Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS926.roa
File:                     AS926.roa (raw, json)
Hash identifier:          66mYVDvCles2Yw/HWpylI2DwwjfKWDuZEnlAPv0e3lA=
Subject key identifier:   0C:D5:A8:60:03:9F:03:E1:CD:25:16:4E:37:B9:A5:1F:DD:1C:0E:B0
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       406B2580274BFF6D3A58F80DFD01AFADEF4401C7
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS926.roa
Signing time:             Tue 20 Aug 2024 02:31:54 +0000
ROA not before:           Tue 20 Aug 2024 02:26:54 +0000
ROA not after:            Tue 19 Aug 2025 02:31:54 +0000
asID:                     926
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6b:25:80:27:4b:ff:6d:3a:58:f8:0d:fd:01:af:ad:ef:44:01:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Aug 20 02:26:54 2024 GMT
            Not After : Aug 19 02:31:54 2025 GMT
        Subject: CN=0CD5A860039F03E1CD25164E37B9A51FDD1C0EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c9:c0:28:4a:cd:0f:63:e4:d4:75:24:7f:01:
                    94:20:22:9e:68:60:b1:af:e0:32:7a:21:c9:75:db:
                    72:89:e3:ab:b8:73:57:3f:cd:51:9c:70:3c:bf:03:
                    a9:34:37:f9:2f:a2:58:3a:14:34:55:49:16:5e:98:
                    1e:71:4d:88:96:1b:d0:17:a1:b2:df:0f:d4:c2:5f:
                    c2:9a:77:e1:1e:82:76:42:33:c6:b5:b2:38:5d:90:
                    99:c3:35:fd:7a:33:07:97:64:cd:02:2d:24:5d:f8:
                    b3:6c:99:ea:52:45:55:39:c8:bb:ec:0b:38:cd:4d:
                    e4:02:76:3e:7f:d0:03:51:44:d6:7e:47:9d:a3:aa:
                    04:27:59:ec:ef:46:59:fe:a7:30:c8:d9:36:55:49:
                    e7:3a:65:ac:0e:77:5f:4c:b2:07:96:7c:49:e6:80:
                    ce:24:62:24:75:6f:c3:dd:70:92:c4:37:f9:e1:a2:
                    5a:dc:fa:35:12:84:5f:35:e9:61:72:16:4a:a0:65:
                    9d:6c:e0:89:1a:96:d9:38:53:ca:26:ef:82:48:20:
                    9b:10:34:1c:a2:5c:4e:2c:93:77:4c:25:03:66:61:
                    9c:50:b0:b4:f6:60:98:34:03:a7:22:47:e0:d7:0c:
                    4a:03:a5:3a:15:fd:a2:77:dd:e2:0e:36:18:a3:e7:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D5:A8:60:03:9F:03:E1:CD:25:16:4E:37:B9:A5:1F:DD:1C:0E:B0
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS926.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:c0:75:7a:62:ef:25:45:b8:cd:40:c7:ba:4f:66:0c:67:82:
         74:08:0a:12:c4:42:77:cf:81:48:95:61:2a:4d:e2:d7:27:12:
         1c:19:e6:fc:9b:64:74:aa:62:08:86:4c:42:6d:0b:1d:4d:fe:
         cc:d9:66:ab:24:ab:d8:08:00:62:74:6a:db:1e:3a:3e:9d:fa:
         5b:98:8d:b5:89:9a:11:1f:ff:0d:10:e0:bc:6f:fb:51:a2:5e:
         9d:25:18:49:fe:90:ae:a9:c6:96:e1:a5:96:a8:f6:7f:a5:d6:
         3f:41:d3:a1:3a:40:05:1d:09:f3:46:e6:cd:93:10:ca:3a:66:
         e8:91:93:5f:31:5b:48:af:3b:50:75:b2:dc:5c:8b:97:e4:c2:
         39:29:41:06:3d:25:eb:96:23:06:26:27:d8:66:fe:fc:32:b0:
         28:f0:3c:7c:ed:de:f1:71:d7:00:ed:42:a5:d5:8a:4e:1d:81:
         ca:7c:10:95:bc:03:08:9e:39:c5:2f:2b:bf:4b:1c:ac:d5:c9:
         b4:93:d7:98:40:3f:64:f4:ff:91:9a:1f:0f:04:2f:68:92:a9:
         66:47:c7:6b:ff:05:3c:02:f1:26:1d:f0:2b:76:f3:d9:c0:66:
         e2:29:92:91:2d:c4:6b:50:59:a2:d6:74:c7:60:9b:e3:e0:11:
         91:b4:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----