Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a3a2f34382d3438203d3e20323030343534.roa
File:                     323630323a666161353a3a2f34382d3438203d3e20323030343534.roa (raw, json)
Hash identifier:          8Szy8KtQJvDpEQsY+Zzv+yunMoaJJRCwRpqwaK8XWF0=
Subject key identifier:   3F:D6:E7:A4:C9:6A:E2:A2:89:B0:C6:51:0E:4B:57:15:A6:85:32:EE
Certificate issuer:       /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial:       73D3BE31E2A915A68DD19B0AD1C8F5CC825DE562
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a3a2f34382d3438203d3e20323030343534.roa
Signing time:             Thu 18 Jul 2024 18:48:09 +0000
ROA not before:           Thu 18 Jul 2024 18:43:09 +0000
ROA not after:            Thu 17 Jul 2025 18:48:09 +0000
asID:                     200454
IP address blocks:        2602:faa5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d3:be:31:e2:a9:15:a6:8d:d1:9b:0a:d1:c8:f5:cc:82:5d:e5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
        Validity
            Not Before: Jul 18 18:43:09 2024 GMT
            Not After : Jul 17 18:48:09 2025 GMT
        Subject: CN=3FD6E7A4C96AE2A289B0C6510E4B5715A68532EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:47:05:d6:24:37:23:56:14:0f:3f:ae:0a:
                    35:a3:c5:e5:a1:54:3c:b9:cb:1e:c1:51:c4:22:06:
                    79:cf:b2:9c:6d:9b:75:16:f6:d4:f5:8b:74:d9:c8:
                    d1:14:89:fc:d1:a4:24:82:fc:06:3f:7a:b4:e8:34:
                    24:9e:a9:64:7a:7c:89:fb:ee:2c:b6:7f:26:ec:41:
                    35:b1:bb:cc:6e:8a:bd:a1:e3:15:ae:d2:b0:d0:bd:
                    ad:a1:d0:b7:2a:01:ed:36:ef:16:9d:40:95:17:21:
                    57:ad:0b:55:7a:8c:73:ed:0d:27:b8:a5:a5:31:e6:
                    a9:5b:68:26:32:64:42:9e:cc:bd:49:35:74:e6:d0:
                    31:c8:b1:89:d4:0f:76:0f:85:ac:1b:ea:8e:2a:f2:
                    be:46:85:6a:b2:18:02:20:3b:41:1e:3a:de:34:7f:
                    78:74:2b:83:95:bb:14:50:71:76:92:2e:08:47:83:
                    37:ed:37:1c:95:3c:d0:8f:7d:58:40:37:8f:45:ff:
                    43:dd:d6:00:ba:ef:40:e0:e1:f6:9c:5d:1c:95:05:
                    38:b0:df:44:d2:1a:d2:ca:0e:78:8c:f9:54:e4:28:
                    e4:66:12:63:ae:e2:0e:44:ea:13:b2:b8:09:02:1d:
                    ad:fd:44:14:2e:92:90:ba:35:41:4d:dc:ed:44:f6:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D6:E7:A4:C9:6A:E2:A2:89:B0:C6:51:0E:4B:57:15:A6:85:32:EE
            X509v3 Authority Key Identifier:
                keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a3a2f34382d3438203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:76:5e:29:eb:b8:4c:ef:7e:6c:ca:7f:e2:8f:ad:15:49:96:
         8c:4f:2f:da:e1:64:5c:ec:a9:15:ae:79:9c:69:c3:17:b7:f9:
         dc:d1:dd:e1:42:0a:fe:03:d8:56:c1:b3:79:2d:50:79:ba:57:
         85:dd:b0:f7:62:4a:49:50:ed:d8:40:3c:af:78:6f:cf:d1:6d:
         51:8a:66:1c:8b:c0:c3:a4:8f:15:3b:90:d7:21:d8:77:7f:c8:
         c7:b8:68:6a:bd:d6:ed:a9:a6:aa:7f:31:98:36:c3:8d:6a:aa:
         46:93:80:c1:00:38:ae:0c:0e:c8:85:7b:50:32:99:d2:f5:67:
         cc:11:39:91:95:3b:31:dd:b3:83:7a:ec:dd:e1:fe:99:41:c7:
         46:3c:23:ed:46:25:74:e4:b9:ac:26:b8:3a:b1:05:a4:79:17:
         e0:89:71:92:b6:20:7d:96:76:ff:38:f1:c5:86:16:38:94:59:
         aa:0d:30:66:ca:76:32:22:8d:4d:22:ad:06:7c:b1:c9:d6:bc:
         4d:4b:11:bf:3b:bb:bb:ab:5d:7b:a1:03:e4:63:c6:b9:0d:f5:
         2c:43:17:00:96:5c:80:92:b0:f9:fb:31:f4:99:9a:1d:3c:92:
         62:87:37:05:24:5c:db:64:69:6b:9a:02:b4:09:94:fd:6e:fc:
         f8:ac:ee:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----