Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323130343735.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323130343735.roa (raw, json)
Hash identifier:          G47d+7lHfxb86OrzcQ9WszZ/8G7Q77gUznr81dowbio=
Subject key identifier:   DB:14:1D:1B:91:15:38:80:8B:66:48:CE:AD:1D:86:95:51:7D:85:4B
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       751077BC65563F89EB9616F825274478A7F8CD6D
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323130343735.roa
Signing time:             Sun 12 Nov 2023 20:56:21 +0000
ROA not before:           Sun 12 Nov 2023 20:51:21 +0000
ROA not after:            Sun 10 Nov 2024 20:56:21 +0000
asID:                     210475
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:10:77:bc:65:56:3f:89:eb:96:16:f8:25:27:44:78:a7:f8:cd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 12 20:51:21 2023 GMT
            Not After : Nov 10 20:56:21 2024 GMT
        Subject: CN=DB141D1B911538808B6648CEAD1D8695517D854B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c5:db:b7:a4:f0:67:04:33:b5:85:ca:a6:1d:
                    88:b6:cb:76:d2:33:e0:85:ad:76:9e:4a:11:4e:8b:
                    1b:03:6a:64:9f:52:81:55:41:92:be:9a:c9:6d:ec:
                    92:ed:a6:97:5a:8d:28:7d:12:ff:58:14:05:fa:4a:
                    18:7f:56:ce:cf:4f:34:40:36:13:db:fe:b3:ed:3e:
                    a9:f4:4a:41:59:ca:24:a5:8d:03:f8:ba:91:05:69:
                    d8:15:42:0a:d1:bc:90:83:94:61:77:1c:8f:be:ea:
                    07:f1:31:8f:1b:b4:bb:18:83:75:ba:8e:a7:57:31:
                    d3:5d:91:42:f8:36:c9:db:dc:f1:9f:4e:93:9a:9d:
                    8f:2b:7b:23:dc:03:be:96:a7:1e:97:bf:dc:b8:c3:
                    47:4f:73:79:68:2e:a5:82:85:b7:22:55:37:52:9a:
                    ff:2b:1e:78:6e:64:ce:1c:08:af:e0:89:3a:61:ef:
                    5c:58:6a:03:70:45:86:5b:11:4d:53:89:39:5c:84:
                    81:00:5f:3c:46:ff:db:11:30:20:b2:98:eb:98:e9:
                    5c:65:a5:a8:9f:55:f8:d1:c5:36:a8:88:3b:a8:45:
                    57:55:b4:6f:fb:c5:ab:2d:3a:32:89:b6:1a:f0:53:
                    17:6d:7a:92:6b:e5:11:ce:24:c8:30:45:4f:7e:bd:
                    5d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:14:1D:1B:91:15:38:80:8B:66:48:CE:AD:1D:86:95:51:7D:85:4B
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323130343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:8d:c3:0d:ea:c1:e3:0a:51:3c:73:aa:f8:5c:12:b1:35:00:
         87:7a:2a:08:20:f6:37:ac:ff:09:52:9c:bf:63:93:b3:3b:46:
         67:90:bd:75:16:e2:10:7d:32:2b:6a:e4:93:90:c7:47:f8:87:
         8f:41:46:b1:56:b1:1b:1c:ab:1e:df:6d:68:f0:22:32:75:7a:
         b8:76:b3:6f:11:db:e5:0d:64:b5:dd:6c:9c:dc:4d:89:fe:81:
         b8:ec:10:e4:7e:f9:f8:15:0a:b7:f4:a3:20:de:ce:58:8c:84:
         b6:bc:c5:8e:cf:bb:db:da:d5:82:c1:d1:83:0e:f9:0f:60:b0:
         9c:4a:76:2a:3b:67:b6:f7:71:8e:8e:72:f8:5b:a5:2e:21:eb:
         7f:55:cf:73:40:c5:33:81:05:e8:51:21:50:80:56:7b:d3:bc:
         b3:fe:35:f6:c4:9b:bd:fc:3a:77:bc:bd:ea:70:66:97:0e:53:
         59:0f:da:a1:eb:f5:be:aa:de:0a:4c:11:94:47:63:b7:ff:cc:
         ec:fc:23:cf:c7:05:37:9c:81:e9:2c:4d:25:99:5d:b1:e6:63:
         20:e1:d1:3f:7f:12:a5:ff:7c:d7:0e:1e:cd:a1:7d:47:6d:2d:
         77:e2:65:ba:9d:4a:f4:02:34:5f:1f:4c:c9:99:7b:5e:a3:12:
         04:b5:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----