Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS200360.roa
File:                     AS200360.roa (raw, json)
Hash identifier:          YTeLzplikQdjLNYdYwyavUnPPm1grMiMUga643eDxWo=
Subject key identifier:   F5:44:34:21:48:71:D6:A2:F9:86:D8:0D:F4:7F:2C:51:0A:B6:12:08
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       2FA0599DCC4695BC50B97C6949AABF49525E3A39
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS200360.roa
Signing time:             Tue 20 Aug 2024 02:31:55 +0000
ROA not before:           Tue 20 Aug 2024 02:26:55 +0000
ROA not after:            Tue 19 Aug 2025 02:31:55 +0000
asID:                     200360
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a0:59:9d:cc:46:95:bc:50:b9:7c:69:49:aa:bf:49:52:5e:3a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Aug 20 02:26:55 2024 GMT
            Not After : Aug 19 02:31:55 2025 GMT
        Subject: CN=F54434214871D6A2F986D80DF47F2C510AB61208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f2:19:a8:63:8c:33:3f:df:45:03:da:68:10:
                    bd:36:89:0e:46:e9:0b:b2:96:62:21:9c:2f:42:a5:
                    a5:d8:f6:7a:0f:2f:bc:8c:34:98:70:c6:8f:ea:e1:
                    63:7d:1a:be:8e:01:55:fd:34:b0:6b:3a:d2:93:a1:
                    af:6c:27:53:43:d6:6b:f1:36:b1:15:c9:ce:b8:7e:
                    39:24:45:a4:6c:32:a2:57:42:4d:f5:39:fe:8f:27:
                    d7:60:2a:72:29:d3:a6:84:10:38:9f:40:6a:1f:cd:
                    09:ef:aa:d1:d7:6c:94:f0:6f:f7:41:3a:b0:8a:f9:
                    52:ac:a2:b3:6b:95:a8:85:3b:10:d8:92:2d:83:a9:
                    a0:d4:54:ac:6d:8d:7c:b2:fd:63:0d:4e:25:00:0b:
                    eb:63:51:a2:0b:a2:ac:1a:18:99:97:1c:85:1f:06:
                    db:09:e3:1e:65:70:5c:db:5a:57:43:c0:83:d1:81:
                    14:b3:35:64:61:08:89:f0:36:b1:80:79:4b:f5:83:
                    9f:38:ef:82:48:16:f8:d0:1a:b1:22:86:8c:d6:be:
                    71:39:e0:93:3c:0e:1a:8c:66:29:93:b1:97:94:e4:
                    b7:e5:72:99:d3:d2:3d:cc:3f:d9:fe:cf:4e:df:0e:
                    2a:9f:67:48:10:69:07:b3:96:b2:ef:8f:f9:af:04:
                    5a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:44:34:21:48:71:D6:A2:F9:86:D8:0D:F4:7F:2C:51:0A:B6:12:08
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS200360.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:99:62:f7:fb:00:fd:eb:db:55:79:b5:13:ba:2d:c9:0b:ee:
         42:88:5d:e5:44:7d:1a:3d:3a:d8:b4:c5:7e:f2:84:06:dd:bb:
         b5:eb:11:f5:f7:a8:0c:97:07:81:e4:60:02:01:fd:b1:ed:3d:
         e3:a5:2b:67:d5:e8:76:48:9b:07:5b:df:1d:cc:c8:f9:14:91:
         2f:79:c5:55:33:74:e7:f0:24:41:21:6d:81:65:00:4d:de:f3:
         5a:a8:7c:72:4f:23:53:85:db:65:22:3a:a3:c0:b3:d9:26:f6:
         4c:ec:3c:fe:94:fa:73:1d:02:ab:01:0c:d8:e5:50:de:ab:48:
         ef:e3:9e:91:12:c5:82:ea:5a:6a:2c:f2:73:b9:74:6e:24:0b:
         b1:c7:48:10:57:bf:64:c2:58:fa:5f:23:66:24:09:43:e2:d0:
         02:f5:53:7f:86:8c:18:3f:b0:c0:36:ef:7a:cd:68:ee:54:22:
         03:e9:0b:43:73:d7:b0:65:a8:c2:45:11:fa:7e:9c:6a:e5:5e:
         d2:b6:a0:9e:22:f7:58:22:3f:73:25:5f:85:9b:5e:a4:8b:15:
         b9:40:2b:ee:1a:9f:43:70:cd:64:40:e1:cb:8d:09:fd:00:c9:
         76:8e:7d:d1:a3:c8:85:54:e2:90:db:95:0f:bb:6e:f3:44:e4:
         e3:ab:4d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----