Route Origin Authorization

$ rpki-client -vvf rpki.qs.nu/repo/qsnu/1/323630323a666235623a61623a3a2f34382d3438203d3e203537373832.roa
File:                     323630323a666235623a61623a3a2f34382d3438203d3e203537373832.roa (raw, json)
Hash identifier:          fHa3hx4vWD9/w04A8HQQywFZqGavISeFpd9RVZiMEA4=
Subject key identifier:   06:FD:75:2A:91:73:8D:CD:94:35:85:54:6F:84:74:83:2F:7A:C3:2F
Certificate issuer:       /CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
Certificate serial:       1794120F7382170F427D475BF38C250C37952281
Authority key identifier: 24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer
Subject info access:      rsync://rpki.qs.nu/repo/qsnu/1/323630323a666235623a61623a3a2f34382d3438203d3e203537373832.roa
Signing time:             Tue 25 Jul 2023 20:33:48 +0000
ROA not before:           Tue 25 Jul 2023 20:28:48 +0000
ROA not after:            Tue 23 Jul 2024 20:33:48 +0000
asID:                     57782
IP address blocks:        2602:fb5b:ab::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:94:12:0f:73:82:17:0f:42:7d:47:5b:f3:8c:25:0c:37:95:22:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
        Validity
            Not Before: Jul 25 20:28:48 2023 GMT
            Not After : Jul 23 20:33:48 2024 GMT
        Subject: CN=06FD752A91738DCD943585546F8474832F7AC32F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2b:28:fb:26:4d:10:a8:04:4d:44:d5:bc:25:
                    c2:e4:ac:48:5b:e8:15:63:8f:44:ff:0b:03:e6:61:
                    38:f1:63:2c:07:05:f3:50:3a:3f:e5:62:ad:b3:77:
                    b9:6c:84:87:d0:85:09:fe:76:24:d4:bc:87:93:71:
                    78:e5:83:45:38:73:e6:8f:6d:a8:08:9b:c5:52:13:
                    ec:33:a5:ea:2a:48:56:99:7e:7a:dd:f6:87:83:b6:
                    8e:87:b0:a4:48:cf:db:86:1d:d2:c4:bb:7c:96:2e:
                    40:9d:08:fe:77:19:c7:06:af:09:5c:8e:c0:4d:6c:
                    1b:c8:76:c7:2f:c8:b1:a5:d9:ee:6a:51:08:66:47:
                    ce:cb:97:df:23:75:0e:7d:84:6a:e2:36:bc:25:ea:
                    92:e7:3f:68:80:2d:08:b1:5a:9f:16:9f:b3:71:59:
                    65:29:65:ec:df:ea:d6:93:a9:e9:05:be:ca:e6:99:
                    a4:6c:98:99:75:24:68:95:8d:e4:f2:68:c9:3d:b3:
                    1d:84:d5:74:48:b4:22:db:d4:c3:0e:75:94:9f:41:
                    3a:5e:91:f7:13:02:30:4e:e3:ec:84:d0:fc:15:88:
                    8d:8c:3a:9d:83:3a:2b:41:31:16:98:01:ea:15:8c:
                    a9:89:fd:45:b8:c4:13:04:5f:bc:18:33:05:de:5e:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FD:75:2A:91:73:8D:CD:94:35:85:54:6F:84:74:83:2F:7A:C3:2F
            X509v3 Authority Key Identifier:
                keyid:24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.qs.nu/repo/qsnu/1/24ABEFD2EFB3FE319A14519EA4989120B0AECA3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.qs.nu/repo/qsnu/1/323630323a666235623a61623a3a2f34382d3438203d3e203537373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb5b:ab::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:c1:4b:e8:84:e9:69:fe:50:a4:6a:42:e0:c2:d8:cc:40:16:
         b7:eb:03:e9:77:f2:09:89:ee:ea:13:c3:b5:ca:75:fe:e1:96:
         f2:3a:67:06:a0:59:4e:86:98:6e:b6:d7:90:c9:f2:45:3b:17:
         13:57:36:83:56:5f:84:83:07:de:04:b1:2b:c8:4d:3e:5d:63:
         77:61:ef:f8:7b:e9:a6:f0:ec:93:04:25:2a:27:b3:a4:24:7a:
         84:1e:ef:a9:24:66:39:e6:37:9d:f5:a5:de:16:39:7d:13:3e:
         1e:d4:c9:ec:16:2b:77:ad:f6:c8:78:7e:7d:f2:2d:8e:84:dc:
         d1:f3:06:82:b9:f8:ef:7c:10:d6:a3:1d:d3:c6:ea:cf:6f:25:
         33:ca:f0:ac:9f:4f:d3:bc:35:08:9b:4e:51:93:5a:63:6a:85:
         84:5d:49:f6:41:e6:86:a0:5c:60:f2:fb:13:4b:30:a7:36:26:
         33:0b:c5:5c:a2:9e:65:a6:6b:af:8d:59:95:7d:40:94:6a:e1:
         79:e5:2c:20:8a:fa:1d:9e:70:1d:c5:f1:41:9e:dd:fd:7c:de:
         87:3b:02:20:5f:2b:5b:da:b6:8d:22:09:20:68:eb:e1:11:14:
         68:5e:72:46:09:9f:71:d5:20:42:d2:07:8c:11:50:94:1a:8b:
         1a:f1:73:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----