Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/326130363a396634303a3a2f34382d3438203d3e20323133373037.roa
File:                     326130363a396634303a3a2f34382d3438203d3e20323133373037.roa (raw, json)
Hash identifier:          RxP3G9Dz65dSnJ+P11VF2MeHIurw059gZkJBqC2EPl8=
Subject key identifier:   E3:0C:05:ED:46:E8:85:0E:4F:42:73:76:6A:26:3B:A1:E3:CC:58:EC
Certificate issuer:       /CN=F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5
Certificate serial:       763C9D508FF322C7C82D6B3D0C397291B2C659D4
Authority key identifier: F6:0B:FC:22:CE:5A:3D:F5:51:DA:BB:CC:4C:48:D2:B3:F8:C5:6D:F5
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/326130363a396634303a3a2f34382d3438203d3e20323133373037.roa
Signing time:             Fri 04 Apr 2025 21:31:04 +0000
ROA not before:           Fri 04 Apr 2025 21:26:04 +0000
ROA not after:            Fri 03 Apr 2026 21:31:04 +0000
asID:                     213707
IP address blocks:        2a06:9f40::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3c:9d:50:8f:f3:22:c7:c8:2d:6b:3d:0c:39:72:91:b2:c6:59:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5
        Validity
            Not Before: Apr  4 21:26:04 2025 GMT
            Not After : Apr  3 21:31:04 2026 GMT
        Subject: CN=E30C05ED46E8850E4F4273766A263BA1E3CC58EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d2:c6:a9:b5:28:4d:6b:51:14:03:5f:72:a6:
                    a7:45:07:c1:03:65:82:c4:4d:e9:c7:0d:a4:26:6d:
                    03:30:c9:e8:36:ac:04:86:21:4c:2d:b4:91:b0:9b:
                    44:ba:be:ae:e2:3c:71:23:25:ce:27:d0:a4:e9:cb:
                    08:c1:a1:b7:95:f6:87:f7:7f:55:a6:58:1c:33:76:
                    50:5c:7d:c3:3b:8a:a5:71:6f:fc:7e:a4:5a:df:4d:
                    be:3f:73:57:c2:cb:1a:c8:ec:d6:58:4c:5d:fd:70:
                    0e:3a:b1:05:75:bc:56:93:6e:bc:af:a8:c5:eb:47:
                    c2:99:69:ca:1b:4f:20:1d:4c:77:d1:78:9b:3d:0d:
                    2b:78:b4:82:7f:9a:ef:e2:a4:d5:3c:75:8f:71:b9:
                    48:fc:7e:42:00:38:b5:76:79:2e:0b:44:60:62:dd:
                    65:87:65:6d:97:be:1b:d8:ea:a5:2f:2a:de:ec:ab:
                    78:1a:2b:21:4b:6d:c1:d4:6c:61:1e:40:20:7e:ab:
                    6a:b6:2e:5b:df:de:d8:44:80:19:1b:d3:22:24:46:
                    ff:58:c7:66:f7:10:2b:e6:62:0c:c1:a8:cc:35:13:
                    4d:eb:14:0f:23:e6:66:5d:5f:e8:d9:38:f2:b3:c8:
                    02:de:e6:5f:06:5b:58:4d:ad:41:9c:70:5d:ed:bc:
                    f8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0C:05:ED:46:E8:85:0E:4F:42:73:76:6A:26:3B:A1:E3:CC:58:EC
            X509v3 Authority Key Identifier:
                keyid:F6:0B:FC:22:CE:5A:3D:F5:51:DA:BB:CC:4C:48:D2:B3:F8:C5:6D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/326130363a396634303a3a2f34382d3438203d3e20323133373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:70:48:9f:2a:7b:4b:19:17:8c:6a:fa:63:43:d7:48:bd:0d:
         85:83:27:1b:d1:ac:38:ff:11:a6:ae:e2:15:af:61:60:52:d9:
         bd:15:a3:0a:77:69:67:ef:88:b1:5d:cb:33:62:6b:01:5d:5c:
         d1:1d:a8:dd:79:4a:45:e3:7d:44:da:cb:7a:82:e8:dc:8e:71:
         58:43:72:59:b7:41:ab:cb:c5:88:fb:b1:e9:1f:52:05:5d:4c:
         30:a1:1c:66:c2:0f:30:a7:5d:3c:80:98:e4:6b:f6:7c:10:2f:
         5c:7e:74:b0:6f:3f:a2:81:fb:cd:30:c2:f4:68:7a:42:18:6d:
         89:12:e1:ad:3f:c5:0a:5d:26:2a:9e:07:a8:0c:79:b3:08:17:
         d5:3d:be:a2:b3:0c:45:83:01:32:a3:b1:23:fa:c3:6a:c4:84:
         a9:ec:8a:6c:a8:6b:58:52:ba:97:b6:66:a8:97:39:d8:21:d7:
         79:7a:a8:52:d9:d1:d2:38:f2:bf:58:6a:a2:69:7a:eb:b7:b7:
         ef:4a:74:23:ab:24:b4:2e:2a:52:a4:11:cb:1c:42:e1:47:18:
         51:66:bf:dd:78:1a:c4:d9:5e:6b:48:5e:09:1d:b7:03:20:28:
         e2:3c:42:6a:47:c7:f8:be:a5:c1:21:fe:4f:a6:cf:ca:34:d3:
         8e:49:a1:7a
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIUdjydUI/zIsfILWs9DDlykbLGWdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYwQkZDMjJDRTVBM0RGNTUxREFCQkNDNEM0OEQyQjNG
OEM1NkRGNTAeFw0yNTA0MDQyMTI2MDRaFw0yNjA0MDMyMTMxMDRaMDMxMTAvBgNV
BAMTKEUzMEMwNUVENDZFODg1MEU0RjQyNzM3NjZBMjYzQkExRTNDQzU4RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV0saptShNa1EUA19ypqdFB8ED
ZYLETenHDaQmbQMwyeg2rASGIUwttJGwm0S6vq7iPHEjJc4n0KTpywjBobeV9of3
f1WmWBwzdlBcfcM7iqVxb/x+pFrfTb4/c1fCyxrI7NZYTF39cA46sQV1vFaTbryv
qMXrR8KZacobTyAdTHfReJs9DSt4tIJ/mu/ipNU8dY9xuUj8fkIAOLV2eS4LRGBi
3WWHZW2XvhvY6qUvKt7sq3gaKyFLbcHUbGEeQCB+q2q2Llvf3thEgBkb0yIkRv9Y
x2b3ECvmYgzBqMw1E03rFA8j5mZdX+jZOPKzyALe5l8GW1hNrUGccF3tvPj/AgMB
AAGjggJwMIICbDAdBgNVHQ4EFgQU4wwF7UbohQ5PQnN2aiY7oePMWOwwHwYDVR0j
BBgwFoAU9gv8Is5aPfVR2rvMTEjSs/jFbfUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNGU2NTBiNTQtYWJjNC00NDE4LWFlYjYtMDg4YTUwZDFk
NWYxLzAvRjYwQkZDMjJDRTVBM0RGNTUxREFCQkNDNEM0OEQyQjNGOEM1NkRGNS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvRjYwQkZDMjJDRTVBM0RGNTUxREFCQkNDNEM0OEQyQjNGOEM1
NkRGNS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNGU2NTBiNTQt
YWJjNC00NDE4LWFlYjYtMDg4YTUwZDFkNWYxLzAvMzI2MTMwMzYzYTM5NjYzNDMw
M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTMzMzczMDM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA
KgafQAAAMA0GCSqGSIb3DQEBCwUAA4IBAQACcEifKntLGReMavpjQ9dIvQ2Fgycb
0aw4/xGmruIVr2FgUtm9FaMKd2ln74ixXcszYmsBXVzRHajdeUpF431E2st6gujc
jnFYQ3JZt0Gry8WI+7HpH1IFXUwwoRxmwg8wp108gJjka/Z8EC9cfnSwbz+igfvN
MML0aHpCGG2JEuGtP8UKXSYqngeoDHmzCBfVPb6iswxFgwEyo7Ej+sNqxISp7Ips
qGtYUrqXtmaolznYIdd5eqhS2dHSOPK/WGqiaXrrt7fvSnQjqyS0LipSpBHLHELh
RxhRZr/deBrE2V5rSF4JHbcDICjiPEJqR8f4vqXBIf5Pps/KNNOOSaF6
-----END CERTIFICATE-----