Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/18/323630313a316430383a323030303a3a2f34382d3438203d3e2039363633.roa
File:                     323630313a316430383a323030303a3a2f34382d3438203d3e2039363633.roa (raw, json)
Hash identifier:          fBOmxzNYZ5vmCYdmuBm1Zwq5jMyjYg/lUrUpol62vSs=
Subject key identifier:   66:7A:A0:6A:FD:A8:42:C4:09:22:D2:9D:35:3F:6E:80:96:C5:CD:01
Certificate issuer:       /CN=cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c
Certificate serial:       324D2BB757FF29D00A4975CDC24E7EAE93139831
Authority key identifier: AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer
Subject info access:      rsync://rpki.co/repo/AS945/18/323630313a316430383a323030303a3a2f34382d3438203d3e2039363633.roa
Signing time:             Wed 22 May 2024 08:36:54 +0000
ROA not before:           Wed 22 May 2024 08:31:54 +0000
ROA not after:            Wed 21 May 2025 08:36:54 +0000
asID:                     9663
IP address blocks:        2601:1d08:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4d:2b:b7:57:ff:29:d0:0a:49:75:cd:c2:4e:7e:ae:93:13:98:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c
        Validity
            Not Before: May 22 08:31:54 2024 GMT
            Not After : May 21 08:36:54 2025 GMT
        Subject: CN=667AA06AFDA842C40922D29D353F6E8096C5CD01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:7d:e2:3f:17:17:5c:d0:7d:55:df:2c:dd:
                    4d:f0:ac:a4:0e:76:7b:30:c7:8e:50:0f:58:e5:87:
                    80:55:c8:0f:d3:fa:eb:3e:ac:3b:ca:c1:0b:2c:96:
                    76:c0:fc:7c:59:0e:90:0b:b5:d3:95:ab:f4:9f:18:
                    38:7e:a8:d7:48:96:98:57:73:99:d1:5e:03:74:b0:
                    09:d4:b2:fc:c3:c3:ba:ec:e2:4f:97:12:3a:40:58:
                    a3:27:93:d2:2b:09:98:29:60:1b:d1:83:99:4c:0d:
                    86:5c:04:a5:9f:a5:0e:d2:a3:95:b6:2c:33:5c:6d:
                    bc:46:b1:cf:72:8a:01:35:ea:78:94:fd:c2:d8:02:
                    3c:4b:0d:e7:c2:5c:8a:1a:9f:e6:e6:ca:13:db:11:
                    5d:67:bc:ea:00:39:80:0f:4d:49:19:46:e8:df:0a:
                    bb:39:45:34:8c:bb:a1:99:91:07:0c:8f:3e:42:73:
                    93:21:1b:6d:df:e4:10:ad:9c:cd:4d:a4:09:0c:57:
                    56:c2:52:99:97:57:63:f4:fe:38:9e:a1:1e:05:0b:
                    6e:9b:3f:03:bc:9f:5c:ac:c7:51:aa:b3:e9:6a:75:
                    88:df:99:05:68:77:3e:82:a6:31:d9:16:82:dc:13:
                    04:b5:cb:bc:e0:cd:9d:5f:d8:ff:75:7d:cd:db:d7:
                    7e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7A:A0:6A:FD:A8:42:C4:09:22:D2:9D:35:3F:6E:80:96:C5:CD:01
            X509v3 Authority Key Identifier:
                keyid:AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/18/ACAAF041B8BE93E9AC0A06EBF59FDC21EC2340B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/18/323630313a316430383a323030303a3a2f34382d3438203d3e2039363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:54:b7:f1:d2:6f:8e:65:00:a2:85:d2:a1:c4:79:3e:ae:dc:
         e6:e4:c4:8d:e4:0d:3e:8a:01:87:cb:f9:40:80:f0:77:8e:17:
         40:cd:ce:90:9c:8d:ed:6c:b5:8f:34:43:0d:65:e8:f1:ad:51:
         83:ec:a5:89:11:98:10:ec:7f:9b:4c:3c:e4:83:49:df:b4:98:
         dd:07:fb:60:f1:e1:75:b9:35:c9:ee:e8:2f:04:18:c4:0c:c3:
         ed:56:f2:d8:e8:67:27:17:79:7b:97:76:b1:4a:14:14:cd:ee:
         36:25:b9:07:32:c6:c7:d7:8c:3e:4b:b1:66:80:10:3e:18:02:
         a4:16:b6:34:c8:d0:d1:50:ab:ee:23:c0:3d:32:6f:7e:ab:67:
         a8:b5:ee:af:4b:c7:ce:28:89:8a:d7:6f:13:20:95:9c:4a:05:
         7e:d0:cb:9e:36:10:f5:45:44:6a:20:10:c7:c3:b2:d7:71:d3:
         6a:19:5f:c7:05:dd:38:29:5f:a4:17:b8:36:03:cb:05:31:ff:
         57:21:d2:cb:ae:ff:52:81:12:d9:8d:a1:69:0a:58:81:dc:41:
         1e:89:ee:85:bb:93:44:3c:b1:a9:00:4d:61:1a:ca:2a:a2:45:
         b7:f0:25:35:1a:b4:4f:2a:73:38:22:4f:eb:ec:01:d7:e9:4d:
         ab:14:9b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----