Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666630303a3a2f34302d3438203d3e20323134323033.roa
File:                     326130353a646663333a666630303a3a2f34302d3438203d3e20323134323033.roa (raw, json)
Hash identifier:          Y5pId2ER6qlKiwrrQ7fQK486+3svNDLOnTUfu6jzO70=
Subject key identifier:   F0:2F:55:36:E7:A5:D3:46:66:A6:5E:A2:EF:F6:5B:BD:DF:B9:46:E3
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       0C546422B0E288344DEAC023F03F7577C02D13C7
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666630303a3a2f34302d3438203d3e20323134323033.roa
Signing time:             Thu 10 Apr 2025 17:21:50 +0000
ROA not before:           Thu 10 Apr 2025 17:16:50 +0000
ROA not after:            Thu 09 Apr 2026 17:21:50 +0000
asID:                     214203
IP address blocks:        2a05:dfc3:ff00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:54:64:22:b0:e2:88:34:4d:ea:c0:23:f0:3f:75:77:c0:2d:13:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Apr 10 17:16:50 2025 GMT
            Not After : Apr  9 17:21:50 2026 GMT
        Subject: CN=F02F5536E7A5D34666A65EA2EFF65BBDDFB946E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:43:7d:ed:3f:20:db:ad:ff:be:9e:15:d3:
                    02:99:db:ee:fd:5f:ff:38:de:dc:f2:4c:66:77:d7:
                    72:3f:ff:36:05:17:93:c8:05:56:47:bc:d1:a6:4a:
                    54:aa:00:96:e1:fb:0a:48:66:a8:de:eb:28:70:e2:
                    56:d6:a8:9b:7a:a6:9e:ea:50:8f:83:56:9c:37:c9:
                    79:b8:3d:86:92:f1:0e:4f:f1:c9:a2:c9:3d:89:bf:
                    24:63:db:70:31:44:98:59:15:04:83:e6:68:45:de:
                    25:36:99:00:c2:20:59:ae:9f:ad:20:86:d6:1d:72:
                    9d:99:05:f1:a0:c9:04:ad:04:d5:df:1b:12:82:2d:
                    d8:ef:92:71:58:91:81:82:5a:24:4c:fa:f9:08:48:
                    a0:19:aa:e7:3b:c9:41:14:0f:b3:b3:54:1f:ac:e5:
                    a3:98:99:9f:43:6e:f4:3d:10:6d:24:27:2a:bc:d2:
                    e7:01:8d:67:91:7b:9f:c5:a6:fc:7d:af:eb:41:02:
                    86:3b:36:c0:5b:20:1c:c5:ba:ca:6c:3d:fe:7c:79:
                    1f:75:10:f5:15:4d:88:9c:65:9f:9b:cb:dc:eb:9f:
                    c2:7a:66:49:82:80:18:52:d7:a2:8b:8c:56:11:c0:
                    5a:4e:ad:a2:60:2a:40:8a:9a:e1:5e:71:02:62:6e:
                    1d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2F:55:36:E7:A5:D3:46:66:A6:5E:A2:EF:F6:5B:BD:DF:B9:46:E3
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666630303a3a2f34302d3438203d3e20323134323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:b5:d3:be:63:54:d5:98:2e:18:62:ef:22:82:2a:ce:57:07:
         96:95:64:6a:f8:73:19:0c:c8:8d:54:69:d2:ff:9d:74:4f:dc:
         f4:cd:40:6e:81:60:f0:d3:70:81:a1:f3:c1:f1:ea:b4:87:ef:
         36:8e:5d:06:7e:71:9f:d0:07:ee:9f:48:87:34:a9:9c:22:5f:
         78:5e:9f:7f:fd:e6:91:fc:bb:ad:f2:a2:92:07:74:de:3c:77:
         b6:b4:46:33:94:b0:57:11:f5:ee:1f:44:36:40:d0:d1:7a:d4:
         b4:9e:08:20:63:86:c8:d9:60:6b:ef:8a:7b:ea:a3:94:c8:cb:
         4a:df:0e:a9:8f:87:7e:d0:74:3c:eb:57:2c:32:15:bc:4b:be:
         20:40:f8:e6:ff:a2:46:51:3e:21:b2:ca:82:60:d7:b1:d9:87:
         f8:28:21:bf:b0:ba:54:51:35:2d:32:b0:18:54:1f:7e:b7:e4:
         74:0b:fe:f1:de:01:00:24:90:7e:fa:ad:79:5e:28:a9:b1:c2:
         e5:62:cd:09:8f:44:f1:9b:a6:93:8a:b2:b9:07:51:66:65:d1:
         8e:38:89:6d:4a:c7:2e:a2:3a:72:33:59:be:03:9d:d0:eb:e6:
         ce:2b:02:a3:f5:98:06:3b:18:cb:35:07:78:5f:d0:cc:39:25:
         29:f5:08:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----