Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323035343834.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323035343834.roa (raw, json)
Hash identifier:          voSLdUDirD4lrfJw20cU6a3kUaMv3SVTzNne4DZbSDQ=
Subject key identifier:   D8:30:7B:94:E9:61:39:31:10:39:48:FF:14:40:5C:8F:85:3C:11:19
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       6F28E5EC616A7AA539B0E4E408006E3ACD581419
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323035343834.roa
Signing time:             Sun 12 Nov 2023 08:14:30 +0000
ROA not before:           Sun 12 Nov 2023 08:09:30 +0000
ROA not after:            Sun 10 Nov 2024 08:14:30 +0000
asID:                     205484
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:28:e5:ec:61:6a:7a:a5:39:b0:e4:e4:08:00:6e:3a:cd:58:14:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 12 08:09:30 2023 GMT
            Not After : Nov 10 08:14:30 2024 GMT
        Subject: CN=D8307B94E9613931103948FF14405C8F853C1119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:4b:47:94:39:21:ed:4b:5b:92:71:5a:c1:
                    4d:e0:95:48:32:45:a1:a2:74:60:3f:54:4c:44:e4:
                    9c:69:a9:93:3b:bd:2f:29:75:59:15:66:77:66:ab:
                    d3:65:28:bf:e6:88:ca:ad:2c:b4:f4:1a:d7:45:5d:
                    17:b0:27:3d:9d:a3:ab:d0:c6:17:a3:2a:81:cd:db:
                    f0:24:e2:3b:2c:53:72:b2:e1:d6:07:ee:7c:f0:86:
                    75:1d:96:da:63:88:ef:a6:df:b7:11:cd:c2:2b:94:
                    60:e2:1a:ff:f0:77:33:d7:66:4e:5b:35:ac:14:cb:
                    b3:74:e0:0f:24:68:e4:96:82:05:3e:ca:40:af:b1:
                    cd:3f:fc:0d:36:71:ab:10:44:a6:7b:9e:18:ef:64:
                    ce:a3:e8:0b:75:aa:6e:8e:40:27:a1:b7:a8:60:32:
                    d4:ab:a2:eb:3d:a9:4f:78:fe:1a:48:60:d0:6c:5b:
                    7d:9f:8f:80:32:95:4a:4a:b5:3f:ab:07:2a:b2:4f:
                    4d:ab:4c:f8:96:d5:fc:12:8b:43:a8:de:eb:d7:68:
                    56:12:8f:5a:37:3d:19:1e:69:81:84:a0:83:62:be:
                    ae:4e:f6:9b:42:43:02:e2:89:19:35:34:b5:52:99:
                    67:92:15:bb:92:d0:76:97:42:0b:9e:59:eb:82:11:
                    1b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:30:7B:94:E9:61:39:31:10:39:48:FF:14:40:5C:8F:85:3C:11:19
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323035343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:b9:a0:35:a4:c7:dc:34:21:93:b5:cc:97:c5:19:54:9b:2d:
         c9:27:a1:1a:a1:a4:6d:c2:72:ec:96:6f:8c:6b:5b:3e:42:cb:
         38:2c:4c:d3:76:39:08:b5:14:38:30:73:8d:4e:79:bb:1d:42:
         05:07:f5:f1:f0:bb:65:8a:e9:ca:0d:57:77:d7:96:2f:5d:4e:
         71:84:2a:6f:49:84:09:c6:be:63:9a:9e:0d:41:bd:f4:7d:f6:
         7e:45:be:b7:74:e6:f3:7b:14:bc:67:93:4a:2a:a7:15:d8:14:
         d2:73:c9:82:f2:df:f2:b2:3c:c7:82:03:d2:13:ab:a6:46:d4:
         3a:54:29:f0:3c:e9:60:64:19:1f:14:77:68:0e:f9:42:f5:8f:
         c4:25:c3:02:c3:de:2c:1e:85:d5:78:66:5a:6c:48:75:b0:e6:
         ae:4d:b6:e4:9d:26:8e:4b:4b:62:d1:39:8e:e2:14:ec:4e:7c:
         f7:7e:4e:dc:d9:8b:d6:b5:70:f2:2c:0f:77:58:7e:ea:7d:81:
         f2:f4:54:11:f1:40:a6:8c:56:a1:41:eb:1e:50:2d:f7:93:8d:
         bc:ab:4d:83:fc:84:16:d8:5e:e9:7c:98:88:88:4b:62:cd:c3:
         7e:08:d7:db:08:90:82:97:60:cf:27:07:46:55:8e:66:47:6b:
         25:b7:04:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----