Route Origin Authorization

$ rpki-client -vvf rpki.akrn.net/repo/AKRN/1/323630323a666266313a3a2f33322d3438203d3e20393833.roa
File:                     323630323a666266313a3a2f33322d3438203d3e20393833.roa (raw, json)
Hash identifier:          t4zb2rsLFuurkZspVE+Jpzn36Fl5FhxAPe9BchugOQU=
Subject key identifier:   DC:22:58:3E:9E:AE:2A:AA:49:A1:54:B6:E1:19:3D:08:85:C8:DD:28
Certificate issuer:       /CN=99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054
Certificate serial:       3885628F59CF74BA18610856717B40191BDC52AD
Authority key identifier: 75:CD:9B:B1:70:C2:C4:20:F0:B6:DA:A7:78:8F:CC:B0:BF:7B:4F:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054.cer
Subject info access:      rsync://rpki.akrn.net/repo/AKRN/1/323630323a666266313a3a2f33322d3438203d3e20393833.roa
Signing time:             Tue 18 Jun 2024 16:25:11 +0000
ROA not before:           Tue 18 Jun 2024 16:20:11 +0000
ROA not after:            Tue 17 Jun 2025 16:25:11 +0000
asID:                     983
IP address blocks:        2602:fbf1::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:85:62:8f:59:cf:74:ba:18:61:08:56:71:7b:40:19:1b:dc:52:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054
        Validity
            Not Before: Jun 18 16:20:11 2024 GMT
            Not After : Jun 17 16:25:11 2025 GMT
        Subject: CN=DC22583E9EAE2AAA49A154B6E1193D0885C8DD28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:db:2d:6c:b4:a2:50:d0:a1:29:5a:d7:f0:ae:
                    3e:ac:6c:88:38:f1:a5:19:62:13:18:b1:cb:26:ab:
                    f5:0e:93:0d:e6:d2:7d:6b:5c:87:26:a5:61:4f:8e:
                    ad:5d:4b:27:a7:5e:ef:9d:5d:b8:93:e0:3b:e5:1b:
                    d2:b3:63:4c:29:aa:89:eb:cf:8b:95:e5:1e:a0:1c:
                    ce:1c:f4:58:ef:07:3e:ad:33:a1:cd:3b:d6:7e:e4:
                    5d:5b:af:8f:ec:c4:ec:c2:2a:11:2e:52:43:ef:67:
                    6f:1b:df:e6:50:f4:29:31:25:eb:15:07:7a:d0:e8:
                    3b:b2:fb:5b:33:2a:79:45:5d:30:25:a8:c1:35:dc:
                    77:a1:0e:ae:4e:d6:59:25:86:1e:85:1b:1c:90:0b:
                    ab:a1:fa:f0:5d:af:47:b7:8b:1f:1c:b5:20:ba:0c:
                    a3:31:e7:b6:24:88:0e:ce:3d:a4:a9:87:39:27:f0:
                    66:f3:2f:15:41:16:b9:3a:02:14:d9:68:cd:69:16:
                    05:f3:b6:5c:9c:60:2f:11:24:e9:85:03:d3:18:27:
                    56:70:92:d0:76:d8:85:17:30:bc:de:11:47:b2:a5:
                    8b:f7:15:23:91:2a:3a:aa:93:b9:4a:12:90:5f:5d:
                    5e:94:f0:6b:e0:29:3c:f8:7d:5b:18:f9:8e:df:a0:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:22:58:3E:9E:AE:2A:AA:49:A1:54:B6:E1:19:3D:08:85:C8:DD:28
            X509v3 Authority Key Identifier:
                keyid:75:CD:9B:B1:70:C2:C4:20:F0:B6:DA:A7:78:8F:CC:B0:BF:7B:4F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.akrn.net/repo/AKRN/1/75CD9BB170C2C420F0B6DAA7788FCCB0BF7B4FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/1/323630323a666266313a3a2f33322d3438203d3e20393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf1::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:52:df:36:ad:d1:da:0d:07:40:6c:fc:5e:0c:cd:22:cc:a8:
         f1:c4:c9:1e:3f:42:ea:93:5b:68:fd:4f:36:cd:ba:ef:f6:d5:
         b3:60:f3:06:1a:e0:29:68:44:99:78:67:13:ee:c4:81:20:81:
         cc:d1:8a:70:13:46:5e:4e:b9:6d:73:3e:b6:86:46:f3:31:b0:
         c1:1b:45:3c:99:c1:b9:0f:56:29:cb:7e:a3:cc:82:35:95:4e:
         92:f0:da:de:ea:59:70:82:9f:79:9d:b7:4a:eb:a7:b0:ef:fc:
         6a:2e:18:5b:e9:6c:14:b4:3f:d2:d7:b9:90:13:a1:15:df:c5:
         53:8d:61:d2:c7:68:7d:c3:8b:69:30:ed:2b:4e:97:14:4c:3b:
         ea:d4:fb:37:be:7f:b0:e1:66:e1:9c:09:2c:fc:54:19:5a:21:
         9d:65:ee:8e:21:ca:86:9a:60:e7:ee:09:4a:bf:0c:2b:38:dc:
         45:02:a9:8c:a5:6c:09:7b:60:07:12:51:59:e8:e1:08:2b:59:
         ef:b7:81:3b:d2:df:6a:18:04:d7:e7:98:9b:b6:d3:25:40:ad:
         14:76:31:4c:99:b9:c4:85:91:c1:f1:a7:fc:bc:66:b2:68:13:
         88:e7:9d:54:49:d6:92:68:23:00:1b:54:07:39:38:eb:1b:ae:
         11:03:4c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----