Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa
File:                     323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          5++e8Aw6MXJaReu2Ag7uMXN5svnhl8SJsXUeQLIoFPc=
Subject key identifier:   EC:4D:C5:45:2A:D2:34:5A:19:09:02:FD:A8:A5:D0:16:3E:63:D2:1A
Certificate issuer:       /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial:       3120A7B8A0AEA095695BAC907BD82545A8B51922
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Wed 01 Jan 2025 15:19:01 +0000
ROA not before:           Wed 01 Jan 2025 15:14:01 +0000
ROA not after:            Wed 31 Dec 2025 15:19:01 +0000
asID:                     199518
IP address blocks:        2602:faa5:f04::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:20:a7:b8:a0:ae:a0:95:69:5b:ac:90:7b:d8:25:45:a8:b5:19:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
        Validity
            Not Before: Jan  1 15:14:01 2025 GMT
            Not After : Dec 31 15:19:01 2025 GMT
        Subject: CN=EC4DC5452AD2345A190902FDA8A5D0163E63D21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:f5:a6:29:89:fb:1b:24:d7:94:a0:91:34:
                    1d:67:85:95:d3:b2:d1:f3:58:dd:d9:66:90:2a:ea:
                    af:56:03:ae:b9:c8:48:ce:0f:d3:3b:79:cd:5f:bf:
                    fd:12:dc:4a:20:bc:e3:2a:56:c9:d8:b3:0f:10:98:
                    2c:cb:fa:de:7b:79:30:31:1d:a9:c2:a5:70:50:16:
                    39:9d:1d:5c:69:a7:4c:d8:c5:13:e1:4a:5c:92:7a:
                    f1:b7:f7:a8:56:53:1e:0a:09:40:97:2e:a4:96:64:
                    67:1a:d2:43:e3:4d:37:20:27:78:74:ee:8d:3d:c6:
                    45:65:5c:f3:ee:2c:22:ec:6b:96:e8:bd:e1:db:9e:
                    c0:46:f5:56:d4:3b:d4:11:88:90:e3:02:33:cd:b2:
                    4a:d9:38:c8:25:93:ed:42:e1:c1:d9:af:28:6e:7f:
                    e5:ea:2b:86:bf:d0:61:cd:ba:9c:43:09:1c:7b:8c:
                    4c:6c:9d:d1:6f:3a:2b:73:14:c0:0f:8b:e7:a8:1f:
                    c9:38:b2:b4:b7:9e:f6:b8:b6:54:e4:08:9a:4d:01:
                    58:f7:71:63:e3:b4:dd:39:d3:56:50:af:2a:0e:48:
                    ab:d3:39:2f:99:95:97:bb:58:d0:71:44:18:1d:81:
                    0b:01:b9:c8:08:90:66:79:33:3f:2f:c4:01:eb:2f:
                    7f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4D:C5:45:2A:D2:34:5A:19:09:02:FD:A8:A5:D0:16:3E:63:D2:1A
            X509v3 Authority Key Identifier:
                keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f04::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:ed:15:47:2c:4f:f1:3e:c5:b3:66:c8:16:8d:10:b8:28:f0:
         c0:f1:d7:b2:1d:f2:ca:a6:ed:e0:c6:57:ab:4c:71:5f:ef:ba:
         8b:89:62:c4:1a:e4:6d:92:36:85:d5:55:d3:af:90:eb:d0:a1:
         05:51:f2:64:fd:c9:72:a5:7e:2c:ef:04:ad:d3:82:a2:f0:6c:
         5b:3c:9a:e5:a7:ab:79:f6:cb:fb:d6:8e:81:e6:1c:37:9a:e0:
         89:1f:66:e3:85:d7:71:e9:cb:0b:86:c6:08:41:ff:7d:2f:21:
         79:c1:17:39:f7:46:85:21:33:24:ab:13:27:56:54:67:59:02:
         65:a7:a5:ab:32:50:49:e0:75:97:96:4b:ad:8c:d0:f9:48:f3:
         30:27:16:07:5f:50:55:ae:17:9d:1c:55:d1:4c:d7:e1:11:95:
         09:b6:b6:9c:f9:be:36:86:6f:93:14:8b:0e:8b:ff:df:fd:f5:
         51:0d:53:9f:22:73:ae:4b:dc:b6:c1:8b:ed:49:60:a2:fd:07:
         ab:4c:21:35:8f:91:2a:bc:61:83:be:f5:0f:81:56:77:e6:1f:
         8c:e8:f9:b1:e1:c3:f9:b6:b9:45:a9:87:6b:4a:ca:26:a8:b2:
         0f:5c:63:ca:33:ee:14:48:12:fc:f9:63:8a:bf:2c:b7:03:56:
         4e:ec:4c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----