Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/323630323a663966613a3a2f34302d3430203d3e203630383538.roa
File:                     323630323a663966613a3a2f34302d3430203d3e203630383538.roa (raw, json)
Hash identifier:          KdOfpUD1tztITyvm1J8amUIBCeUHHzoLHH/OOe67H/s=
Subject key identifier:   18:2F:93:34:15:12:62:FC:2C:D0:B6:EF:92:64:EE:C2:A0:80:26:DA
Certificate issuer:       /CN=d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df
Certificate serial:       40246EA891B60A183CE7D0AFAD0D14D8F0B091DF
Authority key identifier: 1A:E9:05:CA:D2:46:1E:1C:76:66:49:9F:2F:7D:68:BA:DF:E7:81:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/323630323a663966613a3a2f34302d3430203d3e203630383538.roa
Signing time:             Thu 18 Jan 2024 18:18:26 +0000
ROA not before:           Thu 18 Jan 2024 18:13:26 +0000
ROA not after:            Thu 16 Jan 2025 18:18:26 +0000
asID:                     60858
IP address blocks:        2602:f9fa::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:24:6e:a8:91:b6:0a:18:3c:e7:d0:af:ad:0d:14:d8:f0:b0:91:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df
        Validity
            Not Before: Jan 18 18:13:26 2024 GMT
            Not After : Jan 16 18:18:26 2025 GMT
        Subject: CN=182F9334151262FC2CD0B6EF9264EEC2A08026DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:b5:17:55:d6:4a:aa:08:39:9e:c4:63:37:
                    b4:0a:91:43:bf:b7:5a:ec:99:1a:b5:a0:9e:05:85:
                    d4:f7:d6:ca:72:96:fb:19:7d:5d:c3:a2:93:7a:59:
                    89:2c:7c:a3:11:47:96:8d:96:6e:67:fb:23:90:48:
                    06:21:fa:6c:29:ac:a3:4b:1a:fe:b0:0c:b4:f5:1b:
                    9b:5e:d0:96:13:e0:93:d1:e1:9b:8e:c2:51:a1:08:
                    b0:ed:09:e1:99:8a:2f:26:36:81:24:1d:af:47:cf:
                    b8:00:e0:d2:5a:db:9f:a4:6d:0d:8c:aa:5f:e4:7b:
                    c8:a7:5e:6b:72:a3:01:59:e4:9e:22:66:f7:20:1e:
                    c8:fd:3c:d7:85:21:8c:92:0b:cb:ce:eb:b5:6a:e7:
                    35:75:86:dd:85:e8:6b:5d:a5:38:e2:23:3f:8c:7e:
                    f9:c2:f4:15:3c:a4:96:6b:23:61:a4:5f:00:f8:de:
                    c0:89:80:1a:f9:c2:8f:c6:78:e6:cf:e7:c1:ab:78:
                    e6:ec:b7:0a:a5:d1:0d:b4:e4:f0:bc:b1:27:42:6e:
                    32:df:29:34:91:65:1c:d0:36:b3:59:b6:6b:40:28:
                    6e:0d:9e:0d:fb:02:bf:06:52:07:c2:a1:33:4d:f7:
                    6e:25:c8:67:86:af:49:32:5e:81:57:d4:c9:c2:d5:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2F:93:34:15:12:62:FC:2C:D0:B6:EF:92:64:EE:C2:A0:80:26:DA
            X509v3 Authority Key Identifier:
                keyid:1A:E9:05:CA:D2:46:1E:1C:76:66:49:9F:2F:7D:68:BA:DF:E7:81:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/1AE905CAD2461E1C7666499F2F7D68BADFE781BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/323630323a663966613a3a2f34302d3430203d3e203630383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9fa::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:cb:85:c4:ed:6f:f6:c9:ad:71:c9:36:b5:a0:8d:5d:45:15:
         07:1e:7c:06:5c:4a:4f:6f:bb:ab:4e:c7:05:f6:e0:c1:5d:20:
         50:bc:12:e2:9d:a9:37:37:c2:33:c9:99:04:d5:29:e0:95:69:
         94:47:0e:15:07:c2:c1:c2:39:33:ce:b7:ad:4b:4a:4b:fe:8f:
         86:cf:59:c3:f0:29:3a:ba:5d:af:01:00:22:c7:15:19:72:20:
         3b:10:8a:b5:2b:5f:16:79:a5:a8:fa:7d:05:72:ae:86:6b:1b:
         50:2d:94:45:c3:99:61:cd:7b:89:1a:49:9e:4a:ae:20:da:61:
         e3:b5:19:89:48:53:73:0b:fe:8b:69:d8:22:a3:fc:92:b1:e1:
         7e:4f:a2:b8:ba:4e:ea:38:26:b9:f9:d0:5f:2b:bb:bf:61:2e:
         5a:bd:c0:74:3e:97:9d:57:fd:7d:85:09:06:7e:8a:5b:21:e5:
         38:1e:d4:ab:4b:1d:71:c1:0e:91:51:83:aa:17:7c:2f:c4:bb:
         48:70:25:d6:eb:68:4a:4f:bb:fb:1e:79:3d:52:c6:48:bf:0a:
         e0:ba:6a:5d:e5:62:8f:96:54:02:e5:93:65:42:71:2b:6d:9f:
         80:14:37:a6:66:84:cc:ec:6d:4f:8a:c4:c9:07:3d:15:ee:ba:
         1e:07:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----