Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/18/323630313a316430383a383030303a3a2f34302d3438203d3e203530303538.roa
File:                     323630313a316430383a383030303a3a2f34302d3438203d3e203530303538.roa (raw, json)
Hash identifier:          YktAMYDaizOrhtIbi6FyqR8pq1ZJ31Jt5TXz4Dzt+hc=
Subject key identifier:   94:1F:13:DC:49:61:AE:66:90:84:67:7F:C9:BB:01:A6:D3:9C:30:6B
Certificate issuer:       /CN=cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c
Certificate serial:       60DBB20C95EAD942CAB0BB7C8A57801D6BCACFFF
Authority key identifier: AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer
Subject info access:      rsync://rpki.co/repo/AS945/18/323630313a316430383a383030303a3a2f34302d3438203d3e203530303538.roa
Signing time:             Sat 01 Jun 2024 18:51:15 +0000
ROA not before:           Sat 01 Jun 2024 18:46:15 +0000
ROA not after:            Sat 31 May 2025 18:51:15 +0000
asID:                     50058
IP address blocks:        2601:1d08:8000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:db:b2:0c:95:ea:d9:42:ca:b0:bb:7c:8a:57:80:1d:6b:ca:cf:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c
        Validity
            Not Before: Jun  1 18:46:15 2024 GMT
            Not After : May 31 18:51:15 2025 GMT
        Subject: CN=941F13DC4961AE669084677FC9BB01A6D39C306B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:05:9f:33:34:79:f0:7d:60:3c:9f:9c:73:
                    18:09:21:ec:0f:2c:4f:b8:01:7f:6d:a9:89:ef:57:
                    2a:49:64:9c:08:9c:77:c3:b2:30:c6:ad:71:ff:fb:
                    3a:bc:a9:92:4b:e2:3b:7a:53:d7:d4:63:56:fb:3f:
                    59:48:22:e4:42:e9:0f:07:52:04:81:5b:5e:0a:ee:
                    88:69:3e:7a:03:b1:2a:e9:e0:7c:65:e6:f4:30:ce:
                    ef:73:9d:26:aa:a1:28:af:00:c7:0d:a2:75:f8:3f:
                    73:6b:5a:8d:14:5a:46:73:c8:11:a7:3c:94:7d:b4:
                    6c:08:d6:82:20:a9:08:ed:d2:d4:e3:85:b9:00:4c:
                    0c:82:1f:56:f6:85:2d:1a:ea:e7:8d:16:12:f9:17:
                    91:bc:6f:b2:39:35:3f:bc:97:c9:73:06:10:c7:80:
                    a6:f9:c3:59:2e:f1:c4:b5:fb:ea:4f:08:d7:71:3e:
                    71:1f:ca:76:cb:2d:ce:94:7e:cb:33:b1:74:71:84:
                    84:8c:c5:28:1b:b6:50:a1:bb:6d:eb:13:6b:e9:3a:
                    9f:2f:07:98:ca:09:ae:ab:1a:d0:74:ae:fb:72:01:
                    74:8f:c8:94:0f:ce:d0:cc:88:ca:d3:78:cc:d3:a9:
                    84:ce:de:cb:e3:2b:93:2f:19:5c:0d:4b:81:d0:e1:
                    f7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1F:13:DC:49:61:AE:66:90:84:67:7F:C9:BB:01:A6:D3:9C:30:6B
            X509v3 Authority Key Identifier:
                keyid:AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/18/ACAAF041B8BE93E9AC0A06EBF59FDC21EC2340B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/18/323630313a316430383a383030303a3a2f34302d3438203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:4e:01:ed:08:7a:97:e9:45:c7:08:55:d5:2d:78:b6:4c:df:
         8f:fe:ec:7f:bd:d0:82:ab:a8:5f:17:0d:8e:b6:5c:93:ed:1c:
         69:50:82:dd:eb:4a:1f:36:ee:ef:7a:75:e6:7e:2a:d1:e7:7b:
         5f:1a:aa:47:2b:2e:25:e1:a3:85:f6:29:43:fe:bf:2f:73:4c:
         78:f5:d9:8d:49:14:3e:67:c4:24:a3:6a:95:30:92:2c:8d:6e:
         d6:94:70:85:42:10:53:d5:56:00:97:c0:11:4e:5f:f6:2f:12:
         af:50:9e:b9:38:7d:ff:bb:8e:66:35:9c:97:51:67:fb:45:44:
         c7:05:f4:e7:49:33:fb:2b:67:bd:cb:f7:26:a6:23:60:30:a0:
         99:b8:5b:82:52:2e:62:be:de:7f:64:7e:22:76:89:fa:d8:7c:
         76:3b:42:c3:b8:8a:54:bc:c4:a6:20:ed:f3:4b:d9:9a:ee:98:
         f6:4d:f6:fd:a2:1f:c5:79:3d:8c:8c:47:24:a2:95:31:b1:3c:
         10:20:68:4e:bf:67:fd:fe:92:6f:24:e5:93:8e:82:cb:80:bc:
         d1:b8:82:bf:cb:ff:36:ef:b2:cb:bb:0c:34:b2:25:4a:68:01:
         51:43:5f:83:c5:5f:a6:75:7e:fd:3d:59:a7:e7:5d:83:b0:24:
         e9:07:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----