Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323030323432.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier:          nTgrYC2Ajs/Um4/fYnWEgqlU5Xyxv8BHEoAY3LUz8wI=
Subject key identifier:   97:E5:24:8E:11:50:B9:0C:11:75:9E:D7:D5:B9:49:86:65:93:3C:59
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       586FBC3694CB53A43FBFA1C64546D2FB408DA62A
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323030323432.roa
Signing time:             Thu 16 Nov 2023 20:03:33 +0000
ROA not before:           Thu 16 Nov 2023 19:58:33 +0000
ROA not after:            Thu 14 Nov 2024 20:03:33 +0000
asID:                     200242
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6f:bc:36:94:cb:53:a4:3f:bf:a1:c6:45:46:d2:fb:40:8d:a6:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 16 19:58:33 2023 GMT
            Not After : Nov 14 20:03:33 2024 GMT
        Subject: CN=97E5248E1150B90C11759ED7D5B9498665933C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:05:42:54:3a:fa:b6:b5:64:75:43:2a:42:
                    82:7b:0a:09:4d:b1:bc:55:0f:ac:a4:55:71:1f:4f:
                    f8:c8:ff:ef:02:f5:e8:3f:0f:2f:1c:09:c6:5b:4b:
                    51:91:2d:9b:65:c6:34:42:50:53:7c:5e:cc:45:76:
                    fb:3d:23:87:2a:52:a0:67:83:7c:32:0b:8f:d4:36:
                    62:17:63:d4:98:76:cf:a6:d1:d4:58:8c:4b:f3:1a:
                    c5:b2:dd:29:d0:3b:d9:db:fe:8f:98:c3:7a:40:c9:
                    f3:df:01:96:84:db:02:5e:2c:ce:ed:a0:97:30:ef:
                    13:3d:71:33:2c:f9:60:4a:08:70:e1:6e:9a:47:a4:
                    4f:c6:ea:e6:49:1f:9b:57:f2:88:f0:2f:73:f3:a8:
                    70:ff:9e:03:e8:07:6e:20:b8:af:20:f1:f8:64:d3:
                    78:c7:0b:cb:66:02:5e:d4:40:64:f9:f7:52:ed:5a:
                    c0:eb:de:6b:b9:48:96:7e:86:1d:e7:06:da:65:4f:
                    99:a5:b6:37:a8:a7:e4:7a:99:ea:0d:6d:51:fa:63:
                    b9:26:63:ce:7e:bd:08:b3:e5:cb:b0:28:2b:ea:31:
                    af:0f:66:54:36:d3:ec:95:cf:d5:b6:dd:5b:97:53:
                    94:4f:55:89:93:76:b5:b7:84:88:fa:20:67:f4:57:
                    12:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E5:24:8E:11:50:B9:0C:11:75:9E:D7:D5:B9:49:86:65:93:3C:59
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323030323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:0a:35:5f:79:e5:b3:69:de:56:3d:1a:25:46:b5:33:20:e6:
         90:c8:11:d4:e4:bd:32:e8:67:15:e9:e2:13:ff:d8:eb:03:ae:
         e5:f0:52:8d:bd:9a:71:f3:ed:21:9c:a1:5e:8c:a3:82:85:87:
         9c:ff:08:98:2d:80:38:e0:4e:1c:a6:2a:4a:dc:34:fb:8f:df:
         df:4a:7b:e8:eb:26:9d:c1:40:ae:51:d8:c5:af:e0:7f:e2:0b:
         76:19:90:71:b4:c8:55:c5:c4:e9:f9:b4:3b:e7:67:3e:77:56:
         35:41:9b:c9:93:a5:14:27:72:3f:24:07:e8:1b:c9:fa:9a:72:
         5d:71:da:b3:b1:40:5e:c6:eb:32:76:54:8c:ee:54:de:74:12:
         ae:2a:10:5c:d2:18:58:f1:3f:77:82:0b:ec:38:c3:1c:2d:80:
         97:6e:c5:2d:8e:41:77:69:41:e9:8c:69:66:53:b0:2c:e8:c4:
         8a:44:8e:19:1a:6a:43:41:00:88:6d:d7:d0:58:8f:a4:a6:3f:
         4a:82:25:53:cf:ba:7a:1f:44:dc:a7:25:a4:97:53:9d:a3:c4:
         6a:9b:9d:80:bf:39:e8:57:64:0d:1b:5b:c2:da:aa:c2:5b:14:
         81:5d:06:bd:33:10:a0:d2:b1:85:e7:b7:dc:5e:ed:28:a0:bb:
         97:b5:61:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----