Route Origin Authorization

$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203133333335.roa
File:                     323630323a663833643a3a2f34302d3438203d3e203133333335.roa (raw, json)
Hash identifier:          eDyQXChnGu2TL/d8FUg3QBbKlY2yhHQJ7Y4yez8VMow=
Subject key identifier:   09:01:E0:EC:2E:EA:6A:EA:1B:42:2A:56:B4:33:C4:B3:97:39:9A:59
Certificate issuer:       /CN=86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae
Certificate serial:       0ED0675917F717014AD4C8C6819B1EF4C7CA7AEE
Authority key identifier: 98:75:18:7C:51:B2:08:93:34:91:43:82:82:FA:25:A7:B3:F5:AB:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae.cer
Subject info access:      rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203133333335.roa
Signing time:             Wed 30 Oct 2024 15:29:35 +0000
ROA not before:           Wed 30 Oct 2024 15:24:35 +0000
ROA not after:            Wed 29 Oct 2025 15:29:35 +0000
asID:                     13335
IP address blocks:        2602:f83d::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d0:67:59:17:f7:17:01:4a:d4:c8:c6:81:9b:1e:f4:c7:ca:7a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae
        Validity
            Not Before: Oct 30 15:24:35 2024 GMT
            Not After : Oct 29 15:29:35 2025 GMT
        Subject: CN=0901E0EC2EEA6AEA1B422A56B433C4B397399A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:e6:02:d2:24:0f:4b:9f:83:49:d1:b6:50:
                    76:cf:a0:31:a2:ed:5f:ea:c5:cb:3a:bf:f2:a9:92:
                    91:b2:50:85:cb:c7:44:b9:40:61:c4:86:36:22:4d:
                    5f:bb:2b:23:31:f4:d1:6a:7c:b0:67:ec:97:fe:be:
                    c1:da:af:c2:d4:8f:95:6b:4d:4a:d2:96:65:64:76:
                    3c:d0:4a:6f:95:0f:24:f0:0e:5e:4c:c9:5f:58:83:
                    c1:e1:e6:90:a7:61:e5:c3:73:10:27:0e:34:37:7e:
                    56:cb:be:46:c0:83:27:77:62:fa:70:ee:f2:47:7c:
                    d7:ac:e2:24:2e:ac:47:3e:85:19:d5:6b:a8:f4:d9:
                    65:b5:26:6d:6d:52:44:f8:d7:9d:d0:a1:df:68:6f:
                    b5:ac:6a:7e:5a:e1:5e:1d:c9:ee:1c:8d:0c:a7:43:
                    ff:2b:97:d5:3e:82:fa:88:da:6e:2b:57:69:3f:74:
                    b0:25:8f:92:e0:a5:aa:3a:5f:60:57:7f:b7:d7:2f:
                    b0:97:17:e4:8c:5a:c4:16:0c:df:89:75:0a:6c:4c:
                    c0:be:66:e4:5a:2d:59:28:4b:c3:11:b6:04:b3:49:
                    92:f6:28:c3:1d:f7:50:26:d3:70:d2:6d:47:d6:ac:
                    2a:ad:37:7f:5b:fb:2f:9e:1e:9f:a7:a5:c6:2e:89:
                    26:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:01:E0:EC:2E:EA:6A:EA:1B:42:2A:56:B4:33:C4:B3:97:39:9A:59
            X509v3 Authority Key Identifier:
                keyid:98:75:18:7C:51:B2:08:93:34:91:43:82:82:FA:25:A7:B3:F5:AB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-pp.com/repo/GOOFL/0/9875187C51B208933491438282FA25A7B3F5ABDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83d::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:34:9e:7a:48:19:54:ea:f2:a2:57:e3:42:e2:05:c1:34:2b:
         9a:b6:2e:d7:06:c3:c4:82:5b:c9:02:1f:65:9f:10:4a:15:4a:
         0c:38:0c:bf:ec:bc:bc:91:da:ea:50:79:01:2d:ae:31:e4:d8:
         5b:07:1f:bf:08:08:0f:2e:f7:2f:5c:18:c9:91:f6:06:3f:c5:
         06:23:40:d4:5c:db:5c:a3:3b:2b:f2:29:fa:32:bd:8c:66:37:
         7e:55:83:ec:84:e3:7e:b5:48:2c:cf:77:49:21:34:bb:ea:6f:
         45:e2:c6:4d:dd:5e:e0:c1:9a:36:37:2d:5b:23:48:8c:5d:1c:
         30:99:c1:c4:09:d1:46:4f:0c:96:18:60:d3:4c:7f:54:a8:04:
         6c:8c:0e:f4:50:34:6f:91:96:10:48:cb:f1:b0:c3:83:b3:cd:
         32:19:34:42:29:2d:ef:d8:3f:1f:56:0e:36:7b:9a:62:66:70:
         01:e3:de:b2:f2:c8:e7:c9:aa:be:e2:34:0f:09:ce:4b:f7:f4:
         84:96:42:e1:5e:97:42:e7:8b:17:2d:b1:2e:2c:5d:0e:3a:e4:
         74:5c:38:72:60:07:1d:78:b6:d6:f6:2d:bf:e5:9a:bb:38:4b:
         a2:9c:f2:41:a9:44:a4:ae:0d:28:a8:23:0c:94:eb:2d:da:2b:
         56:bd:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----