Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/326130663a363238303a3a2f32392d3438203d3e20323136313536.roa
File:                     326130663a363238303a3a2f32392d3438203d3e20323136313536.roa (raw, json)
Hash identifier:          0I4GMIiI7U80z7T5EX6jepXPdeLHES4ybBQPIsxpeSc=
Subject key identifier:   B7:E6:7B:67:C3:1D:9F:59:A2:23:7C:3B:F8:06:0D:84:33:C1:04:32
Certificate issuer:       /CN=514199BA2112D71D72E20DCA3EC2EE2C31F2979C
Certificate serial:       5CE8DD87E44C3CA2EDD3B13DD776743401E86A1A
Authority key identifier: 51:41:99:BA:21:12:D7:1D:72:E2:0D:CA:3E:C2:EE:2C:31:F2:97:9C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/514199BA2112D71D72E20DCA3EC2EE2C31F2979C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/326130663a363238303a3a2f32392d3438203d3e20323136313536.roa
Signing time:             Sun 26 May 2024 14:51:00 +0000
ROA not before:           Sun 26 May 2024 14:46:00 +0000
ROA not after:            Sun 25 May 2025 14:51:00 +0000
asID:                     216156
IP address blocks:        2a0f:6280::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e8:dd:87:e4:4c:3c:a2:ed:d3:b1:3d:d7:76:74:34:01:e8:6a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514199BA2112D71D72E20DCA3EC2EE2C31F2979C
        Validity
            Not Before: May 26 14:46:00 2024 GMT
            Not After : May 25 14:51:00 2025 GMT
        Subject: CN=B7E67B67C31D9F59A2237C3BF8060D8433C10432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:d9:0d:30:32:31:84:f0:72:5b:e2:1a:5e:
                    45:bc:1d:14:d1:78:1b:6a:a3:98:54:46:23:eb:0c:
                    a5:22:78:a6:64:f4:11:4a:8a:5f:b0:a7:ad:a2:a9:
                    68:b8:a1:ef:87:09:a8:0d:ac:49:e3:d8:97:ef:16:
                    1d:25:dd:68:5b:b0:6b:8e:ae:aa:ae:f1:e9:2b:cb:
                    85:eb:cd:af:68:33:15:05:69:1d:6c:71:6f:f0:64:
                    8d:0b:dc:04:8d:c9:a9:2d:b6:42:45:f6:dc:e4:52:
                    85:5e:f9:d5:50:5e:16:19:3b:67:90:70:cc:e4:05:
                    29:2f:38:31:85:1e:b9:72:e1:27:33:1e:80:83:a2:
                    12:47:9c:c0:77:cd:92:19:eb:38:84:56:f2:c4:3f:
                    c8:0b:f1:24:5f:cf:ff:d6:3b:ca:6b:b8:1a:f0:84:
                    7a:6c:ea:3f:4e:66:c6:c1:4d:45:01:c0:ed:63:eb:
                    f0:17:4d:04:20:c7:1a:6c:19:94:23:64:d2:a2:33:
                    83:c5:50:d4:ea:07:d8:cf:e0:f0:82:65:a9:e2:d3:
                    96:63:e7:ce:11:ae:8f:ff:69:94:70:f7:a1:30:02:
                    99:22:18:07:41:fb:5b:06:df:e8:c4:3f:c3:e8:7b:
                    83:72:ee:0d:52:fb:7c:9d:13:3a:b8:14:62:7c:05:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E6:7B:67:C3:1D:9F:59:A2:23:7C:3B:F8:06:0D:84:33:C1:04:32
            X509v3 Authority Key Identifier:
                keyid:51:41:99:BA:21:12:D7:1D:72:E2:0D:CA:3E:C2:EE:2C:31:F2:97:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/514199BA2112D71D72E20DCA3EC2EE2C31F2979C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/514199BA2112D71D72E20DCA3EC2EE2C31F2979C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/326130663a363238303a3a2f32392d3438203d3e20323136313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6280::/29

    Signature Algorithm: sha256WithRSAEncryption
         c6:20:c7:23:42:6a:9d:a8:87:73:ff:f6:7d:7d:b0:e2:e8:d9:
         93:51:fd:a0:6c:b5:96:45:93:10:f4:e0:25:c1:31:29:0e:c3:
         91:de:a1:8a:04:36:9d:a0:eb:eb:b4:99:c3:0a:2d:14:93:07:
         d9:e8:93:83:0c:54:13:bf:9f:14:2e:d1:cc:1d:0b:c9:57:b9:
         22:61:6e:cb:ad:92:a1:d2:d4:b3:62:b3:1b:f7:58:7d:bc:44:
         99:b4:7f:ae:2a:9a:91:22:f4:9e:b6:43:94:34:0f:37:f9:8d:
         c9:da:50:04:2e:af:ad:3e:b7:ef:76:91:aa:bc:25:79:42:5a:
         f9:80:98:93:50:8c:84:cb:46:04:1e:dd:dd:5d:ea:11:f8:1c:
         b5:87:7c:bd:f1:e3:cb:e7:09:48:13:14:a9:8b:78:fa:49:01:
         05:ea:37:6f:c7:b5:cb:4a:f1:48:70:95:ec:e8:0c:0c:37:2d:
         ec:61:b2:cf:19:71:73:2f:72:24:4b:a8:3f:de:c8:52:7d:ff:
         3c:db:2a:f3:9d:3e:46:c6:00:d9:85:3c:3b:58:51:21:62:9c:
         14:2e:a4:4a:e9:87:88:79:c4:c6:62:18:5b:1f:68:02:e1:68:
         11:5a:7f:1f:56:a9:06:49:a5:df:ca:a4:e3:5d:37:34:33:27:
         ee:70:fd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----