Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203530373535.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          lseETH3NzhWu+TwNs3QN0rktaukgVVE9Lu89vgT4EOg=
Subject key identifier:   9D:75:6B:59:25:09:24:01:AB:1D:23:12:2C:A8:A7:66:DE:0F:34:A3
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       4038D0115DFCAD2CF01FD9225354669241B029D4
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203530373535.roa
Signing time:             Sun 12 Nov 2023 01:46:02 +0000
ROA not before:           Sun 12 Nov 2023 01:41:02 +0000
ROA not after:            Sun 10 Nov 2024 01:46:02 +0000
asID:                     50755
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:38:d0:11:5d:fc:ad:2c:f0:1f:d9:22:53:54:66:92:41:b0:29:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 12 01:41:02 2023 GMT
            Not After : Nov 10 01:46:02 2024 GMT
        Subject: CN=9D756B5925092401AB1D23122CA8A766DE0F34A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:4d:31:07:fe:c4:30:41:f9:fd:26:d1:69:
                    f0:17:ad:20:13:cc:c7:75:1a:02:a3:c5:38:75:33:
                    eb:5f:19:d4:82:1e:e6:14:c3:53:fa:3b:d2:cf:66:
                    34:d2:b2:92:08:42:c5:0b:77:08:47:71:70:55:ec:
                    df:f3:07:2d:64:2d:85:c0:0e:9d:73:3d:49:90:67:
                    e2:8a:fb:20:d1:d7:91:e3:ee:92:88:47:6d:cf:65:
                    26:a5:a1:35:85:b8:ab:49:64:f2:8d:5a:fc:5f:af:
                    2f:13:70:2d:bb:e9:c3:09:c4:aa:7b:00:2f:69:27:
                    72:38:30:43:63:88:9c:9e:f8:0c:31:a0:4a:5b:06:
                    0a:67:50:03:cf:bc:07:31:cc:a3:c6:5a:2c:95:67:
                    15:5f:d6:e7:35:f4:0b:9e:c7:c6:8c:76:72:7b:84:
                    be:e7:10:94:8d:60:00:a2:2d:26:a3:17:2c:fc:a3:
                    7c:2d:47:a9:79:d2:ee:ba:b6:14:df:ef:aa:1c:1a:
                    d3:41:64:96:fa:d1:b0:56:94:7a:70:9f:b6:a6:38:
                    0a:e5:df:f6:c8:17:14:5c:02:54:52:73:0a:40:16:
                    57:09:b0:2d:70:5a:87:59:22:e1:a0:85:49:30:b3:
                    fd:1d:b0:ed:52:03:db:ee:a9:84:9a:d9:54:5b:50:
                    76:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:75:6B:59:25:09:24:01:AB:1D:23:12:2C:A8:A7:66:DE:0F:34:A3
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:14:9c:ad:dc:12:1b:7b:83:a2:96:c8:32:82:63:99:7d:6e:
         c9:b6:ff:e3:9a:07:70:62:02:64:6a:89:90:d2:9c:b9:85:46:
         eb:7d:a4:72:f4:12:81:78:02:9f:51:18:84:6a:71:f4:ca:b7:
         f9:9b:99:8d:28:0f:72:ab:f0:de:25:6f:a3:bf:3c:89:6e:ea:
         52:ef:3c:39:2a:8c:ae:db:19:63:d9:6c:da:f0:da:33:a2:1f:
         bd:98:b5:ed:e4:7b:6a:01:f0:7c:d5:f8:14:67:04:ad:b7:9d:
         3c:5a:70:a6:1e:7b:bf:42:50:10:d6:52:c2:e9:ae:a4:3f:b7:
         e2:d3:e7:d1:04:92:2b:61:98:56:5a:01:e1:e3:08:e4:71:05:
         97:a7:af:00:66:1d:74:7b:59:a3:41:46:01:61:a4:43:51:97:
         c6:08:f9:7a:a2:16:0d:64:fe:1c:9a:66:70:84:bc:5c:52:fb:
         d1:bc:67:74:f6:ff:2a:7c:3d:f6:60:2d:97:bc:8e:3d:e4:a3:
         d7:69:59:38:29:de:d9:f0:18:48:3c:f1:0a:a2:08:28:f9:50:
         39:3b:a5:15:7a:33:0e:94:a2:07:ef:1e:85:92:1e:9a:bb:d4:
         f8:37:d9:cf:77:9a:dc:00:28:bb:3f:be:3e:c9:22:fd:34:65:
         0a:88:b5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----