Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/323630363a623934303a623030623a3a2f34382d3438203d3e20393435.roa
File:                     323630363a623934303a623030623a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          XPYTDEI/9A6K/CpC7WhFBb3rqJ2Nli9I7G2SK4o8aZg=
Subject key identifier:   18:E2:20:19:8A:B9:EC:B2:F9:95:0D:58:78:C7:81:6A:A4:4A:D0:0E
Certificate issuer:       /CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
Certificate serial:       19581F2F97FB84D61AC5D1364030247BC00DEE1C
Authority key identifier: 1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/323630363a623934303a623030623a3a2f34382d3438203d3e20393435.roa
Signing time:             Sun 01 Jan 2023 23:59:27 +0000
ROA not before:           Sun 01 Jan 2023 23:54:27 +0000
ROA not after:            Sun 31 Dec 2023 23:59:27 +0000
asID:                     945
IP address blocks:        2606:b940:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:58:1f:2f:97:fb:84:d6:1a:c5:d1:36:40:30:24:7b:c0:0d:ee:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46
        Validity
            Not Before: Jan  1 23:54:27 2023 GMT
            Not After : Dec 31 23:59:27 2023 GMT
        Subject: CN=18E220198AB9ECB2F9950D5878C7816AA44AD00E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:09:5e:59:c6:26:e5:33:dc:e7:37:10:5f:
                    c7:b9:20:98:04:c5:11:5a:6e:96:74:02:e4:5f:f9:
                    84:de:45:5a:75:e7:fe:4b:33:c6:13:13:de:1d:39:
                    98:81:f4:fa:4d:c6:a8:b7:bc:27:d4:bb:3e:b8:c6:
                    fb:a2:09:cd:bf:b0:e3:e6:b0:9c:2d:5d:c7:a3:d8:
                    9b:81:f4:a2:d6:a4:45:d9:85:a0:37:8b:32:11:50:
                    55:d1:ae:e0:0d:90:c6:49:94:31:84:ba:44:6d:8a:
                    ea:8f:d5:c0:af:40:9b:f6:d2:1b:26:b5:4c:75:fc:
                    b8:0e:97:7b:92:f5:ea:50:81:72:a9:59:33:44:cc:
                    1b:0d:a4:37:7f:72:f5:ee:3d:4a:cf:0b:7a:18:06:
                    e3:95:90:2c:2c:8f:a6:87:53:7b:74:a9:f2:2d:cc:
                    e1:c1:2b:a8:4b:9f:66:c1:fa:0b:a0:0e:4c:b5:9f:
                    d8:49:2d:a7:f6:13:32:b9:9c:1c:7b:36:05:9b:e0:
                    df:24:3f:9c:04:24:c2:78:a8:9c:ab:d6:31:40:e5:
                    a6:8e:c7:19:24:12:73:53:b2:6d:7e:9f:3a:e9:24:
                    73:98:3e:cf:9c:b5:c2:79:19:9a:12:a8:7b:9a:fd:
                    76:b6:25:9f:15:97:d5:af:42:a0:0a:ba:5d:2c:0f:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E2:20:19:8A:B9:EC:B2:F9:95:0D:58:78:C7:81:6A:A4:4A:D0:0E
            X509v3 Authority Key Identifier:
                keyid:1A:05:03:43:0B:A9:93:F7:0F:89:AB:E8:42:1B:F7:46:3F:E5:CA:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/1A0503430BA993F70F89ABE8421BF7463FE5CABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a32046881bbfaba0599bdd6dab3a81a88d8a48a46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/323630363a623934303a623030623a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b940:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:00:d5:a9:91:33:17:bd:d0:b6:56:d9:5e:99:e5:78:21:ca:
         bf:fd:42:e7:77:8c:01:0e:d9:b4:12:7e:75:06:d2:41:8a:01:
         e3:ee:ad:6b:27:a8:92:29:ab:b7:11:85:d2:6d:73:d7:99:a9:
         a6:a4:bc:63:2f:2c:ae:e8:db:5c:f4:b8:9e:d9:f3:52:3c:81:
         9b:a5:4e:c9:57:b6:c7:1a:c1:48:d6:05:08:b2:ab:e0:a1:70:
         82:06:45:57:cc:86:17:f5:4f:31:5b:11:eb:15:8e:bb:e0:63:
         de:28:9f:7b:7e:51:4c:f4:d3:dc:44:e4:8c:5f:18:37:64:dc:
         dd:0b:d3:ef:72:e5:97:1c:dc:6d:0f:9e:22:e5:5f:4e:3c:d6:
         fa:c4:27:65:b8:09:2d:0e:33:a9:e9:12:0c:2d:5a:56:ed:b9:
         20:8b:da:9d:cb:ef:cc:72:e9:62:a0:49:9a:ed:05:a4:04:9a:
         d8:63:d3:f6:d0:05:48:fa:31:5e:ba:3c:47:65:f0:9c:1b:46:
         c9:9a:2e:2a:ca:53:53:f2:bd:93:1c:5a:ad:0e:c1:f4:c2:5c:
         bf:e8:4a:82:b2:1a:23:18:c4:c9:92:b0:00:62:3e:36:ad:c5:
         08:5f:71:21:fb:0b:a4:1e:61:20:24:ca:e4:90:f1:77:0d:80:
         e8:a1:6c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----