Route Origin Authorization

$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203133323135.roa
File:                     323630323a663833643a3a2f34302d3438203d3e203133323135.roa (raw, json)
Hash identifier:          n7cBtWe92yMh/U+s9H+8tKKnCpHk5rU6wzf+o3e1R8M=
Subject key identifier:   93:1E:08:5D:9F:29:D3:08:DE:AB:62:0F:96:62:63:27:02:ED:9A:22
Certificate issuer:       /CN=86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae
Certificate serial:       6CC45C4BBF6B7ACE64D311DD2C679C770E97795D
Authority key identifier: 98:75:18:7C:51:B2:08:93:34:91:43:82:82:FA:25:A7:B3:F5:AB:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae.cer
Subject info access:      rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203133323135.roa
Signing time:             Thu 31 Oct 2024 01:09:15 +0000
ROA not before:           Thu 31 Oct 2024 01:04:15 +0000
ROA not after:            Thu 30 Oct 2025 01:09:15 +0000
asID:                     13215
IP address blocks:        2602:f83d::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c4:5c:4b:bf:6b:7a:ce:64:d3:11:dd:2c:67:9c:77:0e:97:79:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae
        Validity
            Not Before: Oct 31 01:04:15 2024 GMT
            Not After : Oct 30 01:09:15 2025 GMT
        Subject: CN=931E085D9F29D308DEAB620F9662632702ED9A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:22:f9:1d:6a:28:e3:b5:53:5a:f9:eb:9f:
                    27:9a:62:63:a5:b3:db:e8:e9:83:eb:c6:fb:a8:5c:
                    3e:03:88:f9:19:be:23:22:c5:da:55:5c:66:56:cd:
                    94:df:f5:c2:de:72:25:75:f7:6d:b8:d9:df:32:5e:
                    2e:c4:ec:27:8d:e1:51:a0:13:13:77:6e:8c:17:e0:
                    d7:f4:41:6f:8b:4f:f8:b5:85:d9:d4:8e:8b:2f:39:
                    30:22:20:ff:88:7a:86:8d:37:3c:94:72:f8:a4:e2:
                    f8:96:89:ac:d7:9b:2a:26:0c:b2:1d:df:da:d8:6e:
                    12:b5:13:99:6e:f6:38:c9:70:43:2c:46:aa:ae:fe:
                    84:f0:22:c4:1a:bc:73:ef:c5:38:dc:4b:8d:c8:95:
                    95:ed:2f:8b:d4:6e:c8:9e:28:c5:ae:24:21:7e:5b:
                    5b:4a:93:e0:f7:46:b9:95:8f:7b:ed:11:a9:c0:b0:
                    c8:92:58:30:78:cd:66:21:3a:ed:d1:90:4e:d5:e9:
                    6a:6b:43:b5:00:70:fa:fa:45:0c:56:8a:2a:07:3e:
                    54:b6:92:1a:d4:dd:f4:ee:86:85:d4:fb:21:4e:07:
                    1a:73:ba:ba:6e:85:c0:9e:82:f8:f4:ed:62:e6:51:
                    b9:64:09:88:88:ce:97:3e:c9:90:6e:57:94:f9:db:
                    7e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1E:08:5D:9F:29:D3:08:DE:AB:62:0F:96:62:63:27:02:ED:9A:22
            X509v3 Authority Key Identifier:
                keyid:98:75:18:7C:51:B2:08:93:34:91:43:82:82:FA:25:A7:B3:F5:AB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-pp.com/repo/GOOFL/0/9875187C51B208933491438282FA25A7B3F5ABDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203133323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83d::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:3e:31:e9:de:13:5c:f4:5d:44:c1:2b:f5:01:2e:dc:fd:ed:
         d1:cf:3b:75:aa:de:f9:b4:d2:2f:fc:37:13:49:6e:07:96:f7:
         1a:5e:53:de:9e:8d:09:a0:71:8e:c1:cf:c7:37:57:86:b3:13:
         f0:6c:7b:b4:3f:d1:fb:b8:2f:d3:62:d2:95:42:5e:66:94:0b:
         7f:18:67:2f:a1:50:a7:25:be:af:af:7a:e1:f5:d7:ab:3a:71:
         fc:fa:80:98:0e:99:b6:ad:e7:77:65:fd:c0:cf:2b:a8:72:57:
         59:61:6e:f2:46:75:64:8e:10:68:32:f6:dc:df:aa:df:43:ce:
         d2:a7:fb:c0:ab:41:69:d4:4a:e1:5e:6a:fe:5b:32:bb:b6:4c:
         00:bc:55:9d:08:ec:2e:50:31:56:ee:64:aa:1e:30:e3:c0:44:
         cb:f7:ab:97:b2:78:a3:2f:be:6b:d4:18:fc:5f:41:67:3d:73:
         3a:bc:e0:ad:d1:e1:0a:41:52:ca:c7:d9:cd:41:ed:45:3e:51:
         08:a0:c4:a8:08:74:0e:85:ce:6f:96:f4:e1:b2:1c:6e:7d:4e:
         89:42:cc:4d:19:eb:78:3e:ef:68:ba:de:32:2a:0c:40:80:1f:
         18:c1:cd:48:9a:d9:11:6c:f5:bd:b2:f1:89:03:d3:41:23:21:
         a4:d6:96:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----