Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          JBbrNSs0c+NdqE9WVqyGy/xSBNyuYnziJbiL4x/pU/w=
Subject key identifier:   8B:E8:A7:AC:99:99:02:BB:2A:A0:01:7E:B7:66:D7:FC:28:97:C5:7F
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       4330F74CE2979559096495217F367CB2205DF9F2
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 13 Nov 2023 12:12:57 +0000
ROA not before:           Mon 13 Nov 2023 12:07:57 +0000
ROA not after:            Mon 11 Nov 2024 12:12:57 +0000
asID:                     50224
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:30:f7:4c:e2:97:95:59:09:64:95:21:7f:36:7c:b2:20:5d:f9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 13 12:07:57 2023 GMT
            Not After : Nov 11 12:12:57 2024 GMT
        Subject: CN=8BE8A7AC999902BB2AA0017EB766D7FC2897C57F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:45:93:9c:fd:1e:ea:fd:67:f8:54:99:92:
                    8f:f3:df:0c:26:86:08:71:8f:88:c4:7a:52:c3:81:
                    f6:14:76:8a:98:5b:c9:44:a2:67:76:b9:2d:58:90:
                    78:c9:bc:92:76:07:da:58:95:a5:22:36:b4:47:6d:
                    24:d4:43:45:35:9b:de:81:52:06:70:5e:28:18:46:
                    e4:4c:f2:d3:7f:a4:45:46:ad:4a:4e:11:09:6c:a5:
                    50:50:39:3d:e3:81:14:9f:5e:86:f4:1d:e3:f8:36:
                    5c:60:fe:3b:f7:05:69:02:91:6c:18:a7:ee:58:6d:
                    6f:5f:56:55:c2:6b:a7:bb:3c:cd:41:1a:88:81:8a:
                    f6:46:f5:e3:43:6a:4d:2f:3d:32:0f:19:95:71:33:
                    3d:1e:58:08:27:4c:51:3e:ec:aa:60:8b:3f:b9:db:
                    79:63:42:97:95:23:71:1e:39:af:6f:24:bd:57:ca:
                    f1:9a:01:9b:e4:9c:93:72:0b:24:c3:69:96:ac:2d:
                    53:10:bd:f0:2b:c3:c5:86:ba:c5:0a:ff:35:50:0c:
                    9a:09:05:37:bd:c8:a7:9d:eb:3f:e2:88:ba:f7:e0:
                    eb:17:3d:42:10:1a:b1:c0:fa:1e:09:c9:7a:f4:0d:
                    1a:3f:4c:b6:47:32:e3:a6:02:bc:c8:d8:fc:be:6a:
                    9c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E8:A7:AC:99:99:02:BB:2A:A0:01:7E:B7:66:D7:FC:28:97:C5:7F
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:8d:33:05:7e:2d:b0:f7:5b:d3:7f:3d:95:fe:17:d0:6c:80:
         35:b0:cb:5f:c6:b0:86:75:fa:62:47:25:ec:61:19:f9:86:6f:
         4d:d4:b5:05:17:12:41:c7:41:83:70:4a:52:78:45:fe:81:a7:
         24:b8:90:48:4b:d8:5a:12:b9:61:07:c1:98:ff:b3:17:ce:d0:
         a7:e6:67:79:16:46:cd:1f:5f:99:83:0b:51:72:d2:a5:89:ac:
         0f:2f:07:52:fc:9f:b2:b1:df:31:37:4d:22:56:bb:d8:3b:bf:
         8c:c3:7e:44:22:d2:f2:48:f4:35:ad:4f:64:8f:d5:de:38:36:
         3c:e0:64:45:bd:a9:39:35:b3:d9:13:e2:e6:3a:1e:a2:e6:9d:
         ca:ee:94:1b:63:22:47:33:51:54:f3:90:12:ce:d1:37:56:ad:
         9c:89:42:66:1e:fc:c0:a8:f6:05:77:82:32:08:5e:05:4b:20:
         14:5a:8a:99:9d:24:fb:0a:6d:34:04:bf:7a:f4:68:b7:e5:3e:
         2a:28:13:44:ad:37:ad:13:c0:15:8e:ca:6c:ac:9b:45:73:1f:
         8e:6d:52:37:e4:17:fc:4c:cf:da:bf:13:3a:05:5e:bb:97:87:
         25:ec:db:e5:34:04:15:ff:2e:ae:ef:69:a0:47:f1:76:0e:51:
         b8:16:84:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----