Route Origin Authorization

$ rpki-client -vvf rpki.qs.nu/repo/qsnu/1/323630323a666235623a61613a3a2f34382d3438203d3e20323130303839.roa
File:                     323630323a666235623a61613a3a2f34382d3438203d3e20323130303839.roa (raw, json)
Hash identifier:          Qhfu5+XtNPvNF9JTkA3dzs55vTNmQVAb08hFvKw1CGU=
Subject key identifier:   53:1F:C5:94:65:85:DD:EE:75:0E:1B:62:D0:7E:11:C1:42:37:4F:4A
Certificate issuer:       /CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
Certificate serial:       38D9B5089C5763F21FDB6E3711F0695FBE0620AC
Authority key identifier: 24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer
Subject info access:      rsync://rpki.qs.nu/repo/qsnu/1/323630323a666235623a61613a3a2f34382d3438203d3e20323130303839.roa
Signing time:             Tue 25 Jul 2023 20:33:48 +0000
ROA not before:           Tue 25 Jul 2023 20:28:48 +0000
ROA not after:            Tue 23 Jul 2024 20:33:48 +0000
asID:                     210089
IP address blocks:        2602:fb5b:aa::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d9:b5:08:9c:57:63:f2:1f:db:6e:37:11:f0:69:5f:be:06:20:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
        Validity
            Not Before: Jul 25 20:28:48 2023 GMT
            Not After : Jul 23 20:33:48 2024 GMT
        Subject: CN=531FC5946585DDEE750E1B62D07E11C142374F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d6:b7:74:40:74:3f:21:51:8d:28:90:d6:e3:
                    da:b0:2a:85:99:39:ec:2d:da:b5:67:e0:12:3c:12:
                    ec:e5:eb:9e:b0:91:a3:3c:47:25:82:22:7e:40:40:
                    6b:c6:c9:ce:15:00:06:af:ae:7d:7b:07:e4:2f:35:
                    a6:df:14:98:d6:7c:78:52:fb:1e:3d:94:b4:c1:3e:
                    b0:4d:54:c3:09:43:14:b6:9a:7c:99:d2:d6:a8:ee:
                    95:37:8c:45:03:3e:7f:d0:83:08:d8:70:ab:f7:20:
                    7c:05:8e:d6:79:4a:d7:30:a2:63:21:89:7d:6c:22:
                    74:1a:45:ee:44:8f:2b:37:d6:60:d2:2a:42:20:ac:
                    6d:1e:f7:34:39:a1:d7:ca:e9:c6:af:d1:bb:50:4c:
                    f8:d1:16:d0:51:d3:eb:e6:f6:b6:57:9a:8c:33:3f:
                    23:75:88:b8:34:1a:79:89:ec:fe:61:15:f7:7e:7a:
                    81:ad:95:bd:05:35:8c:97:55:57:db:0d:01:26:10:
                    8f:f1:38:0b:3d:77:c1:4c:07:b2:40:63:9f:4d:34:
                    0c:57:4e:15:69:44:bf:bd:49:07:44:51:13:c0:1b:
                    11:d8:b2:c5:95:37:1f:df:94:76:ba:e0:26:35:56:
                    98:68:f7:7b:e9:1e:2b:f4:37:ac:5b:06:7d:20:9b:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1F:C5:94:65:85:DD:EE:75:0E:1B:62:D0:7E:11:C1:42:37:4F:4A
            X509v3 Authority Key Identifier:
                keyid:24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.qs.nu/repo/qsnu/1/24ABEFD2EFB3FE319A14519EA4989120B0AECA3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.qs.nu/repo/qsnu/1/323630323a666235623a61613a3a2f34382d3438203d3e20323130303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb5b:aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:38:16:42:95:99:33:b0:2a:b7:6e:30:57:67:bd:0d:2a:d4:
         a9:29:89:56:37:c1:c3:c3:b7:be:7d:ec:77:ca:e8:f3:66:0b:
         a1:6d:5d:30:0a:07:c0:0f:be:e3:84:2a:52:0b:5b:b3:eb:be:
         dc:bc:f5:dc:40:fb:4c:bf:3d:45:c6:75:30:8c:32:5b:1e:0b:
         b7:ff:d9:ee:17:94:a5:d0:ec:8f:83:69:41:af:a2:25:3f:3f:
         b5:d0:d3:e9:9b:bd:58:36:fc:42:a4:46:db:99:9a:de:e7:55:
         5f:f3:1e:e1:13:ce:8f:34:d5:36:6a:16:9f:17:36:c3:c0:d9:
         57:8e:19:96:d0:d9:25:af:6b:a0:a2:be:6f:78:8d:00:41:2a:
         c9:50:bc:b5:5d:d8:91:dc:2f:67:ec:70:2b:b7:40:fe:a6:ce:
         39:98:33:35:10:40:78:c5:ef:25:6d:bb:0a:4e:99:61:24:69:
         9c:94:8c:8e:4c:b1:bc:78:93:d3:f1:05:56:eb:87:15:77:a4:
         db:7a:4d:53:6e:89:57:d8:a0:8a:16:ad:32:07:c6:d9:f1:e4:
         af:b7:a4:71:be:53:32:e4:02:7d:8d:f4:82:3a:2f:86:cc:b7:
         6a:f5:69:31:08:4b:06:99:fa:24:ef:e7:5c:20:1b:af:76:ce:
         b1:c9:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----