Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323130313532.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323130313532.roa (raw, json)
Hash identifier:          gNbbvmCDEGWhLCyKHe47thY9uHbQ87EvNr9M9ODxnE8=
Subject key identifier:   46:61:4D:2C:55:B8:0E:B8:88:FB:06:12:7D:BF:E2:B3:F3:BE:3E:16
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       655B2F3415CEEA83BAAB59B30B250CF001AA5125
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323130313532.roa
Signing time:             Sun 12 Nov 2023 20:56:05 +0000
ROA not before:           Sun 12 Nov 2023 20:51:05 +0000
ROA not after:            Sun 10 Nov 2024 20:56:05 +0000
asID:                     210152
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5b:2f:34:15:ce:ea:83:ba:ab:59:b3:0b:25:0c:f0:01:aa:51:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 12 20:51:05 2023 GMT
            Not After : Nov 10 20:56:05 2024 GMT
        Subject: CN=46614D2C55B80EB888FB06127DBFE2B3F3BE3E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:67:03:d3:3f:fe:26:08:2b:09:86:88:1c:
                    f4:38:64:09:a7:14:27:63:fb:ba:f6:65:ce:73:62:
                    d1:4e:e3:d6:cf:f3:10:21:d7:b4:a9:d4:b3:d7:b0:
                    12:c4:87:1b:1f:5d:96:51:59:f6:81:76:34:96:15:
                    0e:43:4f:02:d4:75:18:d7:28:91:21:c0:b8:9e:6b:
                    54:76:28:4a:ba:14:a7:6c:1f:a7:0b:90:2a:f2:e2:
                    fe:15:e3:9b:b2:62:bb:60:0b:72:e9:82:92:01:16:
                    fa:05:95:58:98:a9:f1:58:47:f1:f1:a8:fa:e5:66:
                    2f:1d:f1:4e:8d:5e:9e:9b:c8:86:21:5c:5b:16:a2:
                    03:dd:47:e0:3a:19:46:12:bf:66:46:11:5a:88:49:
                    4b:c3:1f:fe:e8:c2:3c:ad:0c:25:90:59:fb:6c:d9:
                    55:36:df:1b:04:16:a9:35:6c:fe:02:6d:20:73:84:
                    b3:0e:66:a5:a5:95:e2:9a:16:eb:6c:ab:68:55:1e:
                    da:2e:bd:51:7d:da:91:83:d3:ff:4d:c7:47:08:ef:
                    07:7f:67:c2:dd:6a:b5:50:93:01:4c:df:04:aa:14:
                    cd:7c:b5:15:00:e4:f7:60:3c:ee:5f:c0:fb:a1:18:
                    db:e7:33:8d:ba:ba:ec:33:2b:b5:42:02:8c:42:21:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:61:4D:2C:55:B8:0E:B8:88:FB:06:12:7D:BF:E2:B3:F3:BE:3E:16
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323130313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:ce:15:07:45:b8:f0:43:36:56:c5:d8:55:60:c3:e4:ae:bf:
         17:aa:d9:c3:3d:a2:53:f1:e8:58:f9:49:31:b4:f4:21:7a:e8:
         e9:68:ad:6e:56:9f:c7:a1:fb:d8:f7:e2:21:ca:7f:82:37:a0:
         24:f8:c3:d6:34:11:d8:a0:18:fc:6a:09:97:4f:74:2c:29:e3:
         96:9d:da:75:60:99:33:d4:8e:80:b2:3d:d4:98:36:6b:87:46:
         61:85:8b:54:f0:ac:bc:1d:a8:18:ed:69:a2:ad:0e:76:b9:f7:
         3c:5e:13:9a:3b:02:1c:af:a7:a9:57:00:07:85:ed:42:0b:f5:
         e8:0d:88:64:3f:7b:05:50:4a:7f:c2:66:d3:9a:de:ea:c2:4a:
         f9:23:1f:bd:ea:e7:e4:f9:19:65:da:cb:eb:47:38:b5:d3:c9:
         48:e2:d5:01:3e:79:25:47:44:56:84:4e:2a:29:fb:6a:97:d0:
         58:ed:37:2f:85:e6:ee:f2:7e:1b:0d:53:29:22:50:fb:ab:30:
         1b:95:33:6f:f4:59:7f:13:b1:a7:3b:5e:15:c7:97:66:79:8c:
         0c:70:83:45:8b:70:f8:d0:8f:b3:b0:d8:53:db:11:1a:10:a0:
         58:89:20:99:7b:76:0c:d2:bd:61:d5:34:ec:f5:e3:e8:d9:b4:
         95:bb:fa:10
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUZVsvNBXO6oO6q1mzCyUM8AGqUSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFDQTY1ODU3QzQzMzlDNjkyM0NGNUE5Rjg2Mjk5NDhC
RjNBNEI3OTAeFw0yMzExMTIyMDUxMDVaFw0yNDExMTAyMDU2MDVaMDMxMTAvBgNV
BAMTKDQ2NjE0RDJDNTVCODBFQjg4OEZCMDYxMjdEQkZFMkIzRjNCRTNFMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GmcD0z/+JggrCYaIHPQ4ZAmn
FCdj+7r2Zc5zYtFO49bP8xAh17Sp1LPXsBLEhxsfXZZRWfaBdjSWFQ5DTwLUdRjX
KJEhwLiea1R2KEq6FKdsH6cLkCry4v4V45uyYrtgC3LpgpIBFvoFlViYqfFYR/Hx
qPrlZi8d8U6NXp6byIYhXFsWogPdR+A6GUYSv2ZGEVqISUvDH/7owjytDCWQWfts
2VU23xsEFqk1bP4CbSBzhLMOZqWlleKaFutsq2hVHtouvVF92pGD0/9Nx0cI7wd/
Z8LdarVQkwFM3wSqFM18tRUA5PdgPO5fwPuhGNvnM426uuwzK7VCAoxCIRmxAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQURmFNLFW4DriI+wYSfb/is/O+PhYwHwYDVR0j
BBgwFoAUIcplhXxDOcaSPPWp+GKZSL86S3kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYtZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhk
N2RhLzQvMjFDQTY1ODU3QzQzMzlDNjkyM0NGNUE5Rjg2Mjk5NDhCRjNBNEI3OS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvMjFDQTY1ODU3QzQzMzlDNjkyM0NGNUE5Rjg2Mjk5NDhCRjNB
NEI3OS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYt
ZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhkN2RhLzQvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMDMxMzUzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoKYESwCzANBgkqhkiG9w0BAQsFAAOCAQEAfs4VB0W48EM2VsXY
VWDD5K6/F6rZwz2iU/HoWPlJMbT0IXro6Witblafx6H72PfiIcp/gjegJPjD1jQR
2KAY/GoJl090LCnjlp3adWCZM9SOgLI91Jg2a4dGYYWLVPCsvB2oGO1poq0Odrn3
PF4TmjsCHK+nqVcAB4XtQgv16A2IZD97BVBKf8Jm05re6sJK+SMfvern5PkZZdrL
60c4tdPJSOLVAT55JUdEVoROKin7apfQWO03L4Xm7vJ+Gw1TKSJQ+6swG5Uzb/RZ
fxOxpzteFceXZnmMDHCDRYtw+NCPs7DYU9sRGhCgWIkgmXt2DNK9YdU07PXj6Nm0
lbv6EA==
-----END CERTIFICATE-----