Route Origin Authorization

$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a36303a3a2f34382d3438203d3e203133353237.roa
File:                     323630323a663833643a36303a3a2f34382d3438203d3e203133353237.roa (raw, json)
Hash identifier:          5FYagwb+BQFQoya5/O/9v8jPk1YHxD4lt3v65I5ENdg=
Subject key identifier:   AC:1F:31:62:DA:76:95:A3:09:E0:C0:76:22:A1:56:FC:B8:66:1A:6A
Certificate issuer:       /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial:       15BC8FC036DE1D5FDE5F23395460A45CD1B42ECA
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access:      rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a36303a3a2f34382d3438203d3e203133353237.roa
Signing time:             Fri 14 Mar 2025 16:34:45 +0000
ROA not before:           Fri 14 Mar 2025 16:29:45 +0000
ROA not after:            Fri 13 Mar 2026 16:34:45 +0000
asID:                     13527
IP address blocks:        2602:f83d:60::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bc:8f:c0:36:de:1d:5f:de:5f:23:39:54:60:a4:5c:d1:b4:2e:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
        Validity
            Not Before: Mar 14 16:29:45 2025 GMT
            Not After : Mar 13 16:34:45 2026 GMT
        Subject: CN=AC1F3162DA7695A309E0C07622A156FCB8661A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:1f:6e:15:7c:27:61:03:59:ae:8b:78:70:
                    47:dd:fe:b8:8a:aa:fe:81:e4:a3:d9:f3:2f:ed:07:
                    77:1c:45:df:05:ff:57:b8:2b:cb:32:d7:05:43:5c:
                    7d:b4:1b:54:c0:18:ef:55:56:d2:a2:13:9c:57:5e:
                    25:6d:dd:0c:7f:fe:f7:98:78:3f:d9:ba:9d:45:23:
                    4d:e1:f3:91:ab:6e:2d:02:92:39:f5:a0:b0:73:c2:
                    84:22:74:58:25:43:55:a8:d0:4e:3f:57:b8:0b:18:
                    d3:af:77:c8:5f:6c:0f:bb:ee:92:a2:02:ad:a3:7d:
                    d1:2e:b7:fb:ca:8b:43:c0:bd:47:12:13:ef:4d:b8:
                    fc:98:5a:b1:98:e8:04:dd:18:8d:3e:50:82:c8:da:
                    76:e1:9d:c8:6e:e5:54:1b:c7:90:18:89:01:7b:e8:
                    31:ca:2a:6e:0b:93:f9:fa:79:79:ca:fe:2f:eb:68:
                    68:68:f0:59:30:54:14:9a:b1:ea:c5:a5:ee:2a:88:
                    d7:f8:75:55:42:6a:6d:b2:9e:a0:e7:58:62:26:41:
                    6c:b3:b1:c9:00:d9:3d:e8:8a:82:c7:ad:44:61:04:
                    b1:e9:56:57:2a:26:2e:b6:db:83:bd:fa:54:d6:21:
                    a7:bc:2c:05:6e:72:ef:71:62:73:0d:cb:b6:77:58:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1F:31:62:DA:76:95:A3:09:E0:C0:76:22:A1:56:FC:B8:66:1A:6A
            X509v3 Authority Key Identifier:
                keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a36303a3a2f34382d3438203d3e203133353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83d:60::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:a7:cd:55:56:80:85:29:00:9b:84:2a:b5:9a:ed:ff:de:cd:
         5d:83:9f:f9:41:17:d5:cc:3a:39:46:8a:fd:c5:6d:c3:bf:6e:
         33:4f:ac:91:e8:e1:9c:47:5e:25:99:69:d4:aa:56:e3:bc:cf:
         1f:84:5f:6d:e0:74:f6:08:61:1e:bd:c8:56:dd:f9:4f:4b:f4:
         5a:f8:d0:3d:5a:5f:d3:60:86:3a:4d:dd:f8:de:f5:03:d5:ec:
         da:c2:8b:64:a7:29:49:4a:03:39:bc:c3:cb:24:23:9c:8d:9f:
         e8:2b:80:4e:6b:24:1c:48:c9:46:27:59:e5:74:42:68:05:05:
         6d:ea:12:83:c4:73:33:f3:a4:54:9d:da:4b:89:ad:67:3e:6b:
         08:6b:08:dd:9f:b5:9b:c2:d6:25:ff:c3:54:6d:1d:83:06:ed:
         b4:ba:f5:39:2c:18:7f:54:93:3b:6c:5b:f0:20:31:d6:c7:c2:
         53:d1:25:19:58:94:5d:f4:42:a1:6c:bf:49:e6:dc:f9:16:b1:
         76:21:43:89:98:ec:f5:d2:5e:31:63:b0:4d:ca:40:aa:7f:da:
         29:c0:ed:2d:75:54:84:dc:71:9f:a9:aa:4f:d7:3f:4e:13:39:
         37:6e:a0:d8:3d:6d:06:39:90:49:f1:15:09:49:8f:3e:72:dd:
         70:21:63:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----