Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa
File:                     326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa (raw, json)
Hash identifier:          vA54r+KOp5+PscS1XOWAUJZ8wHBBIy0uKiwt+tVl7WQ=
Subject key identifier:   F9:3C:5E:46:E2:10:D7:3C:96:5B:CB:E9:6A:C7:F6:A0:58:F2:40:15
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       13092371C5591FFAEF8C4E19DE7EF98A5D4D4745
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa
Signing time:             Thu 07 Mar 2024 16:12:42 +0000
ROA not before:           Thu 07 Mar 2024 16:07:42 +0000
ROA not after:            Thu 06 Mar 2025 16:12:42 +0000
asID:                     215365
IP address blocks:        2a14:7c0:1000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:09:23:71:c5:59:1f:fa:ef:8c:4e:19:de:7e:f9:8a:5d:4d:47:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar  7 16:07:42 2024 GMT
            Not After : Mar  6 16:12:42 2025 GMT
        Subject: CN=F93C5E46E210D73C965BCBE96AC7F6A058F24015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5e:d0:3f:5a:3b:75:40:ef:e9:8f:28:03:4a:
                    51:f0:9e:56:41:e7:9c:d2:e5:5e:4f:ff:4f:80:50:
                    f5:40:ab:77:d7:24:a8:bb:1a:82:af:14:47:e7:17:
                    cf:4f:1f:69:f1:ab:99:42:c2:77:fc:2e:8a:72:dc:
                    79:70:2b:c4:bf:1c:26:17:6f:80:b9:3e:bb:35:12:
                    76:f9:1a:f0:fe:59:d1:74:a7:a5:38:cd:ee:8c:8b:
                    fd:25:f3:2d:73:66:49:ef:e3:6e:b0:19:d5:91:ea:
                    d1:9e:18:55:9f:1b:15:9a:37:45:ba:a3:18:b8:79:
                    f1:fa:a0:c5:81:d1:f9:ff:fb:89:3f:a7:41:0e:15:
                    35:04:eb:90:c3:6c:a6:5c:2d:8a:ac:10:2b:d2:a2:
                    40:66:cc:77:20:47:7a:12:37:a4:20:8e:8e:2e:d3:
                    1a:94:3f:7f:12:ac:e1:39:b5:3b:60:f1:95:0a:f3:
                    de:e9:42:b1:1e:65:29:58:5e:2a:8e:b9:3c:23:41:
                    27:2d:91:bf:49:b8:7c:0d:ad:cc:18:e3:8f:d1:fa:
                    7e:fc:4a:0e:db:82:74:38:ef:ef:44:8b:21:eb:0e:
                    e7:34:07:76:cf:c9:bf:6f:5d:7d:36:94:26:9d:49:
                    41:06:8c:a3:37:3a:94:3d:a7:73:c7:d8:bf:a7:22:
                    dd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3C:5E:46:E2:10:D7:3C:96:5B:CB:E9:6A:C7:F6:A0:58:F2:40:15
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:1000::/38

    Signature Algorithm: sha256WithRSAEncryption
         36:bd:09:1b:0d:28:ce:8f:fb:ce:5e:30:60:27:73:d9:de:c8:
         2c:26:6b:49:fd:5e:2b:5d:39:92:97:9c:f3:bf:e0:8b:18:16:
         33:b8:38:bf:bc:22:4c:ae:71:ed:d7:d4:59:ff:2e:da:73:e0:
         4a:d4:eb:9b:ea:1b:4c:d1:26:20:6a:ca:27:85:d3:d9:ea:7a:
         3d:f7:0e:ea:c7:cd:d7:ef:4b:46:3c:05:0d:b2:44:73:1f:2b:
         30:31:06:25:ee:e8:d7:6d:a5:80:c6:99:1b:9f:43:1c:1e:25:
         f6:86:fd:91:48:a0:b7:da:24:88:d4:32:4e:a9:00:72:03:e5:
         8e:58:b2:85:fd:58:38:7c:05:e3:39:f0:74:82:fc:8b:0e:52:
         cc:a9:00:d1:cb:4b:d4:50:ce:e1:d8:6f:3e:db:7c:79:03:fa:
         50:64:86:e3:0b:ca:15:55:cd:42:b3:61:7f:03:bc:e6:44:55:
         4a:a2:ef:ab:f6:d9:f5:43:28:ef:9a:9a:85:2e:c2:9c:b4:06:
         3a:d4:e0:8f:ae:16:55:45:d5:d7:bf:e8:9d:24:bd:a6:aa:86:
         b9:c8:08:df:bf:1f:81:b1:64:29:8b:05:de:18:e1:f3:4d:87:
         a6:e0:05:47:77:00:44:da:34:8b:87:75:a7:98:e6:fd:9f:e4:
         93:47:fe:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----