Route Origin Authorization

$ rpki-client -vvf rpki.qs.nu/repo/qsnu/1/323630323a666235623a61633a3a2f34382d3439203d3e20323130303839.roa
File:                     323630323a666235623a61633a3a2f34382d3439203d3e20323130303839.roa (raw, json)
Hash identifier:          k8+8ijKKi+5ByyJ+MkYA869igFzBfEojhR/G5ZnP79I=
Subject key identifier:   AF:47:80:A7:91:62:CD:B4:C0:6C:9A:B2:C1:D5:33:18:45:D2:95:16
Certificate issuer:       /CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
Certificate serial:       3AE3F0CABD24D245BB9262C641E1E5ED68BAE09D
Authority key identifier: 24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer
Subject info access:      rsync://rpki.qs.nu/repo/qsnu/1/323630323a666235623a61633a3a2f34382d3439203d3e20323130303839.roa
Signing time:             Tue 25 Jul 2023 21:33:50 +0000
ROA not before:           Tue 25 Jul 2023 21:28:50 +0000
ROA not after:            Tue 23 Jul 2024 21:33:50 +0000
asID:                     210089
IP address blocks:        2602:fb5b:ac::/48 maxlen: 49

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e3:f0:ca:bd:24:d2:45:bb:92:62:c6:41:e1:e5:ed:68:ba:e0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
        Validity
            Not Before: Jul 25 21:28:50 2023 GMT
            Not After : Jul 23 21:33:50 2024 GMT
        Subject: CN=AF4780A79162CDB4C06C9AB2C1D5331845D29516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:86:10:2b:c1:fa:c6:97:ba:37:a6:02:a2:
                    24:3f:51:16:95:73:97:61:7b:e9:b8:c8:7b:26:b5:
                    1b:88:96:83:a0:1d:e3:d2:e9:f5:e5:4a:d5:36:f9:
                    9c:72:e5:85:4d:1c:b0:28:55:7d:e9:5c:32:08:ff:
                    14:0d:f6:a4:a6:1b:80:de:a5:b8:00:28:26:6f:93:
                    ca:ef:05:2b:f5:c0:c8:eb:95:24:01:3d:bf:9d:6a:
                    04:2a:dc:15:f3:0f:f8:84:89:8b:96:04:44:75:d1:
                    3c:2e:c3:fa:cd:2f:9b:50:e6:d2:47:89:d2:60:b0:
                    ad:61:1c:53:6e:cc:4f:df:e4:50:8f:8d:2f:96:ef:
                    ea:ce:03:a7:71:d5:76:a8:a6:48:a1:f4:ae:1c:6e:
                    71:fa:25:f1:ca:00:f8:59:c0:94:72:72:b9:be:bd:
                    d6:c1:53:97:04:59:e6:82:14:fc:f1:68:b0:f8:e6:
                    b4:ee:5f:3e:a9:4c:2f:f0:b4:70:2d:15:0b:71:85:
                    3c:ed:07:5c:6d:14:f5:65:2b:41:1b:01:03:d2:b0:
                    9b:af:37:df:5b:a1:9a:9c:a2:ff:b3:b8:9d:ad:1e:
                    4a:5b:b2:a9:8d:32:de:00:23:9a:17:32:6b:77:af:
                    ce:06:15:90:9f:61:96:f1:16:17:a9:57:2e:d5:6a:
                    d4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:47:80:A7:91:62:CD:B4:C0:6C:9A:B2:C1:D5:33:18:45:D2:95:16
            X509v3 Authority Key Identifier:
                keyid:24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.qs.nu/repo/qsnu/1/24ABEFD2EFB3FE319A14519EA4989120B0AECA3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.qs.nu/repo/qsnu/1/323630323a666235623a61633a3a2f34382d3439203d3e20323130303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb5b:ac::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:8d:36:e1:db:34:e3:b9:04:e9:bc:67:89:94:82:96:52:98:
         16:d1:a3:23:80:fb:76:91:33:6e:a9:f0:70:3f:3c:17:3e:7e:
         e3:c6:44:da:73:1f:83:45:06:94:79:d5:59:d2:66:2f:47:88:
         8a:c9:36:e8:da:f3:c0:9c:57:8e:92:82:5a:d2:8a:1a:d6:ca:
         4e:a7:b3:af:15:9c:ca:8f:45:69:00:f6:5c:1c:ed:04:06:21:
         6d:a6:8f:66:d0:f8:74:2f:e5:f2:51:99:67:7e:0d:fd:84:88:
         64:a3:33:aa:a3:db:a4:b2:45:55:7b:3f:48:16:a0:5b:7d:21:
         79:f4:99:db:74:f3:db:7d:b8:c1:14:f0:1a:25:83:ac:8b:c3:
         aa:4b:4c:9f:f6:9e:c7:18:2b:21:52:52:64:39:a6:f4:a7:40:
         a9:1a:76:90:b3:76:74:d8:87:22:9b:06:91:1a:ca:c1:ff:75:
         71:d2:0a:02:87:3e:f1:95:63:dc:e8:1a:6f:3f:bf:0f:f5:24:
         6f:a0:b3:a8:ec:a6:a9:ad:97:54:cc:9c:62:c4:c6:aa:7d:9e:
         a2:fe:99:14:4a:2d:e0:0a:da:6e:a2:3d:cf:11:a8:ab:01:a5:
         73:d2:cd:dc:13:ee:08:cf:95:ff:4d:de:fe:52:e5:08:f8:06:
         4f:d0:7c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----