Route Origin Authorization

$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34332d3433203d3e203133353237.roa
File:                     323630323a663833643a3a2f34332d3433203d3e203133353237.roa (raw, json)
Hash identifier:          cuOd45+payjgbLybIgEOzpSyOhbQoTyt6mlIokEu9hc=
Subject key identifier:   57:E3:85:07:20:03:65:DD:3B:A3:A9:26:C3:6D:36:D3:6D:71:67:AA
Certificate issuer:       /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial:       27BA02FF087CBD1A146DD28DC150BD9BF335CB59
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access:      rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34332d3433203d3e203133353237.roa
Signing time:             Wed 26 Feb 2025 19:00:02 +0000
ROA not before:           Wed 26 Feb 2025 18:55:02 +0000
ROA not after:            Wed 25 Feb 2026 19:00:02 +0000
asID:                     13527
IP address blocks:        2602:f83d::/43 maxlen: 43
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ba:02:ff:08:7c:bd:1a:14:6d:d2:8d:c1:50:bd:9b:f3:35:cb:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
        Validity
            Not Before: Feb 26 18:55:02 2025 GMT
            Not After : Feb 25 19:00:02 2026 GMT
        Subject: CN=57E38507200365DD3BA3A926C36D36D36D7167AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ce:f2:d5:89:1a:73:32:c8:f2:1c:65:94:d3:
                    49:71:26:9c:08:66:41:bd:9a:16:d0:da:52:a0:d5:
                    e5:7b:78:cf:6a:92:c4:68:90:49:ad:d5:d0:f2:cf:
                    93:53:5c:c6:27:1a:5a:44:25:16:d4:1d:d0:67:08:
                    bf:93:1f:72:f5:1c:12:1d:7b:7d:b2:97:b4:37:a8:
                    53:a8:38:59:d3:d7:3f:c8:7d:eb:c7:d5:f0:c0:23:
                    52:fe:8b:6c:43:77:0b:bb:0f:bf:fb:a4:af:6d:8d:
                    21:25:4f:99:fc:73:ec:65:75:54:d2:9a:e1:65:c6:
                    8d:6b:af:38:f2:8c:7d:fe:f3:4e:6a:89:ef:18:fb:
                    0e:ba:66:e3:5e:0d:a7:a4:de:d0:f8:12:e1:84:77:
                    94:71:b8:39:66:8b:e6:77:fd:2b:5b:68:09:d8:4f:
                    34:43:8c:4d:47:20:dc:5b:b9:4b:5c:72:66:89:aa:
                    29:29:ab:1f:1d:b4:06:58:a1:7a:9a:91:4b:b4:e8:
                    30:0a:6e:1c:f0:c0:1e:55:85:42:ca:a4:af:f9:0d:
                    2e:dc:4f:db:1d:46:41:73:77:3c:d4:b1:04:55:4d:
                    9b:e2:a4:d0:9e:a8:75:8c:dc:02:61:fe:4f:4d:52:
                    66:28:8e:95:cd:fc:6a:69:b7:7b:6d:73:ae:60:ae:
                    57:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E3:85:07:20:03:65:DD:3B:A3:A9:26:C3:6D:36:D3:6D:71:67:AA
            X509v3 Authority Key Identifier:
                keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34332d3433203d3e203133353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83d::/43

    Signature Algorithm: sha256WithRSAEncryption
         80:2f:fd:35:a5:70:9c:94:6f:61:bf:53:e8:fd:01:de:e2:f8:
         02:63:f6:a9:2f:a9:87:57:31:8f:e4:05:24:9f:ed:4c:6f:80:
         92:d1:df:f9:15:85:cb:8c:8c:7c:1a:40:85:28:dc:96:46:92:
         48:bc:55:4d:bb:63:2f:a0:3c:35:b0:7f:41:20:48:96:fa:c3:
         7e:66:b8:1b:0a:40:3d:2e:a7:95:4c:84:78:4e:c0:40:83:4e:
         5c:5f:d4:78:3e:85:dd:ef:c3:a2:0b:9e:09:fd:c0:16:01:1a:
         60:41:03:9b:21:f1:23:9f:12:44:ea:49:60:84:87:74:c9:eb:
         45:f5:84:e7:c1:8c:bc:1e:b4:76:40:4b:46:ba:dc:70:ab:5c:
         a7:1a:61:49:05:ea:60:54:14:06:e3:bb:93:41:81:e6:8c:09:
         b0:c5:d6:df:84:28:f1:a9:c9:a4:46:58:2c:9b:38:c5:c9:6c:
         93:ae:fc:8c:e9:d8:35:bf:a9:bd:f6:8b:3f:a5:9f:4d:ba:d7:
         52:ce:2c:2d:53:56:7e:af:c0:ad:70:0c:ff:87:5a:a4:66:6e:
         5f:e6:3e:b2:63:14:8c:0e:92:76:b7:fd:6d:34:28:44:30:cf:
         fb:c5:5f:3d:87:5c:f6:04:19:ee:cb:88:d6:ec:d0:3c:f7:50:
         41:0b:3f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----