Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e203231373338.roa
File:                     326131343a3763313a623030623a3a2f34382d3438203d3e203231373338.roa (raw, json)
Hash identifier:          vTvmsg2g7X9Ikfa+xGzpd+LCO6byKghAAeRhdjpjfxA=
Subject key identifier:   6A:07:55:57:12:B1:A1:71:C3:BF:E1:B4:B5:6F:9A:43:52:1D:3E:BB
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       0B59BBE35240235C985CED315C8D2758E6B9A559
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e203231373338.roa
Signing time:             Sun 17 Mar 2024 20:46:10 +0000
ROA not before:           Sun 17 Mar 2024 20:41:10 +0000
ROA not after:            Sun 16 Mar 2025 20:46:10 +0000
asID:                     21738
IP address blocks:        2a14:7c1:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:59:bb:e3:52:40:23:5c:98:5c:ed:31:5c:8d:27:58:e6:b9:a5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 17 20:41:10 2024 GMT
            Not After : Mar 16 20:46:10 2025 GMT
        Subject: CN=6A07555712B1A171C3BFE1B4B56F9A43521D3EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:0e:4a:50:86:e1:7d:07:03:6e:07:71:aa:
                    4e:d9:4f:c8:b8:4e:7a:01:8b:ff:30:9d:e0:39:06:
                    70:65:12:d5:c3:f4:14:07:a1:36:3d:a4:e0:e8:bc:
                    83:60:ba:88:32:e7:d8:5b:89:97:75:4c:14:91:e4:
                    91:ca:49:ce:e9:89:09:24:0e:dc:ee:1c:89:c3:5f:
                    b6:5b:67:f5:57:37:d5:ae:30:13:0d:2a:27:49:62:
                    7b:f8:4f:65:4a:b7:05:d4:46:5a:e7:af:54:63:e7:
                    81:31:bb:73:e8:b9:2e:b3:c4:4b:c3:57:9d:1c:2f:
                    24:83:1d:ef:10:9d:e3:64:c0:96:34:e5:b9:11:ce:
                    ef:63:51:ce:1b:78:9b:20:22:07:c0:59:b9:a7:aa:
                    7a:22:92:30:0a:2d:87:f5:ec:81:9a:ed:47:fe:40:
                    2e:b8:cf:8c:d0:97:78:6d:9d:d8:84:54:fb:63:0b:
                    cb:60:ae:cc:d3:0f:91:a7:d2:56:5c:c2:f8:b5:3a:
                    25:bb:81:d7:33:88:22:0f:44:54:db:8c:4a:30:d7:
                    46:db:42:63:f3:dd:ae:e3:d2:f4:de:4c:00:2d:35:
                    1e:c2:3d:9e:56:3b:8d:ca:f6:ab:da:77:fb:86:76:
                    d1:4a:f5:8f:50:dd:37:c0:cb:19:cd:61:c8:7c:ac:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:07:55:57:12:B1:A1:71:C3:BF:E1:B4:B5:6F:9A:43:52:1D:3E:BB
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e203231373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c1:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:6a:70:7a:91:de:b8:0a:78:89:ad:7c:11:44:ea:c6:5f:aa:
         95:42:af:a2:99:6d:6c:43:cd:a9:45:75:81:80:66:4d:9e:fe:
         97:86:ad:c8:e3:ad:6a:28:02:e8:a2:10:7d:6b:14:e2:37:b1:
         73:94:0b:7a:33:3a:bd:95:41:ed:01:d9:2c:4c:df:0c:0d:b3:
         b0:1d:0d:5f:c2:d1:56:d9:38:20:ce:14:92:52:42:1e:9c:9f:
         f7:bc:fe:42:7a:59:11:dd:61:6b:03:9f:e7:b9:49:3e:9f:0a:
         f8:19:7b:dd:b8:e9:2f:4d:39:34:81:cb:ab:02:40:a7:b3:7e:
         48:a9:99:99:a1:0a:3a:d8:4c:d1:24:68:08:da:55:24:b9:fc:
         ad:46:2e:08:90:5d:9a:47:12:ba:c6:84:9e:98:73:d2:8e:53:
         50:b4:2e:12:6e:4f:02:52:b3:66:24:f1:f3:63:18:df:52:e3:
         9f:a8:88:92:7e:ee:8f:8d:53:7f:3e:99:dc:9c:6d:10:3b:f8:
         87:fb:6d:4e:99:43:8a:77:e6:59:b1:a6:63:78:82:75:28:5e:
         f2:92:8f:70:cd:71:2c:14:72:b5:8d:e8:ab:a8:11:23:94:bd:
         42:f7:1f:65:e1:af:57:8f:5e:f9:24:64:02:6a:80:79:5f:78:
         a8:47:35:db
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUC1m741JAI1yYXO0xXI0nWOa5pVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAzMTcyMDQxMTBaFw0yNTAzMTYyMDQ2MTBaMDMxMTAvBgNV
BAMTKDZBMDc1NTU3MTJCMUExNzFDM0JGRTFCNEI1NkY5QTQzNTIxRDNFQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+2Q5KUIbhfQcDbgdxqk7ZT8i4
TnoBi/8wneA5BnBlEtXD9BQHoTY9pODovINguogy59hbiZd1TBSR5JHKSc7piQkk
DtzuHInDX7ZbZ/VXN9WuMBMNKidJYnv4T2VKtwXURlrnr1Rj54Exu3PouS6zxEvD
V50cLySDHe8QneNkwJY05bkRzu9jUc4beJsgIgfAWbmnqnoikjAKLYf17IGa7Uf+
QC64z4zQl3htndiEVPtjC8tgrszTD5Gn0lZcwvi1OiW7gdcziCIPRFTbjEow10bb
QmPz3a7j0vTeTAAtNR7CPZ5WO43K9qvad/uGdtFK9Y9Q3TfAyxnNYch8rFrNAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUagdVVxKxoXHDv+G0tW+aQ1IdPrswHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMTNh
NjIzMDMwNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzczMzM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKhQHwbALMA0GCSqGSIb3DQEBCwUAA4IBAQCZanB6kd64CniJrXwRROrG
X6qVQq+imW1sQ82pRXWBgGZNnv6Xhq3I461qKALoohB9axTiN7FzlAt6Mzq9lUHt
AdksTN8MDbOwHQ1fwtFW2TggzhSSUkIenJ/3vP5CelkR3WFrA5/nuUk+nwr4GXvd
uOkvTTk0gcurAkCns35IqZmZoQo62EzRJGgI2lUkufytRi4IkF2aRxK6xoSemHPS
jlNQtC4Sbk8CUrNmJPHzYxjfUuOfqIiSfu6PjVN/PpncnG0QO/iH+21OmUOKd+ZZ
saZjeIJ1KF7yko9wzXEsFHK1jeirqBEjlL1C9x9l4a9Xj175JGQCaoB5X3ioRzXb
-----END CERTIFICATE-----