Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663030303a3a2f34382d3438203d3e20313530323439.roa
File:                     326130363a396634343a663030303a3a2f34382d3438203d3e20313530323439.roa (raw, json)
Hash identifier:          1Z3wwFK4uT3ngv0gQozYRQ3nX036hrhrqjnWvHr9N/8=
Subject key identifier:   7E:B2:69:CB:34:AB:9D:1C:FE:FF:18:9F:43:ED:5B:CB:50:89:E3:1E
Certificate issuer:       /CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
Certificate serial:       733617FE5DD96AA54ABF367C6DC5272B9A1460E0
Authority key identifier: B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663030303a3a2f34382d3438203d3e20313530323439.roa
Signing time:             Wed 29 Nov 2023 09:21:51 +0000
ROA not before:           Wed 29 Nov 2023 09:16:51 +0000
ROA not after:            Wed 27 Nov 2024 09:21:51 +0000
asID:                     150249
IP address blocks:        2a06:9f44:f000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:36:17:fe:5d:d9:6a:a5:4a:bf:36:7c:6d:c5:27:2b:9a:14:60:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
        Validity
            Not Before: Nov 29 09:16:51 2023 GMT
            Not After : Nov 27 09:21:51 2024 GMT
        Subject: CN=7EB269CB34AB9D1CFEFF189F43ED5BCB5089E31E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:6f:f2:da:05:0a:b1:ad:91:26:01:b8:f1:
                    50:86:10:7b:9c:8a:b5:0f:d5:ba:8c:6a:a9:0d:32:
                    65:91:52:f2:8d:c7:97:f5:24:af:d6:e3:65:05:9c:
                    ed:70:b6:f2:de:e9:da:48:58:84:f8:c1:fe:8e:07:
                    d4:c6:7e:18:1f:ef:3b:60:2a:a1:9c:1e:df:23:24:
                    db:8f:c6:00:bd:6d:29:46:6e:72:b6:6b:0c:e1:59:
                    96:46:2c:74:35:11:12:cb:a5:54:96:c8:58:06:b5:
                    b7:c7:dc:d2:d4:e2:c0:29:0a:e7:05:6e:d0:60:d3:
                    44:c0:e7:f9:4b:f3:69:12:d1:70:21:46:51:97:ad:
                    f0:d1:0d:b9:23:63:77:43:50:2b:34:c4:27:c9:79:
                    0e:b1:76:c2:f0:fc:7e:a3:cf:81:bb:c7:97:36:8f:
                    c1:1a:54:b7:02:df:02:f3:25:ea:ac:11:24:a0:72:
                    0d:5f:16:62:e1:cc:8c:6d:e0:82:14:c7:1d:9c:49:
                    69:ef:f0:53:fe:7f:9e:51:c7:f4:dd:9f:c5:b7:a3:
                    bd:93:99:a7:41:49:c9:a0:cb:80:3d:69:2b:91:91:
                    4b:7d:05:b9:1f:9c:6a:7f:e4:f9:08:c2:07:e3:14:
                    02:ec:cb:fb:b3:98:cd:0c:e6:27:88:eb:2e:c9:12:
                    30:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B2:69:CB:34:AB:9D:1C:FE:FF:18:9F:43:ED:5B:CB:50:89:E3:1E
            X509v3 Authority Key Identifier:
                keyid:B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663030303a3a2f34382d3438203d3e20313530323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f44:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:90:23:b9:5b:10:70:d0:a5:ec:96:36:6b:72:e7:cc:07:aa:
         e0:a0:14:de:33:5e:2b:60:32:20:89:b3:45:47:cf:fa:2d:b8:
         17:3c:6d:94:15:46:82:ab:a0:dc:a3:4c:b9:69:d6:83:fc:ec:
         40:ff:e2:eb:01:c6:47:c3:c4:c0:f4:3f:48:43:6a:03:94:af:
         03:8f:96:95:3a:12:1f:55:f0:67:04:f3:75:ac:b9:e5:45:a5:
         a3:b0:76:b3:7d:13:4c:13:12:9c:7e:36:dc:e1:05:30:80:42:
         2c:59:98:62:3c:65:e2:4a:6f:8f:32:5f:3f:7f:73:b1:dc:87:
         80:fe:3f:6b:d5:b8:0e:0f:31:3a:32:1e:e5:05:2f:6c:3b:03:
         90:2c:51:42:23:d2:7d:24:f9:cd:33:ba:79:6f:82:1a:2b:e6:
         71:ce:8a:3b:34:65:c7:b7:ea:34:1a:da:88:8f:77:3e:1f:a8:
         5a:36:62:85:e0:c8:10:c8:ef:b5:94:c4:dd:17:56:87:19:2f:
         15:ae:c6:2e:3c:1f:5d:ac:59:10:a2:a5:bf:1e:5c:df:58:a2:
         bf:63:67:7e:2f:e6:d8:13:1e:4b:69:7c:e9:a5:52:c4:19:ae:
         58:29:d1:24:69:81:69:f2:c4:69:e2:c1:cd:b3:e6:e6:e7:e4:
         68:c5:46:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----