Route Origin Authorization

$ rpki-client -vvf rpki.akrn.net/repo/AKRN/1/323630323a666266313a3a2f33322d3438203d3e203338313336.roa
File:                     323630323a666266313a3a2f33322d3438203d3e203338313336.roa (raw, json)
Hash identifier:          YpZn2JhciHBux9OatMVVg4x/C3quiT3OD+NM3edP69U=
Subject key identifier:   5A:0B:3A:82:44:E0:62:79:0A:7A:C6:4F:63:4B:1E:27:22:32:29:21
Certificate issuer:       /CN=99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054
Certificate serial:       67322A0B9AFD0CC792C5DAB99F23FE3ED69DAC9B
Authority key identifier: 75:CD:9B:B1:70:C2:C4:20:F0:B6:DA:A7:78:8F:CC:B0:BF:7B:4F:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054.cer
Subject info access:      rsync://rpki.akrn.net/repo/AKRN/1/323630323a666266313a3a2f33322d3438203d3e203338313336.roa
Signing time:             Tue 18 Jun 2024 16:25:11 +0000
ROA not before:           Tue 18 Jun 2024 16:20:11 +0000
ROA not after:            Tue 17 Jun 2025 16:25:11 +0000
asID:                     38136
IP address blocks:        2602:fbf1::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:32:2a:0b:9a:fd:0c:c7:92:c5:da:b9:9f:23:fe:3e:d6:9d:ac:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054
        Validity
            Not Before: Jun 18 16:20:11 2024 GMT
            Not After : Jun 17 16:25:11 2025 GMT
        Subject: CN=5A0B3A8244E062790A7AC64F634B1E2722322921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e6:ea:1f:36:d5:68:53:6f:8b:ec:a0:65:09:
                    d5:3b:ca:6f:32:8d:c3:86:ce:cf:96:41:68:fe:9e:
                    a5:27:f7:c4:66:4c:2c:60:d9:63:7b:43:75:5a:5d:
                    a0:3a:23:f6:0e:c0:93:88:61:16:84:40:d1:9b:24:
                    cf:2e:2d:bb:8e:d2:de:02:70:a7:68:b6:e7:41:f9:
                    3a:29:d2:ae:f0:0e:b3:ac:91:dc:1c:03:d6:8a:27:
                    75:81:9d:c0:c0:58:fa:c2:e3:47:f4:f4:d5:c7:9b:
                    cb:66:d5:9d:23:3a:55:16:32:42:cc:13:76:83:dc:
                    4a:8d:48:33:26:2d:ce:53:e1:0b:73:7c:e6:fe:51:
                    52:0f:a2:89:48:1b:2d:3d:ae:e5:ad:27:bb:02:b0:
                    30:e6:8f:f3:48:6e:ec:3f:ee:ab:af:89:2e:00:49:
                    f3:07:d0:5a:7d:e7:de:3e:53:45:f8:06:3d:01:61:
                    86:71:7c:68:c6:8e:2e:45:6b:34:c8:e9:b0:eb:18:
                    45:6b:ed:fe:f7:cf:19:84:8a:d4:7e:49:2d:51:c1:
                    91:7e:24:98:df:dc:1c:08:29:6f:30:cf:12:b8:43:
                    e7:42:49:91:72:07:2e:cc:04:0c:42:3d:f9:66:dc:
                    dc:1d:30:57:6f:3f:25:a4:db:c2:89:31:9d:14:6a:
                    c4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0B:3A:82:44:E0:62:79:0A:7A:C6:4F:63:4B:1E:27:22:32:29:21
            X509v3 Authority Key Identifier:
                keyid:75:CD:9B:B1:70:C2:C4:20:F0:B6:DA:A7:78:8F:CC:B0:BF:7B:4F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.akrn.net/repo/AKRN/1/75CD9BB170C2C420F0B6DAA7788FCCB0BF7B4FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/1/323630323a666266313a3a2f33322d3438203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf1::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:af:60:e8:61:70:f0:94:51:b4:49:57:41:01:9c:f1:7f:c9:
         1f:7f:2d:26:bb:22:95:3d:d1:ba:a4:88:61:5a:7c:7b:29:a4:
         41:a2:d3:18:fd:0c:19:65:0f:9f:77:96:a9:30:ee:9d:81:8e:
         2c:93:a7:e4:b3:37:81:d4:7b:d9:24:5e:c0:de:f2:ba:dc:56:
         de:db:63:c8:1f:51:5a:8e:c0:19:96:8d:ea:e6:4e:d5:9e:d0:
         e1:89:77:de:bb:b1:33:68:5f:c8:28:93:1a:b6:26:58:13:93:
         07:1d:72:1c:89:a1:8f:0f:20:a6:00:ea:7c:3f:b2:bb:17:1a:
         35:3d:4c:27:c4:1d:66:b0:a3:78:0b:fc:b7:c0:b2:73:51:a5:
         05:34:f6:69:45:6b:80:9e:19:e3:8c:00:55:a0:2e:12:5e:55:
         fe:ff:7e:6e:3d:63:1b:a0:aa:3c:86:09:b3:e3:bf:3f:91:a7:
         8e:91:41:f8:e8:59:ed:01:09:8f:8e:74:a3:65:08:15:4f:86:
         86:eb:d9:8d:13:8e:f3:19:e0:e9:86:75:79:39:98:b0:ca:88:
         59:41:1c:58:28:60:6b:d5:e1:b3:c7:d1:0c:e4:1e:eb:ae:0b:
         c1:20:b6:9e:1a:1f:94:c0:87:ed:d4:90:23:4e:5f:6c:13:4b:
         9d:09:93:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----