Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323136313133.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323136313133.roa (raw, json)
Hash identifier:          QtKOY3PVqnopnnhztWw2JJxKX38T+j192Jdi5lLNMqQ=
Subject key identifier:   99:41:DA:68:23:62:20:7B:EB:D9:9C:31:13:B1:B8:50:12:CC:3E:A4
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       1622E9A50BAC46B0C4D451C4E4AF86F3E234AAE1
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323136313133.roa
Signing time:             Mon 20 Nov 2023 22:49:02 +0000
ROA not before:           Mon 20 Nov 2023 22:44:02 +0000
ROA not after:            Mon 18 Nov 2024 22:49:02 +0000
asID:                     216113
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:22:e9:a5:0b:ac:46:b0:c4:d4:51:c4:e4:af:86:f3:e2:34:aa:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 20 22:44:02 2023 GMT
            Not After : Nov 18 22:49:02 2024 GMT
        Subject: CN=9941DA682362207BEBD99C3113B1B85012CC3EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:f5:66:dd:3a:e6:25:75:2e:0b:eb:58:96:
                    16:e1:6d:c6:63:22:63:38:1a:27:e5:18:1c:6d:93:
                    cc:c9:44:0b:a2:d8:a6:c1:6c:f7:a1:52:f4:8e:7c:
                    32:33:9e:7e:2c:7e:54:be:25:d7:04:18:2d:cb:5e:
                    1a:2f:ca:10:66:00:dc:05:e1:8e:39:d0:2c:76:ef:
                    27:2c:10:b2:f8:4e:7b:fc:12:a9:82:8a:37:dc:d1:
                    b4:f5:d4:eb:f0:0a:4f:51:ca:2b:0e:4c:3b:d8:b7:
                    0f:3e:3e:3e:aa:47:eb:48:46:06:b2:8c:6d:00:02:
                    26:8f:60:6a:66:8d:f2:e8:dd:f1:62:82:c7:08:96:
                    c5:8d:62:e1:2b:f8:b0:56:d6:b0:8d:10:07:c0:11:
                    91:00:fa:66:dd:e2:d5:ae:fa:59:2e:03:69:cc:19:
                    ea:c0:b4:e2:78:51:06:7d:df:18:b5:89:d9:03:c3:
                    41:db:b9:b0:0f:9c:78:0b:03:a3:31:e0:c9:8a:ba:
                    2a:db:84:ca:4f:f3:87:7b:35:fb:7b:07:e3:49:64:
                    6e:6a:c5:d7:a6:f6:ad:ff:ca:bf:f3:d6:69:8e:d8:
                    24:19:43:c4:cd:1b:cc:dc:a4:fe:20:53:17:18:25:
                    2e:d8:9f:d9:e0:55:10:2d:c0:03:7a:22:7b:fe:4e:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:41:DA:68:23:62:20:7B:EB:D9:9C:31:13:B1:B8:50:12:CC:3E:A4
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323136313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:62:fa:d4:21:d2:73:f8:ff:ed:4d:59:79:ea:c8:e2:19:2e:
         d6:f3:bf:dc:d4:fe:a0:4e:bc:14:b9:42:7b:ab:a1:fe:43:20:
         6d:b0:1a:4f:ab:16:88:cc:37:91:f8:d9:34:f7:cd:4c:b1:6a:
         e0:c2:59:30:bc:3c:bc:3d:7f:d9:94:d1:71:35:54:f8:28:d6:
         e9:64:37:be:21:4d:0e:a6:82:f8:a8:99:cf:56:9b:72:5a:ec:
         9e:6a:89:e7:0f:3f:e4:55:63:89:8d:85:89:4e:04:cf:8b:3b:
         91:c3:ff:d6:52:fb:d2:2c:c0:f6:ab:33:58:a5:39:bb:b1:21:
         2e:5c:3d:11:95:9b:5b:45:27:d7:ac:19:aa:96:5d:7a:47:e4:
         f3:f1:49:a6:32:03:10:0d:9e:77:0f:25:f1:82:83:65:1e:77:
         66:ae:74:d0:eb:e2:4a:82:96:8e:7d:5f:33:76:74:44:d3:af:
         db:71:2a:d0:24:08:86:03:27:52:7e:b3:aa:9a:54:23:ea:80:
         9e:b6:31:9f:92:d3:d7:f0:dc:ef:0c:76:ca:da:89:50:02:69:
         10:85:a2:17:8c:d2:30:ea:04:a4:e4:b4:68:18:f8:95:f7:ad:
         6b:25:b4:59:76:28:92:3e:ad:5e:f2:27:17:be:2a:08:2d:9f:
         58:1d:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----