Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          OS48UVJ7IfQGcpHN1HlVa+jhKWqp2v9ZRxHPgXLV+BI=
Subject key identifier:   78:5C:B9:0C:82:54:7E:0F:C7:9E:87:90:78:25:7B:51:08:2A:BE:53
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       53D73A663F271E117B56B251DD3345E779A94159
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa
Signing time:             Mon 13 Nov 2023 12:13:19 +0000
ROA not before:           Mon 13 Nov 2023 12:08:19 +0000
ROA not after:            Mon 11 Nov 2024 12:13:19 +0000
asID:                     203635
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d7:3a:66:3f:27:1e:11:7b:56:b2:51:dd:33:45:e7:79:a9:41:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 13 12:08:19 2023 GMT
            Not After : Nov 11 12:13:19 2024 GMT
        Subject: CN=785CB90C82547E0FC79E879078257B51082ABE53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:40:f6:8f:9f:78:a4:0f:2c:db:5c:73:86:
                    fe:71:10:50:75:20:81:c4:f7:6c:c9:b8:7a:92:cc:
                    95:dd:2e:5e:59:ea:3c:1d:e9:2b:5b:35:42:9f:cb:
                    b5:bb:44:fc:eb:69:0d:ff:6c:97:90:0e:22:54:c4:
                    b6:12:16:b4:c3:50:e0:58:c2:de:c3:5a:d7:a2:24:
                    36:46:5e:25:7d:48:60:b7:71:8e:76:35:cd:c4:d3:
                    27:7e:4a:3b:3c:1c:a8:0d:e5:5e:70:4e:84:c8:0f:
                    69:6b:5c:9e:79:c1:72:81:a1:b4:80:2e:78:8a:70:
                    a9:03:32:49:96:76:25:0d:b4:73:bb:14:f4:6c:9f:
                    aa:59:69:bb:26:c4:37:3c:3a:23:cc:24:85:46:44:
                    96:45:18:fb:45:4d:43:07:55:ec:d6:1d:f9:dc:68:
                    0a:dc:5d:b4:bb:db:b6:ac:50:af:15:04:7a:92:4a:
                    7f:81:63:06:21:a3:9d:aa:5a:18:6f:fb:ac:cc:ed:
                    52:29:f9:df:ab:76:91:a1:26:97:6d:d8:7d:41:5f:
                    9d:2f:7e:c3:ee:48:c0:b7:8e:cd:97:09:2a:cd:c4:
                    f1:e6:ab:03:66:9d:97:9f:b9:76:8e:28:1f:bd:f3:
                    35:df:17:bb:7c:44:21:05:64:e7:1c:f9:ac:1b:fa:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5C:B9:0C:82:54:7E:0F:C7:9E:87:90:78:25:7B:51:08:2A:BE:53
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:2d:e4:65:6a:c4:63:86:b3:a1:d4:a1:ca:49:be:ae:78:d7:
         5c:00:11:5f:ca:2a:03:72:5b:64:39:72:26:0d:41:98:cb:9e:
         a0:2f:6b:67:48:32:5e:5b:fc:8f:84:6f:ac:89:5d:85:05:ed:
         30:93:61:2b:03:9b:2a:2d:97:7e:20:9e:a0:54:be:e7:0a:27:
         70:ba:b8:3c:69:ab:ce:b7:0d:c2:46:af:84:75:f0:c7:65:ab:
         c8:97:61:2f:a9:6a:63:37:85:26:da:25:e0:e0:a9:80:28:e7:
         c8:40:83:c1:93:68:c2:5c:18:36:5c:c5:43:ed:19:d7:f5:63:
         f5:58:da:b2:e6:58:47:85:11:68:cb:cc:36:81:3e:8e:89:b0:
         eb:e4:14:c0:cd:d2:4d:37:12:97:cd:74:fb:46:25:e5:3e:44:
         ab:00:29:5e:64:80:95:e1:08:32:94:50:e4:33:40:f6:18:42:
         81:88:26:59:02:02:bd:26:6c:89:af:aa:b1:3d:9f:cf:4e:1a:
         8b:55:f5:ac:bf:25:cd:2b:4c:75:43:71:75:2e:1c:d1:71:13:
         b1:8a:ca:2f:6e:df:9e:8c:13:35:e2:e5:5a:f5:10:ce:ae:e3:
         b4:57:2b:fe:3e:96:19:85:86:ac:47:8b:8f:d9:01:1f:66:2b:
         de:0a:98:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----