Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa
File:                     323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa (raw, json)
Hash identifier:          0zlxQTxh7vvfaeWuK2Hw3nih0UKatPrmAKiXcV1p/ig=
Subject key identifier:   01:23:FB:B0:E0:EA:ED:A3:2F:57:A3:6F:95:3C:96:8D:56:93:4D:B8
Certificate issuer:       /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
Certificate serial:       1ADA5D11B0E7C17B6D49DD78806EC5149DD7C91E
Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa
Signing time:             Tue 21 Jan 2025 15:15:00 +0000
ROA not before:           Tue 21 Jan 2025 15:10:00 +0000
ROA not after:            Tue 20 Jan 2026 15:15:00 +0000
asID:                     214768
IP address blocks:        2602:f761:30::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:da:5d:11:b0:e7:c1:7b:6d:49:dd:78:80:6e:c5:14:9d:d7:c9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
        Validity
            Not Before: Jan 21 15:10:00 2025 GMT
            Not After : Jan 20 15:15:00 2026 GMT
        Subject: CN=0123FBB0E0EAEDA32F57A36F953C968D56934DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c1:ad:8a:72:5a:17:5a:93:c0:f1:18:5e:e4:
                    f1:b7:74:3b:d5:c7:7e:ff:da:b9:de:52:07:af:e4:
                    23:86:06:20:c4:9a:46:a2:90:01:f1:5e:c2:66:c2:
                    5a:fb:be:ea:22:98:05:5a:fb:bd:85:20:5c:f6:c2:
                    4a:83:e8:6c:b8:49:df:e7:6b:ee:87:05:21:9a:07:
                    13:dd:2c:f7:3f:a3:e0:52:2e:87:87:d8:96:42:71:
                    68:dc:7b:b6:fc:14:0c:d0:06:5b:e0:01:fb:55:65:
                    af:e4:33:2d:27:df:ca:c3:f3:29:20:27:4c:06:60:
                    b0:26:92:14:ac:b9:75:02:05:9f:0c:fa:1a:34:7a:
                    ad:2c:88:5e:aa:65:0c:b2:fe:c6:73:6c:e4:46:d1:
                    01:5a:d8:73:90:b4:38:cf:c7:c4:6a:3c:57:4b:63:
                    fd:99:fd:a5:2c:7d:be:35:c0:f8:ce:e3:74:b0:15:
                    bb:f5:42:ae:d0:a1:f0:0b:92:81:bb:32:9a:b5:8e:
                    95:16:4c:f8:3b:80:15:55:01:e7:ae:97:9d:1a:36:
                    82:b6:02:af:8a:c6:a1:50:a4:97:4d:60:a5:fa:e9:
                    dc:38:99:ae:23:08:40:fe:22:92:83:37:76:aa:f5:
                    c1:d1:1d:09:ab:69:1d:a8:bb:e8:b1:0b:7d:cf:77:
                    f1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:23:FB:B0:E0:EA:ED:A3:2F:57:A3:6F:95:3C:96:8D:56:93:4D:B8
            X509v3 Authority Key Identifier:
                keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f761:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:c2:bc:12:71:10:31:11:24:11:4a:4b:fb:72:36:f6:b7:ce:
         15:75:f6:d4:5d:09:4c:60:9d:48:88:88:77:be:25:f1:dd:3f:
         16:c1:90:46:b4:b4:2c:b2:b1:64:86:3d:53:64:d4:0f:d3:f4:
         00:d0:6c:e5:aa:4e:d7:5f:2d:5d:79:ae:ea:c1:e7:bf:68:cd:
         18:44:b9:c7:ef:5d:b7:a3:f1:19:ec:1c:fc:5e:e0:47:a6:1a:
         97:16:60:51:1c:9a:d1:1c:48:11:b6:f1:65:a9:5a:97:2d:04:
         5b:4f:d2:38:f5:d1:3f:c1:e4:d0:0b:ee:90:e6:f3:5e:89:3a:
         2f:bd:7a:4f:ab:34:85:f9:64:f6:ae:10:8e:ec:38:78:11:e6:
         db:14:b7:25:91:38:bf:8c:42:fd:12:0b:1c:78:4a:11:be:73:
         44:8f:3e:9d:0f:ce:94:e1:51:c1:ad:09:ce:df:7a:da:aa:87:
         71:66:a4:a2:ec:d9:ac:55:f6:35:d5:19:ff:47:9f:d6:a0:34:
         db:6f:1a:80:9f:1d:7b:3f:01:f8:21:bf:90:9e:59:3f:f5:66:
         ea:bd:13:d6:79:58:94:5c:5a:af:b4:07:59:bd:29:4a:ac:59:
         b1:36:20:2c:27:2a:20:f8:14:9a:f0:2d:01:35:a1:b2:b5:40:
         36:50:d3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----