Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50836.roa
File:                     AS50836.roa (raw, json)
Hash identifier:          UebItafikBWCyf6L8iVaMWQtHZmpVXaizc4KxRq2Rqg=
Subject key identifier:   62:94:D8:73:F2:ED:44:44:43:2F:62:23:13:7A:33:26:70:6A:69:C8
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       1D902CE43C1EDA660D243A3CB94BDA59D545BE28
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50836.roa
Signing time:             Tue 20 Aug 2024 02:31:57 +0000
ROA not before:           Tue 20 Aug 2024 02:26:57 +0000
ROA not after:            Tue 19 Aug 2025 02:31:57 +0000
asID:                     50836
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:90:2c:e4:3c:1e:da:66:0d:24:3a:3c:b9:4b:da:59:d5:45:be:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Aug 20 02:26:57 2024 GMT
            Not After : Aug 19 02:31:57 2025 GMT
        Subject: CN=6294D873F2ED4444432F6223137A3326706A69C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:0c:ea:74:d9:c6:4b:af:10:4f:b6:d1:f0:
                    c5:d1:b5:59:5c:89:10:90:20:bd:af:b2:2f:2d:7c:
                    2d:c8:42:89:f3:87:ed:75:4c:6c:60:db:f8:31:b6:
                    d8:94:93:ed:5f:c4:92:39:26:9e:48:76:05:5c:b5:
                    27:aa:f3:f5:c5:2a:a1:1e:75:e1:6b:5f:4f:06:53:
                    03:7d:1e:8f:05:ea:a0:e9:0b:cd:1e:1a:3f:df:23:
                    25:b0:68:8e:ab:d3:f7:d2:00:24:d5:b1:76:f2:f2:
                    9f:f5:78:7c:83:ec:2e:92:3e:4b:ea:31:7b:f1:0d:
                    3a:4e:92:c8:dc:49:ce:b0:f3:05:6c:13:7f:30:12:
                    11:4c:c1:38:51:2e:16:22:dc:31:1b:a1:d7:a5:e3:
                    e5:0e:22:52:8d:6b:a6:7a:18:dc:62:20:4d:63:6b:
                    e1:46:cd:24:fb:81:09:2b:23:36:7a:88:3d:87:2d:
                    a1:3b:ed:d6:5a:bc:74:af:ec:62:4d:dc:cd:f6:2c:
                    b7:f3:ca:b4:fb:7d:46:46:e7:84:13:fd:15:2e:76:
                    6f:9e:91:9b:f0:32:c1:07:a7:c3:c9:98:f0:9b:32:
                    49:7b:c9:ae:b8:d1:eb:9b:6a:93:b1:e8:e8:fd:9b:
                    4f:26:c2:bd:43:bc:51:b9:d1:5c:07:67:a0:f4:88:
                    f8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:94:D8:73:F2:ED:44:44:43:2F:62:23:13:7A:33:26:70:6A:69:C8
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:17:74:39:49:51:d6:fa:71:5f:e7:56:8b:61:1e:8a:17:71:
         36:27:85:9f:8e:11:9e:2e:e3:8d:2e:4f:0e:77:0e:66:8f:d3:
         9e:e0:15:76:3f:e7:88:46:2d:c3:84:6d:08:5a:35:9a:c0:a2:
         34:c1:64:7f:e2:b9:77:10:09:d7:22:7d:53:ce:75:6d:f0:45:
         66:ec:e4:fb:40:df:85:29:b7:b6:f9:a3:ab:1f:50:0a:00:3a:
         2c:63:28:a8:99:93:c9:f5:e3:89:38:ed:80:e9:f2:71:c6:70:
         39:bc:4a:79:ea:60:8a:12:33:3e:ea:72:9c:5f:82:dd:90:8e:
         0f:c1:ce:d1:f9:e6:6a:3e:82:fb:5a:68:bb:45:cf:d1:d3:a1:
         bb:fd:ce:67:b4:36:67:2d:45:51:24:52:bc:2f:91:e4:7c:aa:
         c3:ea:35:09:ef:21:8d:6c:d4:d1:f3:ad:f8:3c:fd:fa:e9:1e:
         0f:a2:e6:c9:f9:81:d3:76:d0:da:5c:b0:9c:1a:0f:19:53:05:
         9f:2a:9a:d7:97:13:cb:00:bc:0c:2b:ef:2c:3c:98:b1:e5:bd:
         a0:54:11:d4:57:b0:47:40:e4:3c:32:eb:4d:c0:19:35:0b:16:
         84:e1:a1:7d:dc:81:ac:cd:77:b0:f6:4f:70:d3:40:64:19:56:
         68:44:ab:43
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHZAs5Dwe2mYNJDo8uUvaWdVFvigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw
RTFFMkY4RTAeFw0yNDA4MjAwMjI2NTdaFw0yNTA4MTkwMjMxNTdaMDMxMTAvBgNV
BAMTKDYyOTREODczRjJFRDQ0NDQ0MzJGNjIyMzEzN0EzMzI2NzA2QTY5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFmAzqdNnGS68QT7bR8MXRtVlc
iRCQIL2vsi8tfC3IQonzh+11TGxg2/gxttiUk+1fxJI5Jp5IdgVctSeq8/XFKqEe
deFrX08GUwN9Ho8F6qDpC80eGj/fIyWwaI6r0/fSACTVsXby8p/1eHyD7C6SPkvq
MXvxDTpOksjcSc6w8wVsE38wEhFMwThRLhYi3DEbodel4+UOIlKNa6Z6GNxiIE1j
a+FGzST7gQkrIzZ6iD2HLaE77dZavHSv7GJN3M32LLfzyrT7fUZG54QT/RUudm+e
kZvwMsEHp8PJmPCbMkl7ya640eubapOx6Oj9m08mwr1DvFG50VwHZ6D0iPgDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYpTYc/LtRERDL2IjE3ozJnBqacgwHwYDVR0j
BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF
MkY4RS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt
NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTNTA4MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TC
sAswDQYJKoZIhvcNAQELBQADggEBAIIXdDlJUdb6cV/nVothHooXcTYnhZ+OEZ4u
440uTw53DmaP057gFXY/54hGLcOEbQhaNZrAojTBZH/iuXcQCdcifVPOdW3wRWbs
5PtA34Upt7b5o6sfUAoAOixjKKiZk8n144k47YDp8nHGcDm8SnnqYIoSMz7qcpxf
gt2Qjg/BztH55mo+gvtaaLtFz9HTobv9zme0NmctRVEkUrwvkeR8qsPqNQnvIY1s
1NHzrfg8/frpHg+i5sn5gdN20NpcsJwaDxlTBZ8qmteXE8sAvAwr7yw8mLHlvaBU
EdRXsEdA5Dwy603AGTULFoThoX3cgazNd7D2T3DTQGQZVmhEq0M=
-----END CERTIFICATE-----