Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323132313439.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier:          tAiceiJhm74ueMMebbm43NIHT2DCYCtDjDHS0LYlQ0o=
Subject key identifier:   F1:BB:C2:D2:1A:2F:EF:38:96:D3:2C:F3:89:52:73:AA:99:B2:7C:14
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       4CE5931FF93042A6B98D49F543D77CC93D344026
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time:             Sun 12 Nov 2023 01:53:40 +0000
ROA not before:           Sun 12 Nov 2023 01:48:40 +0000
ROA not after:            Sun 10 Nov 2024 01:53:40 +0000
asID:                     212149
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e5:93:1f:f9:30:42:a6:b9:8d:49:f5:43:d7:7c:c9:3d:34:40:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 12 01:48:40 2023 GMT
            Not After : Nov 10 01:53:40 2024 GMT
        Subject: CN=F1BBC2D21A2FEF3896D32CF3895273AA99B27C14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b1:4c:c9:19:35:aa:79:73:4f:53:69:26:f5:
                    b8:c5:7d:8a:88:62:21:b7:b4:c5:c5:08:b2:b0:84:
                    0d:f3:4b:62:98:ff:ec:3c:f7:00:ad:af:78:7c:ee:
                    83:db:9e:b4:4c:2c:08:94:da:75:ce:9a:8b:6a:ac:
                    af:b7:db:73:b4:72:53:7e:da:b6:ff:4e:44:f5:52:
                    66:1d:fa:61:5d:b4:b9:e5:cc:dd:80:5e:5d:14:9f:
                    1f:a8:7c:4f:b5:81:bf:7c:39:a6:03:fa:ea:1e:71:
                    70:f1:ac:09:9f:29:97:f9:1c:fa:89:5a:f7:c3:b3:
                    e8:d3:1e:87:d5:44:d1:b3:48:c1:41:68:1c:29:75:
                    c3:ba:41:6b:9b:68:c4:d8:c9:9c:79:cf:e1:e3:a5:
                    c2:0f:ab:c1:55:d3:09:12:3e:32:d9:58:aa:a2:76:
                    f8:de:0f:16:4a:2e:54:20:5a:21:36:f0:04:f0:76:
                    19:cc:1a:69:86:31:b6:bd:29:ed:a3:d5:c7:3a:04:
                    bf:2e:1c:da:a4:93:22:cb:99:dc:88:45:d5:84:69:
                    37:4a:f6:e9:5d:cd:24:a4:8e:d9:89:56:bb:9d:79:
                    5f:a7:65:20:ce:13:b0:8a:6e:75:ae:e1:7d:fe:5c:
                    a7:45:a2:8c:73:3d:8e:b8:bf:8d:85:58:b6:d1:de:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BB:C2:D2:1A:2F:EF:38:96:D3:2C:F3:89:52:73:AA:99:B2:7C:14
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323132313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:9f:5c:16:44:65:57:0b:d9:5f:cf:08:a7:dc:ed:e6:a4:53:
         41:f1:88:5d:b1:e6:3e:6a:b2:50:ab:9d:f1:48:66:fe:7b:52:
         f1:6f:af:a2:e5:75:4e:bd:3d:78:f4:e2:5c:89:b5:f8:e9:22:
         65:d4:02:fc:18:4f:d8:6a:b7:8b:a8:25:a0:84:eb:c0:f6:6c:
         0c:cf:e3:0a:4e:9f:17:26:9f:f1:34:dc:76:4c:07:e8:8c:92:
         9a:da:95:8b:8b:63:97:50:28:80:03:e2:ff:34:e7:ce:83:eb:
         d8:6c:76:2b:cf:15:4a:0d:e6:67:7c:42:4e:64:b8:8b:4d:0f:
         ca:66:41:6f:cc:74:d0:86:a0:e8:fb:a3:85:5f:1d:67:44:c6:
         79:78:f0:d0:86:40:3f:e5:95:71:c3:1e:93:2d:5c:14:b7:b7:
         ae:83:dd:b5:f6:8b:c5:ee:f2:79:ad:3b:3c:02:38:cc:0a:56:
         d5:eb:40:41:91:39:36:72:92:c0:8d:d4:2c:97:21:f6:58:48:
         d6:18:ea:c5:5c:e6:d5:42:8e:9d:ec:5c:94:4d:ba:a8:4b:12:
         33:23:65:df:f1:4c:e2:3b:ce:08:3f:b9:eb:b5:df:61:86:93:
         35:0c:92:35:e6:2b:98:4d:75:b6:85:af:3b:bd:32:e3:97:a2:
         94:82:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----