Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203630333130.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e203630333130.roa (raw, json)
Hash identifier:          Z0VuK2VtyX5gvY/Ng64/bq61QHHS8ARp2OtQ08WKs5c=
Subject key identifier:   6A:F8:AB:FD:99:E2:56:12:23:CE:E7:69:0A:A0:1F:65:E2:59:D4:BD
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       52EC018586EC4545BAFC2732096AF908FD24D9B7
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203630333130.roa
Signing time:             Mon 13 Nov 2023 12:13:35 +0000
ROA not before:           Mon 13 Nov 2023 12:08:35 +0000
ROA not after:            Mon 11 Nov 2024 12:13:35 +0000
asID:                     60310
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ec:01:85:86:ec:45:45:ba:fc:27:32:09:6a:f9:08:fd:24:d9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 13 12:08:35 2023 GMT
            Not After : Nov 11 12:13:35 2024 GMT
        Subject: CN=6AF8ABFD99E2561223CEE7690AA01F65E259D4BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f8:cb:33:46:8b:68:47:34:55:23:ca:86:51:
                    97:85:ec:ca:d2:6a:cc:9d:f1:69:07:7e:d5:47:22:
                    47:ef:61:a2:77:93:4d:b6:2f:1b:86:f6:d9:56:0b:
                    cc:c7:6e:16:f3:a8:bc:59:36:55:4f:85:69:b6:e1:
                    4f:35:1f:a6:e0:2f:0e:12:0e:3a:72:97:9b:55:9d:
                    e0:c2:a1:a6:3a:4a:07:8f:b5:53:f7:63:3b:e3:b9:
                    0d:4a:b4:51:39:5f:2b:5d:2e:3e:b3:8c:45:d4:5f:
                    d6:e7:ef:12:4b:e1:30:1d:c5:b2:07:7f:3a:16:00:
                    25:72:c8:38:e4:68:b0:8b:55:05:f5:4f:76:f0:88:
                    10:c2:30:2b:34:8c:57:75:1c:6a:d9:54:d5:62:91:
                    01:98:7e:c8:9a:ed:8f:e1:29:00:ec:a6:1d:54:ef:
                    b4:46:5c:42:04:62:a1:b8:1b:a3:f3:45:9c:bc:85:
                    6c:8f:93:df:19:b7:87:a0:f6:04:37:bf:c7:ec:fa:
                    0a:aa:95:6e:a9:fc:83:fe:c9:36:31:28:6e:da:73:
                    9f:c6:ee:68:97:75:68:d5:af:45:ea:31:a3:84:7f:
                    3c:8f:13:da:b6:04:e9:18:1b:ce:20:13:ab:78:5d:
                    1f:4e:0a:a5:06:dd:15:31:ab:76:69:99:cd:30:43:
                    4a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F8:AB:FD:99:E2:56:12:23:CE:E7:69:0A:A0:1F:65:E2:59:D4:BD
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203630333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:00:ba:6d:6e:33:0d:0b:e8:16:c8:35:db:8c:6a:c0:15:c3:
         f5:d6:c2:f5:70:62:77:a1:8c:07:6d:37:0b:bd:ef:cb:b8:66:
         8d:7d:dc:29:47:fc:37:5b:62:4c:90:7f:08:bb:61:a0:b4:1c:
         16:1d:e1:c7:1e:12:1b:68:bf:04:59:e7:0d:41:af:25:72:55:
         53:26:67:81:34:27:c5:a5:1a:a3:6e:36:c0:6d:2c:f4:e0:61:
         17:45:7f:86:da:40:f2:e7:7d:9e:48:40:ed:e1:41:e6:55:8a:
         42:25:b4:95:9a:67:98:fb:dd:f1:bc:c8:09:f1:0c:34:06:7c:
         de:8c:7a:ff:b4:65:69:20:0f:72:72:27:f6:7d:dc:ca:61:e1:
         7d:37:70:de:d5:4d:9b:d9:be:a8:27:14:8d:5a:cf:8e:59:3b:
         be:db:73:4d:f0:5a:9e:b6:c8:37:0a:39:c0:db:65:79:f1:8a:
         f5:98:ae:ce:a5:11:3c:f8:d6:99:22:c2:94:cd:fb:e5:7f:f5:
         c9:15:27:2a:80:6c:26:d7:96:49:f5:0f:7b:57:c2:e7:4f:c0:
         2d:52:1c:1f:bf:04:ec:b7:bc:e1:ad:de:81:b0:e7:0d:8b:73:
         ee:4d:30:66:75:50:6b:69:97:6d:15:9a:1f:2b:68:1a:80:ef:
         e3:f5:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----