Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/4/323630323a663963633a3a2f34302d3430203d3e20333938343637.roa
File:                     323630323a663963633a3a2f34302d3430203d3e20333938343637.roa (raw, json)
Hash identifier:          Wo7Q86hDQ0lk64Y0HZX93WOmH9NCJs4vBvUIoyDIjD0=
Subject key identifier:   42:2D:8B:A5:91:A5:8B:84:19:02:04:6E:F5:BD:95:F7:F1:7C:1C:79
Certificate issuer:       /CN=b374b829da24f35dc24688a9ebce5b7c72a492009aa51edde9
Certificate serial:       448505526398130A3B060B6ED7408A3C89192479
Authority key identifier: 24:04:AC:A1:3A:EF:29:52:5C:14:D4:63:9D:5D:93:B5:49:83:03:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8ac74274-337c-47f6-83af-fa21cf5ab89a/b374b829da24f35dc24688a9ebce5b7c72a492009aa51edde9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/4/323630323a663963633a3a2f34302d3430203d3e20333938343637.roa
Signing time:             Fri 08 Dec 2023 15:13:15 +0000
ROA not before:           Fri 08 Dec 2023 15:08:15 +0000
ROA not after:            Fri 06 Dec 2024 15:13:15 +0000
asID:                     398467
IP address blocks:        2602:f9cc::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:85:05:52:63:98:13:0a:3b:06:0b:6e:d7:40:8a:3c:89:19:24:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b374b829da24f35dc24688a9ebce5b7c72a492009aa51edde9
        Validity
            Not Before: Dec  8 15:08:15 2023 GMT
            Not After : Dec  6 15:13:15 2024 GMT
        Subject: CN=422D8BA591A58B841902046EF5BD95F7F17C1C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:bf:8b:9e:f9:43:b7:8e:05:c4:40:a3:da:
                    07:39:db:5e:be:c3:df:fb:3b:ae:8c:3f:59:f2:e7:
                    63:5c:89:72:e9:2d:c1:87:7c:17:7d:d5:56:af:07:
                    2a:f9:3c:76:6a:50:e0:86:3c:ea:8c:22:98:b6:be:
                    c1:e3:db:f0:2e:85:03:67:18:6d:1f:63:96:ab:75:
                    93:d8:35:2b:c6:a1:05:95:72:41:8f:ef:d6:80:37:
                    74:b8:9c:f5:a2:04:2e:64:79:00:00:f5:c4:8c:33:
                    4b:bc:a4:11:73:85:0b:10:bc:a5:56:58:e5:b1:da:
                    57:76:60:e6:cb:41:74:2a:ec:c1:de:3f:b0:4f:94:
                    57:cf:6e:ac:b4:9c:05:6d:94:47:24:5b:00:d4:2b:
                    de:44:43:6c:09:5c:23:9c:48:1e:78:69:af:03:76:
                    04:97:9f:d3:4e:44:46:d0:e6:82:a7:19:c8:6c:77:
                    28:84:12:e0:18:7e:b9:04:ad:d1:75:91:b0:aa:9f:
                    ea:02:96:97:5b:7b:17:1b:d2:4e:7f:db:54:02:df:
                    23:22:fd:7b:d2:63:bd:9b:52:17:c1:bd:33:ee:d0:
                    e7:8a:25:cd:1a:d2:16:3e:7a:b5:f3:40:7c:4f:a0:
                    49:b5:4e:c3:29:42:da:d2:29:38:d1:30:1d:b5:70:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2D:8B:A5:91:A5:8B:84:19:02:04:6E:F5:BD:95:F7:F1:7C:1C:79
            X509v3 Authority Key Identifier:
                keyid:24:04:AC:A1:3A:EF:29:52:5C:14:D4:63:9D:5D:93:B5:49:83:03:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/4/2404ACA13AEF29525C14D4639D5D93B549830374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8ac74274-337c-47f6-83af-fa21cf5ab89a/b374b829da24f35dc24688a9ebce5b7c72a492009aa51edde9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/4/323630323a663963633a3a2f34302d3430203d3e20333938343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9cc::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:11:89:cf:74:36:ef:50:59:47:6a:ed:1e:0e:0c:ba:a6:1b:
         8b:c0:4b:5a:38:cb:1b:3b:05:c6:27:9e:c9:1f:4b:f3:b1:f7:
         64:d0:42:a0:69:0d:05:60:af:25:f9:9b:ab:d7:5d:40:4e:74:
         2e:a6:e5:95:27:0c:e1:db:82:eb:31:68:2e:b3:27:2e:fc:5c:
         c8:9c:cf:39:27:f8:fa:e6:63:ef:aa:f1:26:27:97:f4:0e:ca:
         0b:d3:6d:d7:0f:ee:5d:6c:2c:79:a7:20:d0:84:f0:f6:e6:02:
         54:91:bd:8c:82:b7:e3:e6:f2:fd:9e:b0:44:19:fe:fb:a3:a4:
         23:9b:b2:88:4b:45:20:70:94:da:9f:0c:d0:2b:a8:c6:cb:3d:
         2c:db:6a:48:fd:53:f2:ea:ee:aa:ed:04:f6:0e:80:d5:2c:6d:
         f4:e5:c1:91:43:74:f9:1d:44:cd:25:9e:07:0f:85:bc:de:b0:
         76:7c:1b:08:07:6c:8a:3c:97:3c:66:c4:a0:df:ab:1c:2e:b6:
         35:3d:b3:b5:24:74:6c:9e:12:0a:fe:60:22:c7:e0:ef:0c:a8:
         f6:6d:d8:44:17:0e:7a:65:8b:38:ff:cf:9f:91:e6:20:f0:0a:
         01:41:d8:4b:91:44:32:70:de:52:20:5f:f3:22:3d:d8:b6:59:
         cb:22:ed:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----