Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633032663a3a2f34382d3438203d3e20323136303635.roa
File:                     326130363a313238333a633032663a3a2f34382d3438203d3e20323136303635.roa (raw, json)
Hash identifier:          Bt18oBOyonjouaIcq2NIW4LSzuYftJIs2cPrejaHEoI=
Subject key identifier:   8C:52:9D:00:B1:0B:34:09:FC:4F:9C:EC:3E:67:17:7E:C4:81:C4:62
Certificate issuer:       /CN=20595BDBAD09C7D604202305854D1DF14F190959
Certificate serial:       5A8A603D44100F69102584FE1BAEAD13FAA7AF1F
Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633032663a3a2f34382d3438203d3e20323136303635.roa
Signing time:             Sun 15 Sep 2024 14:36:46 +0000
ROA not before:           Sun 15 Sep 2024 14:31:46 +0000
ROA not after:            Sun 14 Sep 2025 14:36:46 +0000
asID:                     216065
IP address blocks:        2a06:1283:c02f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8a:60:3d:44:10:0f:69:10:25:84:fe:1b:ae:ad:13:fa:a7:af:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959
        Validity
            Not Before: Sep 15 14:31:46 2024 GMT
            Not After : Sep 14 14:36:46 2025 GMT
        Subject: CN=8C529D00B10B3409FC4F9CEC3E67177EC481C462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:76:90:88:ee:6e:ad:6d:9b:00:f9:ac:61:
                    13:bf:bf:f5:bc:26:6f:5f:e4:2c:11:fa:0a:cd:65:
                    00:f5:de:6a:af:19:6f:1c:72:ec:28:b0:f1:dd:68:
                    09:6d:b3:80:da:a7:fa:45:9b:82:0a:28:5c:5b:b6:
                    ee:1a:ed:1d:ae:c0:9a:1b:ec:ff:9d:6f:69:75:82:
                    58:76:ed:78:58:01:1d:58:f9:65:8d:13:4c:c1:4b:
                    12:ca:1d:6e:32:45:30:03:7d:0d:d0:1f:4b:e8:ee:
                    db:19:9b:5a:06:ec:c6:9b:d0:63:57:35:08:ac:0a:
                    72:8b:3c:fb:ff:59:32:bc:64:c5:5b:a0:95:c3:1b:
                    e4:58:30:56:7d:ca:f5:57:33:4f:a5:54:2e:fb:db:
                    67:fa:ec:94:b0:82:34:63:c2:21:53:3a:46:cd:f2:
                    dc:05:80:6f:51:32:73:5e:21:54:f6:7d:31:c9:e6:
                    42:f7:ca:99:cc:7c:44:b1:42:e9:9a:ee:cd:6d:9c:
                    6a:ab:8a:03:f9:ec:22:2a:69:f1:47:15:7b:12:46:
                    f1:f3:d1:c4:f7:3d:81:3c:7d:24:22:9a:f5:d3:b4:
                    dc:e4:d7:e4:c9:bb:1f:30:60:f5:f4:1e:2e:98:94:
                    97:89:d5:12:0d:5f:24:98:d5:8c:74:be:91:2e:37:
                    8b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:52:9D:00:B1:0B:34:09:FC:4F:9C:EC:3E:67:17:7E:C4:81:C4:62
            X509v3 Authority Key Identifier:
                keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633032663a3a2f34382d3438203d3e20323136303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c02f::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:0f:c7:a7:7c:7e:e9:08:fa:30:0a:a9:d9:89:e8:fc:c3:17:
         59:4d:ff:07:8b:83:42:f1:63:ce:63:1c:dc:6f:7a:f7:0d:4e:
         04:f5:0f:aa:58:96:0e:48:96:52:8c:2c:e7:fd:ef:5f:82:aa:
         a8:5a:20:a3:e3:f4:14:79:2e:b0:29:fb:91:13:dd:7f:ce:03:
         e7:6c:d2:6a:9c:b6:77:82:90:4d:a1:29:8f:6e:70:a3:e5:30:
         9c:f5:ab:78:13:ff:3f:c5:74:ad:21:c6:dc:48:f2:9d:1c:34:
         2b:7d:7e:1f:ad:6a:cf:17:2a:d8:1e:f9:97:c1:86:04:7c:be:
         9a:8b:cd:88:60:bd:c6:9b:5a:c1:af:4f:9b:c8:a4:f9:98:1a:
         ae:9d:ec:88:86:d7:68:d3:80:b2:f0:0a:6b:2f:cd:6d:20:95:
         97:7c:fd:e3:e0:19:69:bb:16:c3:77:cb:dd:1e:c0:a4:98:f8:
         f5:ef:02:b2:29:32:e8:f4:b8:a7:1c:83:2f:39:fe:be:49:79:
         36:c6:bb:39:06:af:bb:35:d5:cb:e8:13:e0:94:07:21:3a:28:
         2b:f1:ab:0e:90:08:cd:a4:3f:1f:9a:84:0d:e4:64:9c:c1:8e:
         bc:24:e7:0d:25:db:bd:e3:16:05:06:63:2e:40:22:9d:55:4e:
         64:b2:cb:35
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUWopgPUQQD2kQJYT+G66tE/qnrx8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0
RjE5MDk1OTAeFw0yNDA5MTUxNDMxNDZaFw0yNTA5MTQxNDM2NDZaMDMxMTAvBgNV
BAMTKDhDNTI5RDAwQjEwQjM0MDlGQzRGOUNFQzNFNjcxNzdFQzQ4MUM0NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qHaQiO5urW2bAPmsYRO/v/W8
Jm9f5CwR+grNZQD13mqvGW8ccuwosPHdaAlts4Dap/pFm4IKKFxbtu4a7R2uwJob
7P+db2l1glh27XhYAR1Y+WWNE0zBSxLKHW4yRTADfQ3QH0vo7tsZm1oG7Mab0GNX
NQisCnKLPPv/WTK8ZMVboJXDG+RYMFZ9yvVXM0+lVC7722f67JSwgjRjwiFTOkbN
8twFgG9RMnNeIVT2fTHJ5kL3ypnMfESxQuma7s1tnGqrigP57CIqafFHFXsSRvHz
0cT3PYE8fSQimvXTtNzk1+TJux8wYPX0Hi6YlJeJ1RINXySY1Yx0vpEuN4sBAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUjFKdALELNAn8T5zsPmcXfsSBxGIwHwYDVR0j
BBgwFoAUIFlb260Jx9YEICMFhU0d8U8ZCVkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm
NDA5LzEvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5MDk1OS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5
MDk1OS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt
MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzEvMzI2MTMwMzYzYTMxMzIzODMz
M2E2MzMwMzI2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNjMwMzYzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoGEoPALzANBgkqhkiG9w0BAQsFAAOCAQEAXA/Hp3x+6Qj6MAqp
2Yno/MMXWU3/B4uDQvFjzmMc3G969w1OBPUPqliWDkiWUows5/3vX4KqqFogo+P0
FHkusCn7kRPdf84D52zSapy2d4KQTaEpj25wo+UwnPWreBP/P8V0rSHG3EjynRw0
K31+H61qzxcq2B75l8GGBHy+movNiGC9xptawa9Pm8ik+Zgarp3siIbXaNOAsvAK
ay/NbSCVl3z94+AZabsWw3fL3R7ApJj49e8Csiky6PS4pxyDLzn+vkl5Nsa7OQav
uzXVy+gT4JQHITooK/GrDpAIzaQ/H5qEDeRknMGOvCTnDSXbveMWBQZjLkAinVVO
ZLLLNQ==
-----END CERTIFICATE-----