Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a613030303a3a2f33362d3336203d3e20323035333239.roa
File:                     326131323a646434373a613030303a3a2f33362d3336203d3e20323035333239.roa (raw, json)
Hash identifier:          2S9nufJWqUBEwgdnuiM+Cj+9Pd3783oZpFijFGx0758=
Subject key identifier:   1D:36:16:07:0F:2F:51:2E:F9:82:6F:E8:B8:01:81:F3:E3:C7:7A:D7
Certificate issuer:       /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial:       24091DA19C8E6287367F882C370DE2B6AD8F5931
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a613030303a3a2f33362d3336203d3e20323035333239.roa
Signing time:             Fri 13 Sep 2024 20:09:37 +0000
ROA not before:           Fri 13 Sep 2024 20:04:37 +0000
ROA not after:            Fri 12 Sep 2025 20:09:37 +0000
asID:                     205329
IP address blocks:        2a12:dd47:a000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:09:1d:a1:9c:8e:62:87:36:7f:88:2c:37:0d:e2:b6:ad:8f:59:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
        Validity
            Not Before: Sep 13 20:04:37 2024 GMT
            Not After : Sep 12 20:09:37 2025 GMT
        Subject: CN=1D3616070F2F512EF9826FE8B80181F3E3C77AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:94:d8:b8:ed:03:8d:16:b5:18:44:b1:9b:fa:
                    82:5b:90:6e:47:6e:16:7f:8d:66:d4:a4:14:b3:fd:
                    67:2d:09:09:5b:7f:c1:9b:4b:81:8b:fc:20:7c:ba:
                    bb:cf:5c:5c:67:fd:c6:e9:bf:95:38:fb:d1:34:bd:
                    c6:4a:87:b2:89:fa:e8:2c:3d:b5:86:d4:40:70:36:
                    32:36:c3:7a:fd:6f:f3:d1:38:83:3b:ed:39:2b:ff:
                    63:77:53:8d:8b:c9:56:d9:ed:bc:1c:ac:bb:cd:89:
                    db:a8:16:e6:ee:e4:09:8f:72:09:5f:b6:a2:a4:0e:
                    51:ee:75:bb:18:38:ed:bb:c0:a9:1c:9b:9d:88:20:
                    db:3c:d1:a6:e2:4c:86:1a:01:ad:7c:6b:d7:79:ca:
                    9f:12:a4:79:7d:bf:60:78:ba:7e:8f:c0:e8:89:45:
                    48:92:ba:08:f7:5d:2e:e1:c6:1e:c1:58:ce:5c:c6:
                    9e:03:08:52:92:2b:9b:cc:2b:e0:fb:b4:c7:a1:39:
                    80:94:f6:66:7e:ef:5a:6a:ff:4c:1a:b2:c5:a9:fa:
                    db:6f:b7:02:dc:a4:81:35:55:ea:b8:34:16:63:21:
                    66:c8:b0:22:c1:ad:90:4b:b3:c9:13:e1:15:00:95:
                    0f:60:d8:04:c7:5e:24:c2:28:2f:e4:5b:3c:bc:e0:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:36:16:07:0F:2F:51:2E:F9:82:6F:E8:B8:01:81:F3:E3:C7:7A:D7
            X509v3 Authority Key Identifier:
                keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a613030303a3a2f33362d3336203d3e20323035333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ec:db:a1:4f:84:08:85:d1:e6:44:b1:3b:6e:c5:01:74:8b:af:
         6e:76:67:38:f9:2d:e6:93:0a:12:6e:8d:9b:75:e0:3a:88:f9:
         9e:0f:6a:71:57:7f:48:42:21:c5:eb:c0:f6:f3:03:a9:b1:34:
         58:87:fa:dd:b0:9b:1c:1f:dc:53:eb:9c:c5:a1:ec:c2:32:96:
         da:35:ce:94:3e:8e:58:6c:9a:50:ec:28:fb:e6:96:8b:61:49:
         e4:5d:bd:ca:97:95:79:b0:b9:6a:be:2f:cc:63:87:86:67:be:
         38:4e:06:af:fd:e7:96:33:23:d7:07:58:d4:ae:26:42:dc:19:
         cb:ab:fa:8a:df:96:ca:ca:a3:28:db:f9:24:de:8f:90:6e:67:
         20:e3:ea:02:86:36:fa:63:05:6c:79:92:4a:31:ac:7d:83:8f:
         6f:87:e3:94:dc:39:38:c2:86:8e:1e:36:91:1f:31:87:ac:66:
         58:0f:52:e3:30:09:37:82:7e:d3:9a:3b:67:ed:ad:d7:6b:dd:
         27:d3:9b:a0:8e:43:36:2b:4c:50:dc:cd:51:e7:59:08:ea:48:
         07:b4:ed:43:1a:de:54:b4:d7:70:f0:ad:50:2a:39:79:b2:e9:
         51:db:89:28:42:85:84:bf:b1:7f:2f:1e:4b:05:44:7d:3c:48:
         8b:bd:07:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----