Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/326130363a613030353a313530373a3a2f34382d3438203d3e203530313034.roa
File:                     326130363a613030353a313530373a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier:          nx8q2xxj7wMAWWjRSEpsj0HhZ2OuO17fOulxraSQVeQ=
Subject key identifier:   B5:A0:2E:F6:5C:CF:C7:DE:9B:0E:35:77:48:1E:55:D9:61:F6:B0:1B
Certificate issuer:       /CN=32F267CC5A6C13207B7228C9D0A849752F5036FF
Certificate serial:       0A9AD06D4700C9A65F5A4CEBEC33C329F1B81873
Authority key identifier: 32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/326130363a613030353a313530373a3a2f34382d3438203d3e203530313034.roa
Signing time:             Tue 25 Feb 2025 03:57:01 +0000
ROA not before:           Tue 25 Feb 2025 03:52:01 +0000
ROA not after:            Tue 24 Feb 2026 03:57:01 +0000
asID:                     50104
IP address blocks:        2a06:a005:1507::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9a:d0:6d:47:00:c9:a6:5f:5a:4c:eb:ec:33:c3:29:f1:b8:18:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F267CC5A6C13207B7228C9D0A849752F5036FF
        Validity
            Not Before: Feb 25 03:52:01 2025 GMT
            Not After : Feb 24 03:57:01 2026 GMT
        Subject: CN=B5A02EF65CCFC7DE9B0E3577481E55D961F6B01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4e:a6:05:fe:52:96:34:ce:81:e3:ee:c4:1f:
                    25:c8:0e:ad:24:10:20:18:9a:f9:91:7a:a4:7c:38:
                    ff:ee:ba:74:ab:35:1b:7d:c7:59:07:44:da:08:7f:
                    dd:da:3e:ad:97:0f:c8:6a:64:2b:c2:28:9a:52:c0:
                    9f:12:c4:f4:4f:b0:d6:c4:8e:13:3c:16:3c:87:42:
                    bb:99:44:9b:7c:82:24:c3:46:e4:ab:41:12:53:77:
                    82:3a:1d:06:31:fe:da:c2:cd:83:26:0c:f7:3d:4c:
                    37:b1:06:87:e7:f2:5d:30:37:1c:d4:81:62:f0:f6:
                    f5:b3:a5:16:3e:25:23:2f:f9:6a:49:93:22:af:6a:
                    a8:5d:54:6d:b7:c5:09:8d:a9:33:89:78:06:4c:f8:
                    c2:6f:ee:c8:57:8a:35:5f:fe:6e:5f:6a:60:c7:be:
                    de:48:22:6b:fb:14:9f:75:52:5e:d2:16:42:39:d9:
                    d9:02:f5:f1:90:fc:ae:d8:25:b8:fc:f1:e6:66:fe:
                    68:66:bf:fc:dc:5b:10:ab:29:2a:91:40:7b:7d:de:
                    e7:f2:03:7e:52:bf:d5:f1:80:f7:8d:25:9d:89:43:
                    78:d8:07:00:c7:bd:1f:87:74:58:11:32:7a:83:cc:
                    43:40:e2:b3:10:dd:32:d1:a1:19:0d:98:e2:c0:01:
                    ea:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A0:2E:F6:5C:CF:C7:DE:9B:0E:35:77:48:1E:55:D9:61:F6:B0:1B
            X509v3 Authority Key Identifier:
                keyid:32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/326130363a613030353a313530373a3a2f34382d3438203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1507::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:25:f6:d7:ed:1e:f3:16:66:b0:87:c0:02:f3:69:20:56:be:
         f5:6d:87:d5:33:19:bb:0f:53:aa:1b:f8:25:64:b9:b3:f5:fa:
         2a:df:ff:80:5a:0f:20:d8:f6:14:80:6d:40:3d:79:b6:4a:6c:
         5b:e9:cc:3d:45:fc:0c:b3:96:09:7a:50:15:25:f1:f7:59:5a:
         5f:47:2d:1d:60:3c:c5:af:45:9f:dc:56:86:2c:ad:d5:16:69:
         f8:02:c4:57:a6:d9:02:3c:f2:9e:ac:7f:ad:ad:28:af:dc:f6:
         2d:9d:f0:5e:44:e0:45:a3:27:b3:aa:ae:d2:85:39:2d:07:aa:
         77:09:2e:bd:04:b0:42:73:fb:17:8b:cf:4b:bf:12:73:0a:13:
         8d:42:8e:90:14:45:18:4c:a8:60:53:36:ae:92:89:41:2b:cb:
         20:70:8f:4d:42:58:ef:d8:0e:2e:35:3b:23:8a:68:f1:92:6d:
         6a:2a:83:c1:dc:ac:2a:d2:47:b9:26:d0:e7:09:cf:d2:9e:1e:
         df:e2:38:56:05:5b:b3:c4:17:5e:78:8b:ea:06:ba:85:d6:38:
         7b:86:49:0a:e6:26:45:87:36:38:d7:0c:d8:39:d8:f7:6c:c8:
         bb:da:59:57:94:0a:c7:22:60:d5:91:b3:03:45:e8:31:eb:86:
         7c:85:a5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----