Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/323630363a373134303a666230303a3a2f34302d3438203d3e20393137.roa
File:                     323630363a373134303a666230303a3a2f34302d3438203d3e20393137.roa (raw, json)
Hash identifier:          qVZZZ9ePhDBOFDiSqu4yeesjntOOsiNmcMiGMaRa+Rw=
Subject key identifier:   14:EF:1F:A5:8B:16:F5:1C:AE:42:47:E2:B2:CF:6A:44:F3:5E:F5:4A
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       481791B12D2A651E385E3EBD776CDC7FE3554AF6
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a666230303a3a2f34302d3438203d3e20393137.roa
Signing time:             Mon 24 Feb 2025 12:30:45 +0000
ROA not before:           Mon 24 Feb 2025 12:25:45 +0000
ROA not after:            Mon 23 Feb 2026 12:30:45 +0000
asID:                     917
IP address blocks:        2606:7140:fb00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:17:91:b1:2d:2a:65:1e:38:5e:3e:bd:77:6c:dc:7f:e3:55:4a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Feb 24 12:25:45 2025 GMT
            Not After : Feb 23 12:30:45 2026 GMT
        Subject: CN=14EF1FA58B16F51CAE4247E2B2CF6A44F35EF54A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:66:84:81:90:7a:67:3f:15:74:ba:e7:1f:
                    6d:c6:34:e3:80:36:4f:13:57:ad:b2:0f:92:39:0d:
                    88:21:20:e1:60:a0:dc:0c:d3:db:19:27:ee:2b:ab:
                    13:6c:a2:bb:0a:a4:f3:48:75:98:ca:ca:25:bc:2a:
                    93:18:2c:21:ca:3b:6e:ec:d1:34:63:51:68:54:05:
                    c0:f3:74:fc:eb:ef:1c:21:76:8f:a7:ae:95:ab:c0:
                    3e:9a:90:14:9c:bb:7c:06:0c:43:c6:f4:5f:d8:33:
                    54:cf:a9:89:a6:8e:23:3b:d3:36:e5:93:dc:69:42:
                    df:de:91:32:ff:f2:45:d1:ba:2a:b7:ab:02:09:dc:
                    81:9c:48:0b:3f:cc:bf:a5:1b:f3:e3:d0:27:df:c8:
                    c7:e0:62:b3:e1:a4:b7:84:f4:91:87:d3:09:df:39:
                    5f:a9:08:f7:21:78:44:7d:8f:42:a3:b4:42:b0:d6:
                    06:8c:a5:87:9c:0f:7d:5d:14:76:29:f5:50:df:2c:
                    a2:a5:97:d4:9e:cb:b0:c3:d7:63:fb:d0:31:7e:2d:
                    42:54:b4:3a:80:c7:e3:41:2e:95:db:e2:65:e3:21:
                    1b:65:e0:83:11:a1:36:44:92:1a:4c:0e:3e:0d:10:
                    c5:f0:99:d1:6c:78:ee:5f:ae:5c:7b:c3:03:bd:a0:
                    f8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EF:1F:A5:8B:16:F5:1C:AE:42:47:E2:B2:CF:6A:44:F3:5E:F5:4A
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a666230303a3a2f34302d3438203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7140:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:c4:a2:1c:81:25:de:01:f5:43:98:72:b7:31:4a:98:e6:dd:
         a3:6d:ae:45:43:07:93:19:92:24:93:f6:ba:c0:6d:67:24:a1:
         6c:2e:dc:f7:08:e2:96:8e:bb:72:fe:0c:bc:da:d5:c0:28:75:
         49:b9:0d:09:8c:c9:eb:3c:39:52:69:2e:3f:88:0b:b9:c9:25:
         ea:69:56:70:4f:86:a2:bd:bc:c3:77:53:67:46:2d:23:12:03:
         76:d8:e7:cf:f6:bd:b5:71:d7:4a:21:78:87:c2:c6:db:02:34:
         f7:15:b9:2c:01:38:1d:ab:f4:72:3b:d4:0d:d5:60:c8:f5:8d:
         35:9f:9d:f3:5e:77:aa:d3:d5:7b:ba:9b:e2:b1:64:e2:a4:30:
         24:b5:5f:e6:4e:a3:6b:9a:b0:e7:20:fb:56:eb:68:72:f1:14:
         8b:58:14:41:ef:29:df:85:eb:51:c3:e4:9f:fb:02:3b:91:b9:
         ce:4f:ea:28:4b:b5:e9:b9:35:d8:05:a1:ed:60:86:a9:ae:7c:
         ca:2c:f8:d0:97:17:dd:20:08:3b:58:8c:62:18:c3:90:79:48:
         63:2f:47:51:04:ef:f9:c7:70:d7:3e:5d:6b:2a:72:14:e5:7e:
         70:81:eb:13:bf:4f:ad:68:e3:bb:bb:ba:10:fb:75:f1:49:ae:
         d8:0b:d3:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----