Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238343a3a2f34382d3438203d3e203537313130.roa
File:                     326130363a313238343a3a2f34382d3438203d3e203537313130.roa (raw, json)
Hash identifier:          56Z/guKVC8JkOkcoKi6qP0hpnRfV4P0iGXMIl43Zg3M=
Subject key identifier:   BC:03:7B:60:03:9F:ED:D7:BB:F0:1D:56:EB:B2:A2:1F:EF:BA:51:9E
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       44B2F61DB6DA6B49E73D10226BE38F8C322C5BE8
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238343a3a2f34382d3438203d3e203537313130.roa
Signing time:             Sun 13 Apr 2025 13:12:17 +0000
ROA not before:           Sun 13 Apr 2025 13:07:17 +0000
ROA not after:            Sun 12 Apr 2026 13:12:17 +0000
asID:                     57110
IP address blocks:        2a06:1284::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b2:f6:1d:b6:da:6b:49:e7:3d:10:22:6b:e3:8f:8c:32:2c:5b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Apr 13 13:07:17 2025 GMT
            Not After : Apr 12 13:12:17 2026 GMT
        Subject: CN=BC037B60039FEDD7BBF01D56EBB2A21FEFBA519E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:03:89:88:2b:4d:84:6e:8d:a7:bd:b9:e6:
                    93:1e:16:34:de:29:ff:05:58:c5:bf:30:1c:6e:d8:
                    72:72:0b:5e:52:fe:08:e4:72:04:6b:b1:7e:b2:65:
                    b2:d6:12:ed:8e:41:c5:cc:13:cd:19:4e:8a:f0:eb:
                    a0:fb:bf:ae:47:49:ed:4c:8f:1b:08:6e:ac:da:1f:
                    b4:4c:c9:af:b5:d8:63:77:25:d1:81:bd:42:a4:86:
                    1b:eb:1d:6d:cc:e3:d2:67:9c:cd:a8:9d:f3:1c:7a:
                    60:68:f2:eb:c5:1b:d3:58:04:70:02:34:6d:b7:3e:
                    50:88:6f:0c:df:eb:99:3c:9f:4d:07:3e:97:ef:a8:
                    e9:4f:4a:76:7f:a1:7b:5e:d8:14:20:7c:7c:c7:24:
                    d2:b1:c2:50:ce:d0:71:a6:c7:26:a3:cd:98:ab:de:
                    e5:a3:05:68:6f:da:06:26:c7:38:a4:d2:32:78:87:
                    c6:54:b9:f2:76:00:14:57:e3:b9:ad:d5:6d:3b:49:
                    94:65:ac:d9:c1:e6:8e:c4:d5:f1:01:33:0e:8f:62:
                    f6:8d:37:32:1b:08:d1:6d:6e:dd:ff:51:11:44:aa:
                    e7:c9:58:04:b4:7b:02:79:3d:99:79:22:6a:2d:6a:
                    67:48:dd:c5:56:b5:5d:39:8f:44:dc:52:e7:af:b0:
                    a3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:03:7B:60:03:9F:ED:D7:BB:F0:1D:56:EB:B2:A2:1F:EF:BA:51:9E
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238343a3a2f34382d3438203d3e203537313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1284::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:c2:c7:1d:6b:74:52:51:7e:ad:76:95:48:11:76:b8:ed:73:
         c7:19:dd:d6:4e:ec:79:61:d2:e6:6c:01:00:fe:9b:13:37:1f:
         92:15:d4:b3:5b:6c:2f:b5:eb:ee:cf:a8:2c:17:d8:51:19:4b:
         a4:78:e6:97:94:c6:85:82:ee:61:54:18:8f:76:68:28:23:65:
         82:6e:dd:6b:5e:ce:7f:a9:51:64:fc:72:78:56:08:d1:b4:74:
         71:d3:5f:d2:73:49:bb:8a:ed:13:e3:bb:63:88:47:96:48:f3:
         c5:2b:93:6d:25:ba:54:6b:43:f9:3a:3a:f0:6a:eb:4e:00:d5:
         74:9d:8c:c2:77:93:b1:68:d0:6e:c9:5e:0a:b9:c0:2d:9f:a1:
         99:95:45:6d:c8:da:4c:7d:98:e2:70:52:41:2f:43:c2:c6:7b:
         7d:76:23:ed:34:3e:a3:26:bd:8c:13:09:e5:cc:66:80:4a:2f:
         04:51:29:4f:0d:11:56:ba:4d:e4:21:30:56:22:64:b1:8b:1f:
         07:d0:d6:98:db:8e:4a:62:3a:3d:0f:19:1a:a1:85:62:2b:bc:
         ca:0a:79:77:69:4d:66:42:24:22:8b:ef:06:49:aa:e5:29:28:
         42:e9:c3:f4:36:3a:57:1f:f9:7c:7b:a9:9f:de:9f:ff:14:e3:
         91:8d:29:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----