Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/18/323630313a316430383a363030303a3a2f34342d3438203d3e2031303132.roa
File:                     323630313a316430383a363030303a3a2f34342d3438203d3e2031303132.roa (raw, json)
Hash identifier:          qeBYt5rcdLACdPpnuwFokPul5+iw6WW8AuL3flfveYg=
Subject key identifier:   EC:64:AE:42:22:92:86:A1:0C:1B:1D:4B:D0:DC:04:A0:22:A9:5F:86
Certificate issuer:       /CN=cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c
Certificate serial:       7EA0B4379BDDBC70FF21B1770EFE3B4544BFF176
Authority key identifier: AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer
Subject info access:      rsync://rpki.co/repo/AS945/18/323630313a316430383a363030303a3a2f34342d3438203d3e2031303132.roa
Signing time:             Sat 25 May 2024 05:06:01 +0000
ROA not before:           Sat 25 May 2024 05:01:01 +0000
ROA not after:            Sat 24 May 2025 05:06:01 +0000
asID:                     1012
IP address blocks:        2601:1d08:6000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a0:b4:37:9b:dd:bc:70:ff:21:b1:77:0e:fe:3b:45:44:bf:f1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c
        Validity
            Not Before: May 25 05:01:01 2024 GMT
            Not After : May 24 05:06:01 2025 GMT
        Subject: CN=EC64AE42229286A10C1B1D4BD0DC04A022A95F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e3:ec:2c:aa:60:ba:16:0f:fa:be:fd:0e:17:
                    66:75:4f:ea:33:92:14:19:e5:37:ae:fd:94:dc:04:
                    cc:ef:c7:3d:46:06:3a:79:b6:ac:25:e1:b0:57:86:
                    38:5e:74:af:e9:e2:10:ed:a2:73:13:82:4d:ed:be:
                    e7:9b:76:c7:68:e4:49:1b:66:9d:a2:2b:af:70:a7:
                    56:af:3f:f8:be:ff:94:18:e5:38:28:30:91:3e:8d:
                    88:7a:34:f8:22:38:7b:a5:da:6d:2b:4c:b5:9f:bb:
                    50:d8:b1:9c:a7:73:49:42:88:1e:99:56:6b:a0:04:
                    57:1f:b6:d9:4d:17:96:c5:8f:21:40:4f:92:a1:df:
                    06:6c:68:a8:53:49:9b:33:93:4b:be:75:c2:7f:08:
                    3c:8c:c0:e5:ee:27:6f:d8:e7:12:c9:1e:3e:45:88:
                    b8:85:27:c5:5e:4b:ab:2b:d2:44:49:c9:dc:ce:40:
                    40:0f:8a:0f:7e:8f:c7:3e:c3:40:c3:71:fc:0b:f5:
                    e5:85:7a:40:99:b9:d0:ef:cf:48:80:99:f3:16:cd:
                    30:50:01:ee:43:67:79:08:4b:03:82:31:6d:ae:2d:
                    19:56:16:5d:57:b5:8b:c5:cb:89:d1:4e:5b:bb:03:
                    b9:ec:50:b2:95:a6:e1:90:51:e5:37:08:75:30:23:
                    ca:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:64:AE:42:22:92:86:A1:0C:1B:1D:4B:D0:DC:04:A0:22:A9:5F:86
            X509v3 Authority Key Identifier:
                keyid:AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/18/ACAAF041B8BE93E9AC0A06EBF59FDC21EC2340B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/18/323630313a316430383a363030303a3a2f34342d3438203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08:6000::/44

    Signature Algorithm: sha256WithRSAEncryption
         b0:aa:a4:0e:62:4a:81:66:d7:58:41:4e:bc:fa:f6:cf:5c:86:
         d1:b5:30:f3:76:d1:63:d6:5a:99:26:1b:61:c4:40:c1:59:91:
         93:97:b5:a9:0d:79:85:dc:04:db:cf:fc:c7:c6:7f:4a:2c:2d:
         4d:d9:39:f6:0f:83:5d:36:a8:ba:6c:2f:e1:d9:12:fb:ee:d7:
         0a:d9:8b:f5:3b:da:97:a4:cf:84:8c:97:27:4e:bd:67:23:ef:
         da:80:98:fa:6c:c1:f8:5a:c0:e6:53:0a:71:06:aa:57:b3:73:
         b1:5d:69:8c:46:66:93:e9:04:d4:2e:3b:d5:7a:80:08:49:74:
         fe:93:32:04:55:24:2b:67:8a:7a:34:24:e0:bf:77:dc:58:6c:
         4c:06:20:8d:59:74:44:48:53:da:fe:f7:ae:28:d1:47:f4:34:
         dc:bb:1e:01:f9:9a:39:83:a5:73:9d:15:a8:b5:c7:1b:49:13:
         1f:56:df:ed:cf:c1:59:76:b2:d8:2a:38:d5:0a:38:f0:e3:14:
         e4:1f:30:fd:da:c7:84:24:a5:6e:61:81:84:04:30:a9:e9:44:
         53:33:11:2b:2f:4a:24:74:aa:36:83:5c:86:21:1d:c4:1a:eb:
         ac:ee:aa:d5:82:2e:3d:10:45:41:5b:1e:27:0b:02:95:0e:a5:
         17:47:41:98
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfqC0N5vdvHD/IbF3Dv47RUS/8XYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyY2YyYzQ4MzAwZjdkYTcxMDZhZTc0ZDI3YzczNjYzYWEx
MDc5ODhhODJlYzE4YjIyMWMwHhcNMjQwNTI1MDUwMTAxWhcNMjUwNTI0MDUwNjAx
WjAzMTEwLwYDVQQDEyhFQzY0QUU0MjIyOTI4NkExMEMxQjFENEJEMERDMDRBMDIy
QTk1Rjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ePsLKpguhYP
+r79DhdmdU/qM5IUGeU3rv2U3ATM78c9RgY6ebasJeGwV4Y4XnSv6eIQ7aJzE4JN
7b7nm3bHaORJG2adoiuvcKdWrz/4vv+UGOU4KDCRPo2IejT4Ijh7pdptK0y1n7tQ
2LGcp3NJQogemVZroARXH7bZTReWxY8hQE+Sod8GbGioU0mbM5NLvnXCfwg8jMDl
7idv2OcSyR4+RYi4hSfFXkurK9JEScnczkBAD4oPfo/HPsNAw3H8C/XlhXpAmbnQ
789IgJnzFs0wUAHuQ2d5CEsDgjFtri0ZVhZdV7WLxcuJ0U5buwO57FCylabhkFHl
Nwh1MCPKAQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFOxkrkIikoahDBsdS9DcBKAi
qV+GMB8GA1UdIwQYMBaAFKyq8EG4vpPprAoG6/Wf3CHsI0CxMA4GA1UdDwEB/wQE
AwIHgDBbBgNVHR8EVDBSMFCgTqBMhkpyc3luYzovL3Jwa2kuY28vcmVwby9BUzk0
NS8xOC9BQ0FBRjA0MUI4QkU5M0U5QUMwQTA2RUJGNTlGREMyMUVDMjM0MEIxLmNy
bDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtp
LmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEt
NDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1iZDdiLTRiMzMtOWE4OC01
YjIyZDJhODMzN2QvYzlhYjI3YTYtNzYyMi00OGVjLTllMzMtMTUyYmFiMmI0YTJi
L2NmMmM0ODMwMGY3ZGE3MTA2YWU3NGQyN2M3MzY2M2FhMTA3OTg4YTgyZWMxOGIy
MjFjLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5jOi8vcnBr
aS5jby9yZXBvL0FTOTQ1LzE4LzMyMzYzMDMxM2EzMTY0MzAzODNhMzYzMDMwMzAz
YTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMTMwMzEzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYBHQhg
ADANBgkqhkiG9w0BAQsFAAOCAQEAsKqkDmJKgWbXWEFOvPr2z1yG0bUw83bRY9Za
mSYbYcRAwVmRk5e1qQ15hdwE28/8x8Z/SiwtTdk59g+DXTaoumwv4dkS++7XCtmL
9Tval6TPhIyXJ069ZyPv2oCY+mzB+FrA5lMKcQaqV7NzsV1pjEZmk+kE1C471XqA
CEl0/pMyBFUkK2eKejQk4L933FhsTAYgjVl0REhT2v73rijRR/Q03LseAfmaOYOl
c50VqLXHG0kTH1bf7c/BWXay2Co41Qo48OMU5B8w/drHhCSlbmGBhAQwqelEUzMR
Ky9KJHSqNoNchiEdxBrrrO6q1YIuPRBFQVseJwsClQ6lF0dBmA==
-----END CERTIFICATE-----