Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323132393334.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323132393334.roa (raw, json)
Hash identifier:          7ubuYFHyfB0j9tgmByYURtgMlH30LxK5tPJxJL81mMQ=
Subject key identifier:   60:20:A4:22:CA:7C:9D:FD:76:3D:7D:4D:9E:BA:DA:00:CA:6E:97:7D
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       2EC010A3ACBC5678BC0362211CCD2E59429D25BE
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323132393334.roa
Signing time:             Sun 12 Nov 2023 07:00:24 +0000
ROA not before:           Sun 12 Nov 2023 06:55:24 +0000
ROA not after:            Sun 10 Nov 2024 07:00:24 +0000
asID:                     212934
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c0:10:a3:ac:bc:56:78:bc:03:62:21:1c:cd:2e:59:42:9d:25:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 12 06:55:24 2023 GMT
            Not After : Nov 10 07:00:24 2024 GMT
        Subject: CN=6020A422CA7C9DFD763D7D4D9EBADA00CA6E977D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:e4:a2:3d:59:24:c8:11:ae:e3:22:c7:bf:
                    11:02:0f:f9:92:58:6f:64:3b:b4:45:01:07:a3:fe:
                    6e:04:9d:28:d5:4e:09:e0:cb:00:92:3d:66:ac:83:
                    db:d9:ff:a7:15:e1:70:87:bf:e4:78:91:1f:cf:ca:
                    0f:90:32:2e:15:e5:9a:ba:5e:f9:ab:b0:e9:64:9c:
                    43:33:57:8b:d2:fa:70:92:cf:f3:28:43:69:34:29:
                    07:ca:16:68:6c:9d:ef:a5:ca:0b:d0:f4:14:17:2e:
                    a5:84:a9:03:d2:47:7f:32:73:72:67:3c:b4:22:ce:
                    96:1c:7b:b8:c0:05:a3:ec:54:2b:9e:46:85:60:0c:
                    d7:85:76:f4:56:6d:fa:30:ec:ee:a5:8f:9d:80:82:
                    81:88:c5:27:19:7b:6d:52:15:fa:46:7a:64:c0:74:
                    d3:f8:bc:52:f0:48:0d:31:89:31:45:3b:e9:26:d6:
                    88:8f:f9:1b:65:58:81:e8:94:42:e4:98:2a:2d:4b:
                    8c:2a:78:e6:16:f7:cb:c6:03:b1:fe:4f:05:7b:17:
                    89:fe:be:a4:0d:93:01:2f:2f:d6:6b:d1:b8:04:0a:
                    e5:99:f4:ef:27:26:e6:24:63:62:47:39:54:e4:eb:
                    e4:56:67:1c:61:cd:d3:e6:2d:c6:eb:0d:f7:b7:4f:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:20:A4:22:CA:7C:9D:FD:76:3D:7D:4D:9E:BA:DA:00:CA:6E:97:7D
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:6b:27:c6:b4:02:cf:69:4c:ab:3f:ba:96:9b:bc:3e:46:e7:
         3c:43:04:da:af:ae:e1:94:be:d4:74:a9:75:90:5f:41:51:d5:
         37:a1:ae:78:99:a1:28:06:67:80:91:54:c4:bc:1e:b5:0b:7b:
         e9:25:e7:ac:e2:dd:c1:6e:5d:2f:d0:dd:91:ff:6e:d8:51:44:
         a0:cc:6e:5f:02:76:0a:d3:a2:06:71:17:2f:12:28:94:45:20:
         d4:07:88:09:6e:9a:0b:fa:98:ac:62:66:4f:c2:57:6b:a0:0c:
         1a:fc:f6:f4:3c:7f:5c:eb:24:18:05:b2:60:a1:0d:22:77:47:
         97:fb:98:4c:90:10:b9:0d:72:4b:03:85:1e:d3:ba:00:8d:8d:
         2f:e0:f8:dc:8e:42:26:98:4f:6c:f5:41:30:8f:c6:90:cb:1d:
         3e:57:3b:cd:bb:e6:c5:2a:c2:12:b7:9a:87:10:bf:ef:9b:a0:
         8c:9b:e7:37:0a:e9:f9:0e:08:a2:e7:ab:95:e8:72:cb:c1:aa:
         0b:02:e8:1b:e5:55:20:b2:a0:f4:84:b1:82:2e:9e:1a:ef:14:
         5a:2a:31:8f:77:bd:bc:e7:43:bd:c0:84:0f:23:54:a9:e3:32:
         91:49:14:8e:bf:9d:98:12:2f:ec:b2:13:65:b7:5e:a4:b4:1a:
         b1:9d:35:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----