylsPekSnU2MF566nerwaH3/Tft1RoP5Q5WgWov4cr9HHudMBAUmG
HxkIYwdOz0VIy+JBPreVSsh6d98k8utp26ZW3R/mUuzdWEJjB+FU913TxBrIVeaB
dz4wC7UAtWFI3AhA4nyV8hy+V2ecGvva0m2oyVa3R/QtDWFEsX5yBSGIGT+9l+rn
iDg+AW2xnfjSanFhT8lihcpQXim34RHU7OSr47UPTW2NCQgPTjqjNl4XnUy3XW2D
EM6M4yQBNetKKXY5/YtmqpKw8Mq3dqw2ooGrBWUgLJaxKvk+k5R5iy+t9YxIE1A=
-----END CERTIFICATE-----