Route Origin Authorization

$ rpki-client -vvf rpki.qs.nu/repo/qsnu/1/323630323a666235623a61633a3a2f34382d3438203d3e20323130303839.roa
File:                     323630323a666235623a61633a3a2f34382d3438203d3e20323130303839.roa (raw, json)
Hash identifier:          /IgEPb3Q9Qbv2hvu7slvI0ekLcg8006TDtT46zcHSBI=
Subject key identifier:   91:94:00:E9:DF:30:01:5C:16:73:6B:EB:6B:E1:5C:45:7C:C8:77:78
Certificate issuer:       /CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
Certificate serial:       DE1AE76CD336B66A8D6B0993C604267A0DBB54
Authority key identifier: 24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer
Subject info access:      rsync://rpki.qs.nu/repo/qsnu/1/323630323a666235623a61633a3a2f34382d3438203d3e20323130303839.roa
Signing time:             Tue 25 Jul 2023 21:33:50 +0000
ROA not before:           Tue 25 Jul 2023 21:28:50 +0000
ROA not after:            Tue 23 Jul 2024 21:33:50 +0000
asID:                     210089
IP address blocks:        2602:fb5b:ac::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            de:1a:e7:6c:d3:36:b6:6a:8d:6b:09:93:c6:04:26:7a:0d:bb:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
        Validity
            Not Before: Jul 25 21:28:50 2023 GMT
            Not After : Jul 23 21:33:50 2024 GMT
        Subject: CN=919400E9DF30015C16736BEB6BE15C457CC87778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:86:c3:18:9a:8e:77:d0:71:ef:a0:54:cf:b3:
                    7a:c8:2c:24:12:cf:ac:1a:37:71:c7:fd:d4:b9:da:
                    85:81:e8:80:7c:f1:33:e8:5d:ae:db:39:dc:22:65:
                    94:56:49:ee:86:ed:be:4b:52:ed:5a:5d:ca:3d:ea:
                    a9:0a:c1:26:5e:e5:22:37:23:c7:ae:d8:64:14:f3:
                    55:ed:54:ea:4e:85:ed:03:da:99:9a:8e:1b:17:67:
                    73:5a:90:63:70:6e:20:ac:e5:27:81:c6:a8:3f:fb:
                    e8:a2:4e:fb:4b:cd:d6:a1:dc:7d:14:d7:66:e5:a8:
                    ad:18:6a:bc:04:56:74:16:1c:c0:bd:56:36:98:b9:
                    95:2e:cd:fb:4a:f9:af:08:20:c0:64:51:f6:dd:2e:
                    96:70:92:ba:b2:f1:63:6e:32:d5:28:22:fb:cd:b0:
                    6d:70:a1:dc:a9:9c:58:35:d9:a2:34:4c:8b:af:f2:
                    50:66:3f:c0:3c:78:d9:a5:06:5c:89:08:2d:1c:89:
                    e1:74:67:42:d1:ba:89:6c:dc:9b:b1:3a:85:61:0d:
                    48:d9:b0:52:64:ea:2a:5f:0b:59:00:73:7d:b4:47:
                    4f:e7:3c:3b:c0:84:6a:dc:e2:bf:f0:7f:e1:60:d6:
                    11:43:45:7d:8d:d7:5e:3c:dc:86:06:64:50:a1:34:
                    15:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:94:00:E9:DF:30:01:5C:16:73:6B:EB:6B:E1:5C:45:7C:C8:77:78
            X509v3 Authority Key Identifier:
                keyid:24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.qs.nu/repo/qsnu/1/24ABEFD2EFB3FE319A14519EA4989120B0AECA3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.qs.nu/repo/qsnu/1/323630323a666235623a61633a3a2f34382d3438203d3e20323130303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb5b:ac::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:a5:78:1a:3e:b9:99:1b:ee:13:d9:2f:01:ca:8e:4b:d2:51:
         34:1a:0f:e9:8d:b2:33:94:85:e3:43:b8:b3:21:1e:7e:27:24:
         75:7a:dc:2a:96:3b:82:83:a9:db:5e:3c:1d:7b:db:88:a6:7b:
         ec:2a:c5:ed:dd:d9:02:e0:6f:03:48:76:c5:e7:11:70:49:53:
         68:9e:14:30:d6:74:31:62:9d:b0:92:71:34:33:12:fe:51:6e:
         5f:01:be:cb:99:07:fa:91:03:5c:3e:14:c4:bf:06:af:f9:6c:
         8c:17:28:35:84:ff:df:af:9e:45:c8:2a:73:8c:25:d5:1e:1e:
         4b:1f:89:ec:ae:3e:f1:c7:a4:40:26:8d:41:2a:68:d4:18:29:
         8d:00:34:2b:1e:d9:30:e4:5a:86:94:02:7b:91:4f:52:d3:c0:
         b7:6b:4f:0a:23:cc:80:27:02:8c:a7:b0:45:0f:8d:53:d4:b1:
         fd:69:1b:8e:51:00:98:04:83:50:c9:ec:88:ed:f8:a3:6c:32:
         d4:be:0e:ad:2e:2a:84:4a:0b:6e:f9:8b:ac:bb:3c:b8:9d:35:
         bb:7e:6d:95:1e:54:8f:2b:b5:44:2a:6e:0a:8c:c1:58:72:f0:
         38:e6:72:de:a4:f6:1d:13:32:94:13:1e:3e:52:8e:13:a1:ae:
         15:28:a0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----