Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203437363839.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e203437363839.roa (raw, json)
Hash identifier:          0hW2pyWmXPttv0NrWJ6r6zwkSyYFPyMZ7v2wZA+JKCQ=
Subject key identifier:   9A:B1:CC:9C:BB:E4:D6:4A:8A:96:29:6D:26:EF:14:58:1E:E8:5E:5C
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       6FDC04FDA4D411978DAB9BA348CA721925F99218
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203437363839.roa
Signing time:             Sun 12 Nov 2023 06:59:06 +0000
ROA not before:           Sun 12 Nov 2023 06:54:06 +0000
ROA not after:            Sun 10 Nov 2024 06:59:06 +0000
asID:                     47689
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:dc:04:fd:a4:d4:11:97:8d:ab:9b:a3:48:ca:72:19:25:f9:92:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 12 06:54:06 2023 GMT
            Not After : Nov 10 06:59:06 2024 GMT
        Subject: CN=9AB1CC9CBBE4D64A8A96296D26EF14581EE85E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:75:b8:83:48:de:0f:dd:b8:4b:aa:5a:4d:17:
                    6e:c3:15:76:29:33:77:fe:1a:cd:3c:40:59:0a:09:
                    85:43:ff:8d:8b:c8:47:1c:3c:e7:0c:89:09:7a:94:
                    de:15:f9:e1:26:ed:01:53:db:1b:78:61:f5:b5:86:
                    fa:38:cd:be:41:2f:84:ae:38:7c:ce:d5:50:7a:5f:
                    cd:5a:7f:c4:3b:33:d6:83:5f:03:08:ae:9b:35:34:
                    fb:77:a4:ec:da:39:5c:03:75:ee:a8:a1:11:a3:fb:
                    19:d3:7e:47:62:b9:ee:7f:7b:8e:98:da:c3:9e:b4:
                    81:90:69:93:34:d2:20:d0:c7:92:82:8e:2b:93:ef:
                    97:05:aa:ad:ba:9a:2b:0f:56:67:65:e9:52:17:19:
                    46:74:ec:ad:63:9e:ce:bb:76:c4:2b:a6:3c:57:b9:
                    cb:33:1a:b1:72:66:8d:2c:95:2a:68:df:43:6b:c7:
                    b7:d6:c5:41:58:26:7d:d3:d2:b7:2b:c9:06:23:30:
                    6c:0d:be:86:26:33:0e:1f:71:4b:0e:28:e0:f3:9e:
                    b1:01:fd:9e:fd:02:5f:42:37:64:de:43:51:94:2d:
                    30:d1:29:ea:52:1e:67:39:c4:4d:10:df:c4:97:0d:
                    3f:14:a7:d0:f1:eb:d2:92:c1:56:4d:b2:b9:58:ef:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B1:CC:9C:BB:E4:D6:4A:8A:96:29:6D:26:EF:14:58:1E:E8:5E:5C
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203437363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:70:ce:db:33:a9:d6:f0:29:d0:ce:83:be:53:ed:08:d7:e3:
         d4:af:10:97:fd:60:c3:9a:80:76:13:65:9f:78:03:c0:aa:b4:
         c0:d4:09:8f:e3:c5:e3:94:47:e5:4c:bb:ed:f9:bd:c8:9c:a0:
         51:a8:22:df:82:ee:98:ab:da:94:c2:3d:58:a2:e4:73:62:ba:
         36:24:8c:f5:5a:e5:61:d8:53:03:6f:fc:9f:ca:fa:b8:60:6a:
         e7:eb:bb:bc:f1:fe:cb:ae:b4:f7:02:35:d8:ac:be:ba:2f:9b:
         61:0d:bb:a8:fb:b5:6b:64:4d:0d:55:6e:99:18:b8:88:f7:e8:
         d5:73:5c:f3:ff:39:34:61:11:b0:0d:f4:b8:d0:24:7f:41:33:
         31:4e:81:ad:e8:ba:54:93:a8:11:da:f5:3d:b0:79:34:38:df:
         02:fc:75:e0:b5:f3:47:0f:74:94:b2:bf:cf:e1:96:25:7d:10:
         f5:10:9e:99:17:74:ea:96:01:af:e6:e0:17:28:42:8d:e9:81:
         72:ae:40:59:22:8d:b9:08:08:f8:98:b4:68:a0:c7:eb:c4:46:
         b4:aa:e0:01:85:9a:11:9f:08:49:82:d7:1b:b7:e1:89:c5:8f:
         d5:3a:ec:cf:71:93:f2:43:be:8b:fd:4e:22:a4:07:f0:e1:69:
         15:dc:bc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----