Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203438353831.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e203438353831.roa (raw, json)
Hash identifier:          glmE+EqmrN/1S6GRGaU2jO4Xvmo7GBNR3xnAELuAhOQ=
Subject key identifier:   97:4B:D0:62:F6:BB:3C:6C:FB:AF:CF:DE:EF:C5:CC:36:24:5B:B4:4B
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       33983914C6EFC6047FC34A2F65BEBAF50D7C6911
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203438353831.roa
Signing time:             Mon 13 Nov 2023 12:12:37 +0000
ROA not before:           Mon 13 Nov 2023 12:07:37 +0000
ROA not after:            Mon 11 Nov 2024 12:12:37 +0000
asID:                     48581
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:98:39:14:c6:ef:c6:04:7f:c3:4a:2f:65:be:ba:f5:0d:7c:69:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 13 12:07:37 2023 GMT
            Not After : Nov 11 12:12:37 2024 GMT
        Subject: CN=974BD062F6BB3C6CFBAFCFDEEFC5CC36245BB44B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:ec:09:ba:fd:92:6c:2b:36:67:bc:25:19:
                    85:39:34:ad:41:7a:06:71:f2:48:62:6d:cb:5e:30:
                    b7:75:11:6b:52:ca:b9:57:df:6d:18:78:7a:b9:9c:
                    63:8a:f8:c6:71:56:ee:5a:22:69:5b:6b:8b:06:70:
                    df:2b:d8:82:03:e5:86:dd:0a:3b:87:7d:55:9c:d2:
                    ee:2d:11:0b:4d:d9:86:77:d6:20:37:1e:a4:7d:93:
                    84:d7:db:9d:57:1a:c9:fc:0d:eb:57:69:3f:e6:9b:
                    37:f3:ca:83:6c:41:fd:9b:05:47:95:ba:09:3f:3e:
                    2c:ee:3c:b5:b7:48:ad:7f:dc:82:21:89:3b:08:3c:
                    1e:f2:55:55:a4:a2:f9:25:34:61:f6:66:bc:22:37:
                    01:45:87:a2:53:36:82:fd:f8:b8:dc:7b:2a:10:25:
                    c7:cf:6a:65:8f:dc:52:ef:05:56:10:fc:99:d4:62:
                    7b:4d:a4:61:da:e0:80:10:7b:a7:51:8e:c4:9a:81:
                    be:3f:c5:d2:d1:fa:f0:6e:18:92:7e:1b:d5:10:01:
                    ab:a0:3d:ea:37:06:d8:9d:a2:8f:f2:bf:22:60:48:
                    06:5e:dc:6e:ad:61:b8:d4:3b:dc:8d:b3:86:0b:df:
                    d4:ac:1d:2a:23:cb:57:ca:aa:bc:96:aa:57:87:bb:
                    60:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4B:D0:62:F6:BB:3C:6C:FB:AF:CF:DE:EF:C5:CC:36:24:5B:B4:4B
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:66:5d:3e:f5:65:20:bd:35:72:b0:3e:c2:53:ee:c6:3f:7d:
         ae:87:fc:bd:b4:d9:de:14:ae:2a:a8:90:1d:72:2e:43:ad:2b:
         e9:9c:ee:e5:ce:34:eb:3b:ea:6c:75:46:a9:91:15:ca:cd:09:
         c5:63:b2:61:af:3f:c6:5f:3a:17:4c:d0:29:70:98:63:94:18:
         7c:59:af:fe:b4:46:95:d0:bd:4e:0a:43:6f:b8:73:18:dc:1d:
         d6:5c:00:1a:55:99:b2:42:83:2b:0a:b1:8a:f4:d2:77:20:51:
         6b:49:17:88:18:3c:b6:e8:12:c2:4d:02:7a:71:c7:53:cf:81:
         da:5b:2c:50:85:79:63:4b:69:a5:f0:89:0a:04:b6:1c:99:98:
         a1:f6:2a:44:86:56:59:ea:b0:f0:cb:d8:11:ac:e1:ae:5c:de:
         ab:73:78:05:10:05:30:7f:47:60:f8:07:a6:66:5f:57:a8:1c:
         4d:46:29:fd:e5:7e:0b:2e:36:02:c5:30:cb:19:24:9c:0d:3c:
         7d:1a:51:6c:b2:6d:07:92:ca:be:c2:e0:ad:06:3c:d0:0e:d1:
         82:fd:4d:01:4c:e5:ee:07:06:94:63:0d:74:28:1c:a7:6f:a3:
         68:40:63:3b:87:f8:c4:d8:0b:4a:11:e3:46:98:3d:de:5b:fd:
         2a:fe:55:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----