Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a613030303a3a2f33362d3434203d3e20323133383634.roa
File:                     326130363a313238313a613030303a3a2f33362d3434203d3e20323133383634.roa (raw, json)
Hash identifier:          n9a/8RTZwT0YKbrePp7CWKic/4pP/ubIlN9Uj0QTd8c=
Subject key identifier:   A0:15:68:AA:92:79:D6:6D:3F:11:25:28:D7:A1:1E:10:0E:4A:A4:BC
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       0723141629C1E1CD73D0789FAE55009264EB36FB
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a613030303a3a2f33362d3434203d3e20323133383634.roa
Signing time:             Tue 01 Apr 2025 18:49:35 +0000
ROA not before:           Tue 01 Apr 2025 18:44:35 +0000
ROA not after:            Tue 31 Mar 2026 18:49:35 +0000
asID:                     213864
IP address blocks:        2a06:1281:a000::/36 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:23:14:16:29:c1:e1:cd:73:d0:78:9f:ae:55:00:92:64:eb:36:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Apr  1 18:44:35 2025 GMT
            Not After : Mar 31 18:49:35 2026 GMT
        Subject: CN=A01568AA9279D66D3F112528D7A11E100E4AA4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:01:cf:32:95:c2:72:03:17:43:57:cb:c9:37:
                    d3:30:46:e5:73:d9:47:e3:ac:88:52:5e:90:20:13:
                    68:14:52:e2:06:15:2b:0b:0b:91:50:56:aa:c9:5f:
                    64:0c:d8:73:f4:a1:c5:42:59:b9:ed:f2:e6:5b:7b:
                    06:cf:01:b8:c5:bd:c0:b5:44:6d:c0:31:5f:31:6a:
                    97:6f:2e:8c:01:b7:e1:ef:9a:1f:de:14:32:1a:c9:
                    45:76:31:75:43:b5:38:b0:11:8b:8d:e5:ea:49:12:
                    f5:f9:20:8f:24:84:69:06:2b:fb:22:5d:38:6e:0b:
                    74:0b:7d:c5:fe:cd:63:42:90:d7:00:3e:fe:4a:c4:
                    07:0a:32:ee:41:f7:ae:38:8a:37:40:7b:a2:e1:d9:
                    21:dd:39:37:03:a7:80:a1:f7:21:b8:07:cc:04:f4:
                    91:40:94:cf:c0:a6:4a:4c:2f:28:0b:2b:a3:7e:d2:
                    6c:f4:05:f9:34:7b:96:b9:5b:06:1c:54:80:cf:23:
                    d3:4e:fa:5c:9b:4c:99:b1:19:97:5e:af:1b:aa:7f:
                    95:1f:16:0b:9f:ef:4c:9c:b6:15:7e:e3:b3:6d:1f:
                    19:41:be:d0:c8:b6:63:7e:00:8e:01:0f:ec:17:88:
                    c6:79:6f:09:1a:38:c2:d4:ed:d2:6f:18:40:9c:76:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:15:68:AA:92:79:D6:6D:3F:11:25:28:D7:A1:1E:10:0E:4A:A4:BC
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a613030303a3a2f33362d3434203d3e20323133383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         83:4a:b6:6c:11:0b:ff:48:91:d1:28:99:ea:43:02:cb:f5:50:
         f6:41:f4:44:4b:83:8b:3c:2e:bb:85:71:b2:7d:be:06:fd:05:
         ec:c4:80:66:01:85:69:03:09:a4:0d:4b:d3:a4:7d:fd:a6:e0:
         da:df:c7:0b:19:be:00:25:f7:a7:b6:79:20:2a:a1:70:3b:98:
         2a:c7:39:18:30:e2:b4:4c:cc:07:41:99:73:14:14:26:f4:57:
         cc:41:90:b6:8c:07:c3:a1:2e:04:84:50:93:92:7b:3a:8c:41:
         b0:16:25:3d:19:85:05:ea:b3:91:8c:5e:62:58:1b:d3:15:0d:
         2f:e7:23:72:85:13:4f:d4:5b:5e:e1:e6:09:c8:81:ec:50:65:
         6f:ab:75:58:bb:16:e9:1e:1c:60:87:0e:6c:67:c0:ff:ad:15:
         2a:d7:26:d2:80:d4:84:32:75:ee:62:90:c2:9e:7e:76:5a:29:
         79:69:f4:9e:59:ee:7a:9b:cd:17:d1:9a:2b:c8:6b:bf:77:0a:
         e9:00:e3:16:45:18:f8:44:fb:53:90:03:9a:19:d7:e5:6c:08:
         77:a7:75:ce:ac:b7:97:0a:74:a7:83:3e:d9:45:b4:cb:64:ba:
         fd:94:a5:19:a7:ca:ca:c8:ec:68:0a:f8:56:cd:49:60:5a:c4:
         98:c3:6b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----