Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323030393735.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323030393735.roa (raw, json)
Hash identifier:          +HH847TwayEFa7UbM72tflsM/EqMZ3pn0NCgfaDyeEA=
Subject key identifier:   E5:F4:43:B3:F9:F2:07:1C:AB:8F:1A:16:1B:6F:17:0F:2E:42:E5:67
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       1CDF624D1011C592A017766C5E7060193305ABF5
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323030393735.roa
Signing time:             Sun 12 Nov 2023 09:39:06 +0000
ROA not before:           Sun 12 Nov 2023 09:34:06 +0000
ROA not after:            Sun 10 Nov 2024 09:39:06 +0000
asID:                     200975
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:df:62:4d:10:11:c5:92:a0:17:76:6c:5e:70:60:19:33:05:ab:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 12 09:34:06 2023 GMT
            Not After : Nov 10 09:39:06 2024 GMT
        Subject: CN=E5F443B3F9F2071CAB8F1A161B6F170F2E42E567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:61:d6:5d:59:4e:97:a5:0c:5d:27:e4:0c:
                    a3:f4:f0:77:6d:e1:37:c9:3f:54:fa:65:8d:ed:26:
                    15:49:b5:c6:f8:f7:82:b4:d6:75:5c:43:44:6c:92:
                    3b:83:f5:ca:fc:c8:ac:f2:8f:d1:7b:b0:77:6a:0f:
                    76:12:82:4c:5c:b1:1a:35:9b:ed:e3:7f:80:5c:b2:
                    cb:13:02:57:3a:ef:86:2e:f2:3e:f7:32:8e:2b:16:
                    05:e9:d2:0b:16:9b:3c:e0:f0:ba:e1:39:a9:53:e5:
                    ff:dd:9f:47:88:f1:d5:41:ef:1f:e4:32:ce:e1:1b:
                    8e:5a:87:d8:5c:0e:d1:3a:fc:36:39:8f:b6:ff:54:
                    1d:9e:2b:c1:f2:94:c6:54:e0:df:30:4b:00:c1:45:
                    0b:66:75:34:f3:59:3a:07:f7:94:d6:63:a2:42:63:
                    07:1c:cc:7a:e3:62:f8:54:e4:a0:25:67:6d:1d:8b:
                    00:cb:ab:5a:b4:d1:75:25:12:62:3d:87:65:14:9b:
                    54:98:de:57:45:10:b1:98:ed:4c:76:ff:7d:59:6f:
                    e1:15:5d:4f:34:ac:21:b3:7a:b7:2a:40:36:62:af:
                    51:cf:92:3d:5c:d7:b3:53:d4:f6:15:76:55:71:c3:
                    d9:49:f0:ad:dc:b5:fc:93:ab:c7:e6:b1:af:51:ef:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F4:43:B3:F9:F2:07:1C:AB:8F:1A:16:1B:6F:17:0F:2E:42:E5:67
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323030393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:4a:71:75:52:2c:ab:8f:59:58:67:c7:87:df:f1:40:76:c4:
         98:72:c2:80:ff:a6:ee:a0:66:e1:39:a4:39:e5:d7:48:4b:0a:
         2e:34:67:5c:a7:76:cb:17:aa:88:8c:f2:02:64:de:e8:bc:b4:
         d6:09:7a:a9:79:17:e8:0d:64:bf:4a:a2:5f:90:9e:37:54:ed:
         3e:4e:8e:01:e8:45:40:af:28:f0:9b:2e:7c:4f:b1:80:40:f9:
         15:45:a1:15:1b:34:e4:bb:05:10:12:f8:42:f0:17:8a:da:a6:
         b9:02:70:04:8f:47:3e:d5:57:6a:01:dd:f8:7f:9d:74:b2:32:
         98:73:00:2a:79:07:db:7c:4d:4e:0c:8a:75:fd:cf:b8:f5:ba:
         a3:ce:e6:bd:f2:01:94:8f:db:3e:1f:25:6f:b8:92:5a:75:cb:
         55:a9:d3:70:b1:a6:d1:39:5f:a1:35:60:c7:f3:fb:f5:7e:c2:
         12:b4:89:a1:a8:14:ad:8a:57:2a:24:ce:70:c6:e7:5b:df:2d:
         36:f8:60:7a:44:a2:b3:b3:b7:6f:7e:a3:15:76:c0:d8:cb:4e:
         bc:08:8a:85:58:ac:f0:a7:21:8c:1e:db:4d:a2:f9:b0:66:68:
         91:90:a3:6c:f4:66:a9:e5:2a:0f:0c:b2:c9:20:ff:4b:6a:7a:
         6f:37:22:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----