Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323037343234.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323037343234.roa (raw, json)
Hash identifier:          mrRTZURnIE1qyTsZ3NmxsCg6guOCnMAzrQ4N18qJolk=
Subject key identifier:   74:AD:24:91:19:F1:DD:11:25:1C:50:14:8C:BA:68:C3:5B:A6:C8:AA
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       3D333D639BAEA36C3B06F99E1936CBCA824CF782
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323037343234.roa
Signing time:             Tue 21 Nov 2023 13:01:26 +0000
ROA not before:           Tue 21 Nov 2023 12:56:26 +0000
ROA not after:            Tue 19 Nov 2024 13:01:26 +0000
asID:                     207424
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:33:3d:63:9b:ae:a3:6c:3b:06:f9:9e:19:36:cb:ca:82:4c:f7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 21 12:56:26 2023 GMT
            Not After : Nov 19 13:01:26 2024 GMT
        Subject: CN=74AD249119F1DD11251C50148CBA68C35BA6C8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:42:0a:0d:5c:33:1d:39:48:18:b4:e5:a8:
                    6d:f9:d7:0a:e0:57:c2:52:e1:e6:cb:f1:46:81:1a:
                    4e:4f:93:d1:60:8b:16:9b:e9:f7:ae:97:30:44:40:
                    9b:0a:f3:dc:18:95:cc:f6:e6:22:ab:bf:b4:3d:4b:
                    91:fc:74:e3:bb:db:f8:4a:0b:26:35:9f:88:57:9b:
                    7a:83:62:b1:b6:ee:9d:43:28:ee:b6:23:f0:59:63:
                    4a:13:ab:30:36:a9:05:6d:80:85:7b:66:d7:e9:3c:
                    9a:ce:4f:9a:d5:c6:88:2a:c9:a9:05:11:a3:69:ef:
                    4e:34:5e:37:49:0d:32:59:72:ec:33:e0:2e:45:a2:
                    bc:50:8e:f0:4c:b5:77:a8:23:a1:d4:c2:1c:e1:dd:
                    a2:a0:95:69:19:97:73:69:1d:96:cf:ec:e3:fb:bb:
                    46:5b:0e:0b:d0:a6:bb:78:dd:f6:71:32:4a:90:11:
                    a4:cd:6f:49:e4:0b:df:53:66:a8:3f:64:56:ff:3b:
                    df:64:6b:81:c5:e0:37:51:d6:8f:a9:2e:3a:28:dc:
                    7a:b9:a1:0d:ba:07:13:c8:65:60:cb:2c:d8:1c:8f:
                    56:89:a5:51:72:9d:0e:65:d2:7a:4f:08:a5:13:35:
                    64:92:b9:6c:f8:90:e5:07:54:c0:95:a1:43:08:df:
                    00:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AD:24:91:19:F1:DD:11:25:1C:50:14:8C:BA:68:C3:5B:A6:C8:AA
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323037343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:a2:49:7f:d7:33:c6:5d:85:35:8b:37:e7:39:63:4b:fa:11:
         76:07:39:51:3a:ba:f4:43:38:da:84:8c:ba:c7:c7:ab:1f:2d:
         fa:37:92:98:db:09:b0:86:e4:16:70:d5:1d:e3:d2:77:c6:1d:
         94:80:54:43:0e:70:f6:14:ac:13:02:be:2d:f2:90:88:30:92:
         2e:6d:6f:57:5d:76:32:fc:c1:27:97:35:19:72:65:64:29:cd:
         87:b0:a1:b5:e6:79:fc:c6:8e:82:93:53:08:80:2d:03:7e:7a:
         bd:87:02:09:46:ce:07:71:9a:5f:8a:eb:e5:1c:ef:57:be:1b:
         86:53:fd:d1:af:dd:73:8d:30:60:03:10:d1:79:f2:e8:a9:ca:
         ed:9c:e6:56:9f:36:b2:9f:eb:c8:96:42:c3:cf:37:82:0d:78:
         18:fd:02:f3:7d:03:28:8b:d4:2c:46:c0:46:8b:30:9e:52:1f:
         f6:08:7a:0e:64:5d:0a:7c:e7:c2:7a:fb:ff:2f:31:76:43:5d:
         44:94:b2:d8:12:ef:73:e6:18:cb:c1:36:75:1e:f0:94:cf:72:
         be:d7:61:ac:be:ea:87:9c:d2:94:d9:a3:b8:09:d7:8c:84:c1:
         2a:38:d6:8f:5f:26:52:0a:43:3e:96:1e:7c:af:52:0d:3f:73:
         2b:80:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----