Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/18/323630313a316430303a3a2f32382d3438203d3e2037373139.roa
File:                     323630313a316430303a3a2f32382d3438203d3e2037373139.roa (raw, json)
Hash identifier:          fHZEQgHAdfZjPemPI7vCM1hY7UhAzL0w0dtDqabkt5U=
Subject key identifier:   CE:DA:25:BA:01:E2:37:8D:FE:86:BD:0D:CA:90:5D:26:E0:46:11:8E
Certificate issuer:       /CN=cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c
Certificate serial:       296FFD81440CC25065F800CDE303681F6D6ABDAF
Authority key identifier: AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer
Subject info access:      rsync://rpki.co/repo/AS945/18/323630313a316430303a3a2f32382d3438203d3e2037373139.roa
Signing time:             Mon 20 May 2024 21:20:12 +0000
ROA not before:           Mon 20 May 2024 21:15:12 +0000
ROA not after:            Mon 19 May 2025 21:20:12 +0000
asID:                     7719
IP address blocks:        2601:1d00::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6f:fd:81:44:0c:c2:50:65:f8:00:cd:e3:03:68:1f:6d:6a:bd:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c
        Validity
            Not Before: May 20 21:15:12 2024 GMT
            Not After : May 19 21:20:12 2025 GMT
        Subject: CN=CEDA25BA01E2378DFE86BD0DCA905D26E046118E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:9b:a8:4c:9b:88:94:fe:b7:de:59:37:2b:
                    5d:38:37:b4:01:f9:ab:dd:1a:84:63:39:03:fa:c3:
                    2e:54:af:8d:47:77:a1:ed:bc:1b:f6:94:06:11:23:
                    67:ca:8a:c6:b2:43:5c:74:87:31:dd:71:f2:c7:5c:
                    3c:db:87:9f:f8:d7:93:49:08:0f:3e:3e:bb:67:e9:
                    22:ff:fc:db:e2:04:d3:4a:bd:6b:ea:36:d1:42:98:
                    66:2f:3e:a8:08:71:a5:93:b4:b4:68:89:75:2d:25:
                    9f:4f:5f:17:92:02:62:b1:f9:44:b0:10:0e:da:0e:
                    48:60:92:5e:fb:75:b3:53:e6:a7:00:21:ed:30:ca:
                    1b:ba:04:24:6c:cf:1b:8c:a7:e1:47:f2:48:a9:43:
                    ab:27:c5:ad:ef:85:2e:56:c5:7f:8b:d9:fa:f8:8c:
                    5a:22:8f:1f:81:f8:3a:0e:a6:c2:8d:3e:a9:1f:5f:
                    b2:5d:68:e0:68:f7:cc:ae:4c:6f:3c:ef:27:04:5d:
                    df:f2:c4:5a:4e:df:0d:08:ff:6f:73:17:c5:53:8a:
                    fd:aa:dc:65:26:22:53:ea:eb:44:b5:51:63:37:12:
                    7c:f1:40:d2:89:02:a3:3b:13:db:68:4c:98:18:19:
                    66:e9:d7:f1:7e:2a:17:1f:a8:c9:40:87:56:58:b7:
                    52:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DA:25:BA:01:E2:37:8D:FE:86:BD:0D:CA:90:5D:26:E0:46:11:8E
            X509v3 Authority Key Identifier:
                keyid:AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/18/ACAAF041B8BE93E9AC0A06EBF59FDC21EC2340B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/18/323630313a316430303a3a2f32382d3438203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d00::/28

    Signature Algorithm: sha256WithRSAEncryption
         2c:da:26:3d:d7:af:26:9b:e0:18:0b:d4:e8:8a:bd:f4:7f:2d:
         13:1a:3d:60:d3:39:ea:04:f5:55:00:e2:ea:b9:50:d2:d1:94:
         e2:71:d4:02:c5:f7:d8:03:d0:3c:6a:fd:c2:5c:3d:a7:61:1e:
         02:2f:d1:36:e4:8c:49:51:eb:6d:51:3d:12:c2:5e:af:25:76:
         5d:e2:40:bd:2c:e5:b3:1c:e8:c9:8e:31:46:16:df:ec:bf:46:
         6d:63:04:0a:b4:3f:cb:9d:4d:2f:0b:20:e1:6a:c1:78:f1:b4:
         82:d0:81:35:16:88:3e:15:ec:2c:07:43:16:27:b1:80:ca:bb:
         92:54:f5:97:d4:09:cb:d7:20:e4:c9:e8:9f:33:1c:a2:4b:cf:
         57:ff:46:d2:ca:54:4d:24:df:85:14:ca:18:fc:c0:c4:b3:97:
         d8:8e:41:b4:ba:48:6e:84:73:ac:a0:d1:c2:57:f1:b5:f6:10:
         5d:f8:54:20:ff:54:95:29:c4:70:ee:4f:44:09:d1:22:e9:6b:
         34:d3:b1:25:b2:30:eb:e9:a7:8a:85:3b:99:fa:87:83:92:00:
         2c:f4:a3:7a:59:ff:27:01:01:10:16:58:46:2f:dd:cf:0d:32:
         b5:ac:95:5a:6f:32:0f:fe:22:45:d6:19:ef:2f:71:66:6d:2e:
         30:be:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----