Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa
File:                     323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa (raw, json)
Hash identifier:          Yb9JU3CRWrMKdDlJAtZV9UzOmSwXBkyRyCzpwM4uvkk=
Subject key identifier:   A9:F2:FE:EF:24:16:A7:8E:45:A2:84:A4:56:64:65:EE:1A:8B:71:B5
Certificate issuer:       /CN=43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc
Certificate serial:       50595E4F945E31A6761C37D9D8A86A58E3D18692
Authority key identifier: 2D:0E:7A:F3:D6:DA:0D:72:3A:64:67:5B:48:D6:97:E0:C2:57:19:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa
Signing time:             Sun 12 Nov 2023 08:20:46 +0000
ROA not before:           Sun 12 Nov 2023 08:15:46 +0000
ROA not after:            Sun 10 Nov 2024 08:20:46 +0000
asID:                     60900
IP address blocks:        2602:fa6e:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:59:5e:4f:94:5e:31:a6:76:1c:37:d9:d8:a8:6a:58:e3:d1:86:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc
        Validity
            Not Before: Nov 12 08:15:46 2023 GMT
            Not After : Nov 10 08:20:46 2024 GMT
        Subject: CN=A9F2FEEF2416A78E45A284A4566465EE1A8B71B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:43:67:d6:9f:76:fd:de:24:b3:9c:2a:9a:
                    65:6a:82:a6:18:a7:4e:79:36:f8:f4:9e:ee:67:48:
                    cb:19:4e:27:59:68:f9:a1:05:0e:c8:21:cd:89:55:
                    13:5f:99:f9:57:d5:f7:05:cb:a9:87:d9:e6:e7:12:
                    0a:ba:5e:75:3c:a7:ad:54:7f:29:18:c0:20:26:2b:
                    f0:09:d4:d3:a5:fd:bb:06:3b:3b:dc:b1:d2:14:5d:
                    90:e1:35:10:96:b5:24:1b:1b:dc:1b:ef:c2:b8:01:
                    f4:bd:13:21:5e:73:72:fa:f8:af:7b:18:a4:1b:1d:
                    65:8e:72:b6:c9:a9:d1:53:96:6c:c7:c8:59:95:ee:
                    91:f5:26:67:f3:25:e5:b5:01:0e:47:de:ab:a9:3d:
                    c7:f2:f0:bc:07:4b:d1:1d:02:01:cb:3f:c0:9b:31:
                    e5:6a:1f:55:48:da:14:85:a9:37:54:93:75:d5:a8:
                    ea:73:d6:05:7b:f1:58:45:42:c1:fc:00:13:1a:ad:
                    30:4e:dd:36:79:8f:c1:48:13:be:48:10:9f:53:8f:
                    0c:29:26:75:89:a3:10:da:72:fb:ab:cd:83:eb:19:
                    80:3c:2e:c9:ab:3e:58:e0:a0:53:a7:4a:cf:a8:a7:
                    a3:84:f4:58:84:d4:d4:65:65:81:18:c1:30:81:1f:
                    71:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F2:FE:EF:24:16:A7:8E:45:A2:84:A4:56:64:65:EE:1A:8B:71:B5
            X509v3 Authority Key Identifier:
                keyid:2D:0E:7A:F3:D6:DA:0D:72:3A:64:67:5B:48:D6:97:E0:C2:57:19:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/2D0E7AF3D6DA0D723A64675B48D697E0C2571997.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:71:79:03:29:94:8b:d2:8c:41:21:11:3f:6b:74:9e:09:76:
         44:9c:7c:b0:30:06:e6:1a:b0:d5:6b:cc:1a:f8:3f:9b:23:8b:
         bd:7c:5b:92:89:25:8e:0e:3b:26:0e:78:0e:2b:bb:67:34:75:
         1d:66:68:e5:02:dd:b6:08:ff:b3:8a:99:0e:5c:a8:fe:52:67:
         be:63:1f:f6:30:fc:31:72:22:0f:36:b2:35:e6:0b:3b:8f:43:
         b3:ec:40:83:a8:1b:73:cf:31:3e:0e:26:62:f5:ac:22:33:4f:
         18:72:62:fa:78:1e:01:a3:45:27:8a:57:c9:3d:b9:11:45:4f:
         e2:28:16:b0:71:b0:6b:14:14:4f:3e:fa:0b:ac:53:4a:af:28:
         29:78:d6:0b:87:42:5c:3b:7f:cd:54:a5:ef:cb:c9:b1:02:70:
         3f:e7:7d:93:30:fa:4b:c1:48:10:2e:f1:7d:8d:ea:27:0c:a3:
         59:e5:44:5a:49:ef:0c:7d:ca:9a:50:cb:a4:17:a6:fc:43:33:
         d2:cd:60:fb:b2:59:1c:1d:85:eb:05:d9:7e:a7:4d:4b:27:9c:
         ca:50:9e:c4:60:e5:87:74:6c:ff:0e:84:86:1f:f6:7d:7c:db:
         5c:ae:57:bd:a6:8d:66:8d:da:b2:08:1c:f6:d5:66:91:b6:01:
         8e:2a:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----