Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203539363738.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e203539363738.roa (raw, json)
Hash identifier:          vejcMVDFYE5DrAotvWkl38ml2RRCmIUM7ZRvRpXE9kc=
Subject key identifier:   6B:47:6D:3C:6A:55:BC:84:40:DA:94:C4:23:BC:9B:04:FA:A8:CB:D3
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       4B3989D895CDF246AD77809CF186FC6E29A85163
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203539363738.roa
Signing time:             Fri 17 Nov 2023 03:05:30 +0000
ROA not before:           Fri 17 Nov 2023 03:00:30 +0000
ROA not after:            Fri 15 Nov 2024 03:05:30 +0000
asID:                     59678
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:39:89:d8:95:cd:f2:46:ad:77:80:9c:f1:86:fc:6e:29:a8:51:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 17 03:00:30 2023 GMT
            Not After : Nov 15 03:05:30 2024 GMT
        Subject: CN=6B476D3C6A55BC8440DA94C423BC9B04FAA8CBD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:27:f3:4e:32:59:34:b6:9d:03:58:d3:e0:50:
                    01:77:84:02:4b:3e:6b:cd:4f:05:fb:b1:ac:74:b0:
                    09:e0:e1:c6:08:28:49:be:cc:62:51:e6:19:d2:22:
                    e1:40:75:b5:c4:6a:56:03:6c:7d:e9:de:a7:24:7c:
                    5c:7c:61:27:4e:f3:94:8f:f5:e9:21:9d:78:72:c8:
                    71:b2:58:0c:7f:45:f6:ff:7b:d2:9b:db:e5:ef:ac:
                    20:05:27:4a:5b:86:f7:b3:e4:62:48:fa:72:57:c7:
                    1f:21:e6:17:79:9c:a8:5e:27:31:80:65:1e:58:6e:
                    d6:3a:43:15:e4:97:4a:a4:50:84:8c:d4:e1:80:de:
                    b0:37:53:2c:e6:b7:e8:88:92:df:06:7b:92:91:bb:
                    42:28:42:1b:e7:f2:a4:87:fc:c1:57:09:10:e7:05:
                    88:9f:77:d7:5d:19:44:57:d7:98:6f:e8:e0:98:0f:
                    6f:a3:0d:71:2a:c4:07:c3:a1:82:fe:eb:fa:3c:2a:
                    ff:1a:5d:66:c9:d6:4c:28:ee:fa:93:86:b0:c5:bf:
                    9f:53:ba:9c:c2:83:07:a0:be:ef:35:83:0c:91:64:
                    c6:cc:05:9f:33:1d:1f:d5:6b:38:7f:5f:54:5c:4b:
                    df:57:8c:c1:14:f5:a8:97:d4:ae:41:28:0d:d0:8d:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:47:6D:3C:6A:55:BC:84:40:DA:94:C4:23:BC:9B:04:FA:A8:CB:D3
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:08:d3:fa:da:c0:7c:ee:bf:7f:90:ba:35:bf:61:c1:00:c3:
         37:d2:87:e4:53:96:3e:6f:bc:b0:af:a9:e9:86:57:16:28:6f:
         38:ea:2e:08:a1:4f:cf:ea:85:2d:d8:c9:a5:84:84:95:11:ce:
         7b:54:62:e9:4a:5f:81:79:bd:66:30:dd:c1:c9:ba:61:18:8f:
         00:73:e3:97:62:5c:3b:b1:99:c6:bb:d4:3f:23:a3:f0:0c:bb:
         f1:9e:82:9d:43:3e:80:e7:26:6b:f7:8a:17:f2:d9:72:2d:6a:
         7e:d0:8b:41:a4:b4:b7:e5:cd:93:7f:e9:af:65:15:f8:3c:da:
         b9:3c:1f:88:49:5c:f1:e3:ac:53:93:98:81:08:4c:bb:27:b7:
         00:e1:5e:f8:fb:32:ab:3b:fa:9a:36:20:be:ab:ac:89:8a:bc:
         81:04:a6:bb:8a:58:6b:d3:68:55:41:b0:a9:61:7a:ef:c3:4d:
         6e:d0:f7:d9:01:69:3d:c8:6c:df:c1:fb:d0:34:7e:d6:92:c0:
         b6:9d:e8:6c:b6:fa:da:87:a8:38:ba:b6:69:4c:c6:6f:eb:5e:
         0f:40:23:2c:26:59:c8:84:50:11:28:0f:35:7f:07:6a:7d:e6:
         5d:61:42:c6:cf:d0:d0:90:d3:1b:33:bc:98:bf:ec:61:40:a6:
         36:ec:61:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----