Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa
File:                     323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa (raw, json)
Hash identifier:          hnloc+9Baom9la25qU3IpjmQpTajQG5FHLv3IT4JZiw=
Subject key identifier:   13:18:56:34:D7:EA:07:4C:A1:E2:09:BA:66:80:F9:7F:BA:FC:75:2B
Certificate issuer:       /CN=43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc
Certificate serial:       1B58565245347331D72DBE76714BABD564D6067D
Authority key identifier: 2D:0E:7A:F3:D6:DA:0D:72:3A:64:67:5B:48:D6:97:E0:C2:57:19:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa
Signing time:             Sun 12 Nov 2023 08:20:41 +0000
ROA not before:           Sun 12 Nov 2023 08:15:41 +0000
ROA not after:            Sun 10 Nov 2024 08:20:41 +0000
asID:                     198585
IP address blocks:        2602:fa6e:200::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:58:56:52:45:34:73:31:d7:2d:be:76:71:4b:ab:d5:64:d6:06:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc
        Validity
            Not Before: Nov 12 08:15:41 2023 GMT
            Not After : Nov 10 08:20:41 2024 GMT
        Subject: CN=13185634D7EA074CA1E209BA6680F97FBAFC752B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a5:a2:c0:63:82:bb:b3:c8:7b:93:00:be:f1:
                    da:0d:ba:03:76:8d:82:25:25:e3:00:e3:04:29:4e:
                    a7:d4:d6:dc:77:42:f8:86:d4:42:c5:7e:f4:3b:5a:
                    be:e4:62:48:74:d2:f5:2d:7a:74:a2:03:e0:02:cc:
                    9b:00:0e:e0:1a:eb:c4:62:10:d8:3b:1d:cb:d8:34:
                    69:94:8f:e2:1a:43:7f:24:b5:fb:5a:da:c9:53:3d:
                    ec:5e:b5:20:8d:3f:bd:05:dc:ee:33:6a:dd:7d:9a:
                    4a:06:f2:f4:04:7c:45:da:e0:be:cb:01:b4:73:39:
                    f1:c2:c9:d2:cc:dc:e4:a0:e3:ea:db:65:a6:a5:d7:
                    f7:eb:78:76:81:99:32:7e:66:c2:4c:9d:01:49:5b:
                    33:c8:13:21:c3:82:74:35:82:2f:d7:67:28:07:25:
                    7e:3d:20:67:e6:84:99:be:72:ba:b9:35:bd:ce:58:
                    b6:7f:0f:21:48:d1:ec:15:96:3b:47:0d:4b:2e:ed:
                    7d:3c:1f:6a:f2:88:6e:53:e1:02:8b:fd:ed:09:04:
                    f5:b0:f7:19:51:a7:d2:26:7f:63:43:aa:30:98:1f:
                    1d:7d:d8:ac:1a:9d:ea:e0:d3:e2:f5:18:08:71:e3:
                    70:19:f9:3c:bc:55:65:ad:1e:87:8a:eb:79:37:0e:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:18:56:34:D7:EA:07:4C:A1:E2:09:BA:66:80:F9:7F:BA:FC:75:2B
            X509v3 Authority Key Identifier:
                keyid:2D:0E:7A:F3:D6:DA:0D:72:3A:64:67:5B:48:D6:97:E0:C2:57:19:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/2D0E7AF3D6DA0D723A64675B48D697E0C2571997.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         a9:39:bc:88:95:1c:0f:1f:d1:6f:5a:78:9c:51:6b:4a:cd:06:
         bf:a4:00:7c:56:cb:7d:29:28:87:f8:38:71:3a:e1:2c:63:03:
         a8:8a:1e:87:c7:e1:e7:99:f0:70:5a:58:b9:66:28:e7:90:ef:
         0b:bf:8d:9a:fb:f7:ec:1f:05:29:d4:39:a5:d1:29:41:9c:da:
         51:ea:1f:20:b1:1b:38:99:12:83:c3:e6:9e:b1:23:a2:d0:78:
         16:06:aa:04:d3:ae:e5:45:47:76:4d:c3:f8:06:58:1b:15:d6:
         32:b4:b3:28:b8:07:c3:ca:e2:be:be:66:1e:c0:1d:2c:ec:9a:
         39:3b:5b:02:30:f5:70:9a:b8:01:b4:6e:ae:47:1c:c5:fe:fe:
         17:9e:70:cf:d6:bd:80:2a:f9:e4:ba:06:29:57:de:30:5f:7a:
         09:c9:9a:8d:af:06:59:df:03:f6:19:e7:3d:69:c3:fc:df:01:
         d0:73:bd:f1:37:3d:b9:c8:c3:31:34:ef:fe:6f:36:c3:21:31:
         5a:cc:38:6c:b1:99:b1:67:9e:e9:e8:0d:93:16:dd:45:ab:78:
         77:01:d0:54:c4:43:a3:fe:20:f1:15:6f:1b:cc:93:00:a1:2e:
         72:15:82:ee:2a:a9:b3:91:8f:40:d9:0d:10:99:34:1a:27:0f:
         7d:a3:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----