Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20313937353332.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20313937353332.roa (raw, json)
Hash identifier:          fVFDSyRXtLfz2LNDGJ4ZCmGiZzcYh/YeRDPovo1bAvE=
Subject key identifier:   61:9F:A0:3B:2B:2E:7A:DC:A7:71:80:7E:83:FA:3B:EF:18:D3:78:6D
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       7DC7FEBEB7D5B3FE380C12DF95B425A7E3783FFE
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20313937353332.roa
Signing time:             Sun 12 Nov 2023 08:16:10 +0000
ROA not before:           Sun 12 Nov 2023 08:11:10 +0000
ROA not after:            Sun 10 Nov 2024 08:16:10 +0000
asID:                     197532
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c7:fe:be:b7:d5:b3:fe:38:0c:12:df:95:b4:25:a7:e3:78:3f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 12 08:11:10 2023 GMT
            Not After : Nov 10 08:16:10 2024 GMT
        Subject: CN=619FA03B2B2E7ADCA771807E83FA3BEF18D3786D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0a:c8:4d:62:e8:7c:4d:5f:6f:e3:3e:e9:60:
                    9b:5e:52:00:46:15:d7:90:6f:df:85:1f:c7:bc:a7:
                    a9:16:d0:74:7f:ac:86:c5:d7:eb:7c:83:ae:28:85:
                    b4:a4:ad:1f:af:57:dc:f6:fa:0f:f2:fb:b3:a9:d6:
                    9e:24:35:2a:6d:82:27:35:46:2c:dc:2a:51:79:e5:
                    95:57:ee:13:bd:fc:8b:f6:49:0d:02:b9:ac:04:79:
                    28:d1:5d:1b:00:2e:15:cb:16:ce:74:b6:94:6a:b7:
                    63:74:c3:7a:34:3a:b3:6e:6d:55:b6:bf:9a:2b:9e:
                    91:63:ad:b5:cd:3e:53:97:f1:4b:4b:5b:c8:9f:27:
                    91:06:0b:54:fd:53:9b:39:ae:39:e6:b0:a8:95:b3:
                    5f:b7:45:d7:00:0a:dd:aa:59:74:ae:40:6c:c7:cc:
                    89:e0:72:b7:c7:5b:9b:3a:1f:a5:08:4b:6f:44:a2:
                    c8:7f:df:3d:fe:38:ec:16:f7:54:e1:3d:ec:48:5a:
                    f4:bb:41:d9:2e:04:4e:b9:26:6d:64:0c:40:9c:95:
                    0e:46:b3:16:fc:72:d8:a1:75:84:35:6b:54:9c:eb:
                    97:a0:62:1f:49:e9:4f:dd:77:68:13:83:15:65:bb:
                    96:1a:36:0f:57:da:ca:7b:fc:1e:af:3d:a4:11:d6:
                    c4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9F:A0:3B:2B:2E:7A:DC:A7:71:80:7E:83:FA:3B:EF:18:D3:78:6D
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20313937353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:8f:b5:51:30:e4:bd:c2:42:ce:18:e1:4f:8c:fa:78:23:48:
         65:3e:3d:e2:7a:39:75:b7:ad:cf:2a:35:5a:5d:4f:cb:c4:03:
         ba:2f:e2:19:ae:2b:bc:4e:17:98:2b:a0:13:9f:95:af:76:6b:
         8b:0b:a2:f1:67:7a:e4:56:15:07:01:aa:37:7b:fb:6a:b4:28:
         c0:a1:8e:52:1d:9a:8f:ed:72:fa:35:70:fb:dc:64:b7:c5:68:
         46:30:3e:a3:44:5e:5e:c4:35:b8:07:e0:48:39:7a:35:89:e5:
         34:98:16:7d:3b:5a:4a:f7:e4:4d:31:2a:4e:e9:47:6d:c5:ba:
         ed:20:c3:cc:c6:7d:ff:47:16:50:24:ea:18:08:bc:71:f6:ee:
         ab:94:d9:d9:52:77:c5:48:ae:26:ee:99:a9:f4:30:83:6b:3e:
         4a:60:04:65:7b:69:20:52:6c:57:bf:49:4a:4d:88:77:d9:88:
         29:87:17:80:bc:eb:ad:0c:e5:09:d3:fe:c8:fe:3d:c6:a8:0f:
         e2:34:45:00:fa:5b:9e:08:0a:47:60:b6:d9:07:d6:2f:41:41:
         72:ee:72:e1:de:ab:3f:f6:dd:d2:2e:9f:7d:77:83:45:35:79:
         bc:25:43:21:ee:0e:b4:d0:56:77:54:ab:c5:be:f6:30:8f:e4:
         d9:87:5a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----