Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa
File:                     326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier:          C+/5Fqt1EjKSBiYdvfzIqOVpcQwWPu5KGpUnV0uYEUU=
Subject key identifier:   7A:21:80:A7:D1:C9:D2:88:83:8F:B1:9B:E3:36:B6:16:D8:6D:3F:EF
Certificate issuer:       /CN=32F267CC5A6C13207B7228C9D0A849752F5036FF
Certificate serial:       41B8E8801E4DB3C95F731535F63B637229F44D6D
Authority key identifier: 32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa
Signing time:             Tue 25 Feb 2025 03:57:01 +0000
ROA not before:           Tue 25 Feb 2025 03:52:01 +0000
ROA not after:            Tue 24 Feb 2026 03:57:01 +0000
asID:                     152368
IP address blocks:        2a06:a005:d2d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b8:e8:80:1e:4d:b3:c9:5f:73:15:35:f6:3b:63:72:29:f4:4d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F267CC5A6C13207B7228C9D0A849752F5036FF
        Validity
            Not Before: Feb 25 03:52:01 2025 GMT
            Not After : Feb 24 03:57:01 2026 GMT
        Subject: CN=7A2180A7D1C9D288838FB19BE336B616D86D3FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:99:db:40:5e:79:16:16:8e:a6:f4:ad:3b:
                    7d:16:db:b9:83:48:2f:28:b2:6c:d6:e7:b4:8f:72:
                    63:92:91:1a:df:db:e8:6e:d5:a3:3d:96:23:01:7e:
                    4b:76:0f:a2:64:43:13:87:4e:27:4b:af:8a:eb:9e:
                    18:48:79:c8:d5:c6:17:15:b9:a6:67:ef:53:fe:e9:
                    d5:2e:ce:a4:e7:be:8c:ef:62:4c:51:ca:7c:e3:d9:
                    00:b5:aa:f9:da:51:41:39:3d:3b:66:47:cb:46:56:
                    32:ec:d3:0e:95:f5:13:cd:f8:05:e4:3c:2d:ee:4b:
                    61:e8:f6:63:a8:0b:10:24:77:64:74:ea:7f:2c:ae:
                    2a:a1:0b:7e:89:eb:5d:0e:fd:86:90:bc:f9:3e:00:
                    00:34:32:5c:60:29:41:d7:c2:a6:92:e0:61:9f:54:
                    de:bf:71:dd:16:35:f0:ae:f2:43:36:c1:86:9f:2f:
                    2f:1d:88:85:b7:23:f0:3a:1c:2f:e1:e4:09:90:e2:
                    27:71:95:ba:40:ae:d4:c7:52:30:f5:7b:7a:58:34:
                    f4:7a:5f:ce:bd:c6:ae:b6:b2:6e:0f:77:c0:37:8a:
                    75:ba:12:7a:77:43:99:76:be:55:fb:dc:9f:5b:74:
                    7c:c8:ca:fe:57:96:99:34:1c:4a:0d:42:58:4e:7d:
                    55:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:21:80:A7:D1:C9:D2:88:83:8F:B1:9B:E3:36:B6:16:D8:6D:3F:EF
            X509v3 Authority Key Identifier:
                keyid:32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2d::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:22:2e:20:4f:38:c5:4d:0e:67:0a:af:cf:5c:ba:85:ca:96:
         01:92:41:81:5d:61:35:e8:a8:19:b8:fe:d4:f6:63:a4:28:c3:
         37:13:47:bb:d0:34:5e:1d:78:ac:8c:3c:b3:1e:8f:6e:f2:90:
         f6:9a:37:8c:39:d0:a1:70:48:a5:9d:9b:29:89:3b:fa:b5:db:
         06:3a:03:f0:ff:ca:47:7e:29:46:a3:ea:7f:32:b0:2c:c1:25:
         93:d1:72:b4:cd:f4:4e:67:7b:92:65:cd:a3:10:1b:6e:be:f9:
         4f:da:33:18:c8:8d:55:30:6d:83:c1:6b:de:31:10:8d:08:df:
         f4:e2:66:0f:b1:3c:7c:c9:62:fe:23:54:7a:f6:0a:7a:ee:c5:
         33:2e:2b:6e:77:55:92:f0:8e:eb:cf:35:da:95:50:61:d7:d5:
         ad:14:c0:62:4b:dd:1c:ec:3a:f9:ff:c0:04:ea:1d:1e:cc:3a:
         d9:4e:c3:b6:56:b6:fc:e4:f8:14:97:51:1a:df:15:67:fb:fb:
         36:95:58:21:05:31:06:c1:51:95:c4:6d:cc:62:a4:8b:4f:29:
         b3:5f:85:1a:2a:a2:95:07:e1:47:f2:68:af:a1:7a:c9:ba:9d:
         71:d6:7c:4d:17:17:31:4a:f3:29:c6:ce:78:41:2e:07:95:26:
         46:7c:16:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----