Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323030363736.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          zDVEcRiwVeTmDmTsUAzQViIystND86m21Vmi7QMLNVk=
Subject key identifier:   33:5E:FC:50:33:0E:CC:59:41:E1:2D:3F:5F:DD:63:B4:45:0E:55:B9
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       1F0768C20F0041E2C317034F32C32F419BBDCEE1
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Sun 12 Nov 2023 01:45:21 +0000
ROA not before:           Sun 12 Nov 2023 01:40:21 +0000
ROA not after:            Sun 10 Nov 2024 01:45:21 +0000
asID:                     200676
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:07:68:c2:0f:00:41:e2:c3:17:03:4f:32:c3:2f:41:9b:bd:ce:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 12 01:40:21 2023 GMT
            Not After : Nov 10 01:45:21 2024 GMT
        Subject: CN=335EFC50330ECC5941E12D3F5FDD63B4450E55B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:56:88:f8:24:b5:2e:fc:79:88:79:77:6b:
                    71:34:38:6b:dd:ad:03:62:28:b9:5a:3c:74:56:81:
                    91:67:c2:77:93:99:d0:2c:65:20:32:ef:ac:a7:69:
                    c1:1d:c5:0a:8e:09:7e:59:49:69:6c:bd:60:63:cb:
                    f3:c3:0e:3b:54:fc:26:74:4b:25:4a:fc:40:77:9e:
                    c7:88:18:d8:e4:b1:a1:a5:ab:c5:8b:ab:73:4d:38:
                    88:96:d4:d5:7d:60:6b:4b:b2:fc:c5:84:7b:61:d2:
                    1d:25:39:03:0d:d1:7b:6b:4c:15:08:b5:43:b1:ec:
                    bc:2f:8f:90:56:08:6c:4b:a2:45:a7:6f:6a:ad:ce:
                    b0:a3:f3:ff:b4:d7:39:81:46:82:5b:4b:e8:ac:16:
                    00:d0:d0:8a:9d:78:1c:b6:83:b9:47:9f:cb:87:7b:
                    b8:68:4f:14:d2:a2:19:b2:0c:d8:8a:0c:41:b1:e5:
                    cf:df:89:c8:eb:84:8a:ee:0e:7a:2b:ea:52:7a:97:
                    ce:83:70:85:ae:ba:82:94:9e:ae:45:27:90:f3:72:
                    c6:cd:10:da:6c:72:4d:62:72:97:db:b6:66:be:80:
                    32:45:3b:6e:f7:6f:ea:7b:cf:51:7c:4b:fc:25:26:
                    f4:0c:e5:4c:f6:c6:d5:bb:30:f1:db:09:9b:c0:0e:
                    3c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5E:FC:50:33:0E:CC:59:41:E1:2D:3F:5F:DD:63:B4:45:0E:55:B9
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:08:6b:02:90:22:2c:fa:0e:61:be:d9:93:d6:3a:21:21:e2:
         56:3d:ce:7b:31:64:16:37:2f:c1:07:83:f7:90:69:f4:14:4e:
         5b:2c:3e:bd:a5:ce:27:57:bd:51:14:20:08:55:65:59:92:b7:
         d5:65:53:d6:39:46:fe:44:c6:2c:31:9a:41:7a:b0:ca:0d:69:
         60:28:36:f3:54:a1:ae:03:a2:6e:e8:25:cc:f3:de:aa:ef:a6:
         73:91:0b:1e:1a:72:19:97:47:c6:ec:86:04:07:11:4b:87:fc:
         3d:b5:c9:db:b1:15:bc:b7:a1:c6:ca:4b:2b:ad:c1:42:a2:47:
         b0:91:e8:f4:c2:df:2b:1d:b9:90:12:ad:59:6a:3a:d8:21:e3:
         0e:5d:e4:20:d7:4d:65:ad:c9:96:be:db:2c:3d:63:19:09:a4:
         fd:7b:76:e8:f3:c3:4a:56:44:33:43:5f:93:74:dc:84:46:2b:
         a5:6f:6d:02:7c:7b:01:83:25:16:65:14:d9:fc:f5:28:f6:dc:
         79:b2:e6:31:3f:1a:11:73:80:95:59:c0:ff:96:5b:25:bd:36:
         0d:d7:5a:1b:32:a6:30:84:57:ef:ab:00:db:24:d7:7a:8e:f9:
         f8:37:e9:26:9e:59:cd:4d:fb:f7:13:b7:2b:37:c4:05:4c:ce:
         e6:de:a7:02
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUHwdowg8AQeLDFwNPMsMvQZu9zuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFDQTY1ODU3QzQzMzlDNjkyM0NGNUE5Rjg2Mjk5NDhC
RjNBNEI3OTAeFw0yMzExMTIwMTQwMjFaFw0yNDExMTAwMTQ1MjFaMDMxMTAvBgNV
BAMTKDMzNUVGQzUwMzMwRUNDNTk0MUUxMkQzRjVGREQ2M0I0NDUwRTU1QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNVaI+CS1Lvx5iHl3a3E0OGvd
rQNiKLlaPHRWgZFnwneTmdAsZSAy76ynacEdxQqOCX5ZSWlsvWBjy/PDDjtU/CZ0
SyVK/EB3nseIGNjksaGlq8WLq3NNOIiW1NV9YGtLsvzFhHth0h0lOQMN0XtrTBUI
tUOx7Lwvj5BWCGxLokWnb2qtzrCj8/+01zmBRoJbS+isFgDQ0IqdeBy2g7lHn8uH
e7hoTxTSohmyDNiKDEGx5c/ficjrhIruDnor6lJ6l86DcIWuuoKUnq5FJ5DzcsbN
ENpsck1icpfbtma+gDJFO273b+p7z1F8S/wlJvQM5Uz2xtW7MPHbCZvADjzzAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUM178UDMOzFlB4S0/X91jtEUOVbkwHwYDVR0j
BBgwFoAUIcplhXxDOcaSPPWp+GKZSL86S3kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYtZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhk
N2RhLzQvMjFDQTY1ODU3QzQzMzlDNjkyM0NGNUE5Rjg2Mjk5NDhCRjNBNEI3OS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvMjFDQTY1ODU3QzQzMzlDNjkyM0NGNUE5Rjg2Mjk5NDhCRjNB
NEI3OS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYt
ZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhkN2RhLzQvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzMDM2MzczNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoKYESwCzANBgkqhkiG9w0BAQsFAAOCAQEAmghrApAiLPoOYb7Z
k9Y6ISHiVj3OezFkFjcvwQeD95Bp9BROWyw+vaXOJ1e9URQgCFVlWZK31WVT1jlG
/kTGLDGaQXqwyg1pYCg281ShrgOibuglzPPequ+mc5ELHhpyGZdHxuyGBAcRS4f8
PbXJ27EVvLehxspLK63BQqJHsJHo9MLfKx25kBKtWWo62CHjDl3kINdNZa3Jlr7b
LD1jGQmk/Xt26PPDSlZEM0Nfk3TchEYrpW9tAnx7AYMlFmUU2fz1KPbcebLmMT8a
EXOAlVnA/5ZbJb02DddaGzKmMIRX76sA2yTXeo75+DfpJp5ZzU379xO3KzfEBUzO
5t6nAg==
-----END CERTIFICATE-----