Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630383a3a2f34382d3438203d3e20313938393234.roa
File:                     323630323a666161353a6630383a3a2f34382d3438203d3e20313938393234.roa (raw, json)
Hash identifier:          I3/Wu30f7Hci0vu5gOKWejzN1wGQF6QZhL2CMWjfx0g=
Subject key identifier:   D2:98:62:E3:44:4E:27:17:BF:C7:B1:D3:1F:80:81:17:9B:EC:4D:C1
Certificate issuer:       /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial:       42F18FAEA97927A7F22D156C5A56DC3C9D75622D
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630383a3a2f34382d3438203d3e20313938393234.roa
Signing time:             Wed 01 Jan 2025 15:19:01 +0000
ROA not before:           Wed 01 Jan 2025 15:14:01 +0000
ROA not after:            Wed 31 Dec 2025 15:19:01 +0000
asID:                     198924
IP address blocks:        2602:faa5:f08::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f1:8f:ae:a9:79:27:a7:f2:2d:15:6c:5a:56:dc:3c:9d:75:62:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
        Validity
            Not Before: Jan  1 15:14:01 2025 GMT
            Not After : Dec 31 15:19:01 2025 GMT
        Subject: CN=D29862E3444E2717BFC7B1D31F8081179BEC4DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:dc:83:6d:4b:c2:00:f7:9e:fc:e3:f0:34:
                    0f:a5:38:61:aa:ac:be:f3:b1:3f:a5:6d:1c:7f:f6:
                    a4:15:b7:93:b6:12:b9:da:c0:48:5c:08:94:ea:a9:
                    68:ed:72:dd:18:63:3a:2e:a7:9d:1c:44:32:f2:20:
                    3e:8e:46:eb:21:36:ea:c5:6a:e1:8a:5c:16:a6:23:
                    99:c8:48:05:c3:82:40:7e:c8:04:a6:0c:ee:2e:90:
                    9b:c5:9e:51:7c:73:15:49:d2:82:da:fb:e7:7c:18:
                    39:f2:d1:9a:b5:d3:cb:b2:5a:8f:a9:ab:14:9c:f8:
                    fa:f6:dd:e1:a1:b4:1f:df:ba:80:74:fc:3f:d4:9b:
                    29:77:09:58:5f:03:83:53:92:10:12:e3:90:1c:9a:
                    ae:58:f4:79:b5:bc:f7:b9:b5:6f:1c:46:12:84:68:
                    11:02:27:a4:82:ae:24:83:54:6e:f6:b8:1d:34:34:
                    c3:44:72:4d:54:3d:4e:5b:45:5d:7f:a5:26:bb:b1:
                    17:6f:ee:73:34:3a:bf:72:8e:74:64:25:36:3e:3e:
                    f9:cc:69:11:f9:50:a8:74:80:fc:e3:81:de:a0:6a:
                    fd:2c:ce:25:53:81:fe:ce:aa:ab:db:ba:67:2e:30:
                    8e:ec:7f:c8:9b:df:83:eb:c5:91:20:48:f0:35:69:
                    90:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:98:62:E3:44:4E:27:17:BF:C7:B1:D3:1F:80:81:17:9B:EC:4D:C1
            X509v3 Authority Key Identifier:
                keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630383a3a2f34382d3438203d3e20313938393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f08::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:79:96:6b:e6:cb:0f:3c:c6:93:8b:f7:c9:dd:14:bb:44:f9:
         18:e0:58:ef:3b:32:cb:4c:4f:5a:c7:d6:4c:79:7d:34:b4:db:
         98:b1:33:5f:a5:66:b4:16:84:8c:e4:6a:aa:35:25:1b:10:23:
         06:de:26:04:db:f1:6f:bb:28:51:b4:94:38:de:a9:e2:fe:8b:
         5b:82:8e:75:c3:78:af:b8:a3:e2:f7:d3:e7:a7:9e:f2:2b:91:
         57:ee:3d:fa:ef:fe:90:75:57:21:ae:75:61:fa:bb:8a:92:a2:
         7c:63:24:fe:17:76:66:de:dc:07:f3:26:71:45:9f:55:e6:b7:
         18:25:06:f4:45:25:6b:a7:01:6d:46:6e:6e:7a:a4:24:00:82:
         00:14:c3:b9:78:a9:1e:02:4b:80:11:dd:40:46:43:2c:72:7e:
         f8:c4:49:7c:21:4a:e6:fd:d9:10:66:53:9b:06:ea:21:18:bf:
         d1:68:bd:85:e1:66:da:37:1f:38:0e:ac:fd:e7:73:d2:63:11:
         2d:29:8f:9e:80:e2:fc:19:60:d9:75:9c:fb:74:cf:d8:c6:ae:
         b4:f4:52:eb:c6:62:2e:e1:d7:d3:de:a0:e7:6f:90:08:31:32:
         4d:2d:05:42:14:68:06:7b:ad:b1:13:65:d4:81:63:2c:ca:5d:
         29:cd:9e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----