Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS57851.roa
File:                     AS57851.roa (raw, json)
Hash identifier:          qay8NdR/xd+qDHNgj1WbPMpkKXIuEL/rY4z3BJybqZU=
Subject key identifier:   E4:17:99:58:54:B7:2F:12:78:1F:54:72:31:0E:7F:2B:E8:28:E3:7C
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       4E88F03954DE8B87A6E99DC18E01F7BAA70F1963
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS57851.roa
Signing time:             Tue 20 Aug 2024 02:31:57 +0000
ROA not before:           Tue 20 Aug 2024 02:26:57 +0000
ROA not after:            Tue 19 Aug 2025 02:31:57 +0000
asID:                     57851
IP address blocks:        2a07:54c2::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:88:f0:39:54:de:8b:87:a6:e9:9d:c1:8e:01:f7:ba:a7:0f:19:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Aug 20 02:26:57 2024 GMT
            Not After : Aug 19 02:31:57 2025 GMT
        Subject: CN=E417995854B72F12781F5472310E7F2BE828E37C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3e:d1:ee:2b:63:4a:e0:61:bb:9c:f4:36:bd:
                    7d:06:d9:0a:ed:8c:0b:1d:d1:88:41:dc:71:e5:d8:
                    1b:23:0d:16:e4:b0:eb:37:dd:cd:f9:ff:2a:ee:9f:
                    ee:f7:a8:0b:d7:ea:53:90:51:81:9f:93:6d:89:a1:
                    c9:5b:40:a2:6b:11:66:b6:43:09:6c:4e:e0:fa:15:
                    8a:59:fd:8c:70:d0:45:32:e6:c3:57:0b:b8:12:90:
                    c6:48:39:b9:6d:df:28:fc:08:8e:29:e9:a1:40:b6:
                    93:eb:75:27:aa:16:cc:09:49:76:39:89:75:8c:a1:
                    d2:e5:68:9a:f1:ea:fd:ee:a9:d8:60:53:9e:5c:38:
                    dd:f6:f4:1f:9f:91:ba:ea:ed:13:86:c7:c1:15:f9:
                    c8:9d:a4:17:1f:34:50:68:29:44:23:ed:2a:2a:1c:
                    d5:ae:3d:5e:88:08:6a:36:06:47:bd:17:35:2a:e4:
                    4e:05:6a:17:ae:ac:ad:56:f1:a1:c0:60:a4:87:31:
                    99:fd:7f:a3:d6:dc:c5:1e:33:31:06:2c:b2:19:6c:
                    70:e8:85:96:df:18:3d:3a:e3:17:b1:d6:7a:0e:80:
                    ba:ec:01:b7:cf:8a:7b:75:00:ba:5e:a1:b1:9c:d9:
                    ac:d2:e5:a2:7e:8d:bb:26:b1:2d:61:2e:7b:b7:15:
                    8f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:17:99:58:54:B7:2F:12:78:1F:54:72:31:0E:7F:2B:E8:28:E3:7C
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS57851.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2::/36

    Signature Algorithm: sha256WithRSAEncryption
         49:9b:2c:f1:22:e4:4b:0b:30:77:0a:a9:af:d1:99:51:73:a3:
         09:5e:b3:e4:a3:13:6e:7e:ea:47:1e:0f:95:2f:1f:b8:a5:ba:
         cd:85:da:8b:8f:ab:d9:44:4f:c9:42:ad:61:5f:fa:b2:cf:b8:
         68:0d:89:1e:45:46:35:bf:10:0f:66:a3:c5:10:e4:1c:f0:20:
         58:bc:22:10:19:12:ee:ef:e7:23:18:61:8b:1d:e2:54:67:4b:
         f7:55:5d:bd:90:e4:29:03:2e:92:da:00:c5:34:f7:5b:d4:4d:
         92:f4:99:f7:84:eb:4b:f2:fc:56:bd:a0:ee:30:96:f9:eb:1f:
         c3:d3:e7:09:39:d2:44:df:36:57:a1:61:59:f9:e3:08:e1:4f:
         4b:04:09:56:be:3f:b9:3c:d6:9f:fd:79:52:01:74:36:98:0b:
         ca:0d:f9:ee:b9:4f:a4:91:6f:49:75:c7:ff:49:8b:77:47:83:
         9c:c8:56:a7:0c:fc:74:58:0b:f9:f8:98:b7:12:fd:3e:92:96:
         5a:3a:f8:a0:e9:b8:c9:07:97:e9:93:38:01:67:47:3e:91:10:
         ec:cf:05:53:e7:76:ab:e1:d7:91:ed:c5:4e:ff:1a:fa:03:53:
         dc:b1:12:76:5b:6b:9e:8f:70:36:5a:cd:1a:1c:a0:a1:49:4d:
         4b:de:4e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----