Route Origin Authorization

$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203136353039.roa
File:                     323630323a663833643a3a2f34302d3438203d3e203136353039.roa (raw, json)
Hash identifier:          C5nmmaaiVn6Jg4cGncFVlGgU/33Cegj47s1fUJOuQ6I=
Subject key identifier:   AE:4F:CB:F1:B2:68:6C:CC:DC:5F:8C:D2:F8:58:6F:85:2A:0F:7F:8E
Certificate issuer:       /CN=86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae
Certificate serial:       3B4DA0F38516634AD7D7367534FE4E7EF463D3D1
Authority key identifier: 98:75:18:7C:51:B2:08:93:34:91:43:82:82:FA:25:A7:B3:F5:AB:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae.cer
Subject info access:      rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203136353039.roa
Signing time:             Tue 08 Oct 2024 18:53:26 +0000
ROA not before:           Tue 08 Oct 2024 18:48:26 +0000
ROA not after:            Tue 07 Oct 2025 18:53:26 +0000
asID:                     16509
IP address blocks:        2602:f83d::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4d:a0:f3:85:16:63:4a:d7:d7:36:75:34:fe:4e:7e:f4:63:d3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae
        Validity
            Not Before: Oct  8 18:48:26 2024 GMT
            Not After : Oct  7 18:53:26 2025 GMT
        Subject: CN=AE4FCBF1B2686CCCDC5F8CD2F8586F852A0F7F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:98:2a:5f:eb:27:ea:55:09:62:e5:08:ab:78:
                    ef:8c:a2:3a:ff:20:72:7d:5c:10:48:dc:3b:15:56:
                    ab:dd:38:97:92:d3:e8:f1:e7:86:7b:2d:ed:12:b8:
                    06:dc:bb:61:e7:3f:e9:c9:08:fb:be:1f:8f:3a:93:
                    7c:d3:c9:9d:ac:a1:ed:c7:2a:58:cd:e1:39:76:c4:
                    86:3c:4e:fe:be:1a:5a:41:7b:d0:16:f0:60:06:14:
                    1f:15:d1:cf:2f:30:d2:cb:4c:c7:a2:fe:30:18:de:
                    9d:f5:ef:cf:f9:b6:8a:78:18:a2:bf:97:7a:4b:8e:
                    69:3a:93:ec:a9:f3:5d:81:31:a4:cb:93:7e:1b:29:
                    58:39:4b:18:34:31:0b:9c:78:b0:06:11:de:e4:86:
                    a5:56:ed:a6:c8:88:b8:99:25:15:3e:5f:44:b6:17:
                    09:20:7c:5d:18:c8:ec:7b:b8:3a:80:38:b6:e8:e9:
                    c6:96:f0:c7:d8:bb:9c:a5:12:75:fd:95:1a:b1:4e:
                    76:d7:44:37:e5:12:e7:87:b3:c0:3b:74:73:65:d4:
                    02:a2:77:36:d7:ed:f0:d9:be:dc:d3:c2:53:6a:69:
                    04:53:fc:a4:9a:2b:3b:2b:bc:38:8b:03:29:7c:9e:
                    d5:a8:e0:64:35:82:55:cf:84:3a:e9:1a:62:57:26:
                    36:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4F:CB:F1:B2:68:6C:CC:DC:5F:8C:D2:F8:58:6F:85:2A:0F:7F:8E
            X509v3 Authority Key Identifier:
                keyid:98:75:18:7C:51:B2:08:93:34:91:43:82:82:FA:25:A7:B3:F5:AB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-pp.com/repo/GOOFL/0/9875187C51B208933491438282FA25A7B3F5ABDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34302d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83d::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:d3:9b:7c:e7:ef:6b:82:b0:2d:28:1b:6a:bb:0f:2b:8a:04:
         89:9b:47:f7:f9:a7:84:03:a8:46:78:e5:42:b9:a9:98:a2:14:
         05:f3:c6:7f:c2:89:1a:09:49:7b:cd:84:df:26:b5:46:71:1a:
         cd:bc:77:97:4e:9b:dd:b9:96:85:f2:79:16:6a:f6:de:77:db:
         07:1b:0d:30:6c:c2:57:50:83:df:99:e8:f9:ea:16:a3:f8:ab:
         18:a1:4c:72:e8:8e:3b:92:81:3a:30:0f:63:e8:62:85:12:54:
         d5:24:82:e2:46:e7:c5:23:ad:c3:ab:36:93:f6:94:74:bc:1b:
         ba:e2:89:f1:f7:1f:51:93:3a:a0:95:ef:e2:4d:01:48:8e:ea:
         7a:97:c9:48:2a:1b:64:7c:c7:77:05:36:a1:d2:8a:b8:1e:7a:
         46:b2:e8:09:f1:1c:69:9e:3a:87:c5:73:c5:d9:de:81:b6:dc:
         1e:df:9c:5e:7e:1a:dd:d6:3a:d4:a1:5b:62:6c:8a:57:ca:6a:
         8f:3e:5a:2f:3e:71:ba:ff:ac:9f:3a:16:1a:e9:cf:fc:35:3a:
         52:f4:17:39:fd:fc:01:c2:8b:d2:5f:79:3f:19:8c:99:6f:21:
         37:ae:96:a6:03:8a:0a:94:38:52:1e:7f:b5:22:c2:32:b3:d3:
         eb:0d:a6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----