Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a34303a3a2f34342d3434203d3e20333937373330.roa
File:                     323630323a663736313a34303a3a2f34342d3434203d3e20333937373330.roa (raw, json)
Hash identifier:          Bg99qYju8r5FSK2K5zjOaaUdfymvV3EAfdvW2Tn7vWY=
Subject key identifier:   57:78:4C:3B:BF:A6:F6:AC:EF:FB:43:82:79:3C:1C:6A:5F:C7:34:21
Certificate issuer:       /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
Certificate serial:       5EF7EB50CE1981CE5D131B2D999150E31D4FB17A
Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a34303a3a2f34342d3434203d3e20333937373330.roa
Signing time:             Wed 22 Jan 2025 22:49:59 +0000
ROA not before:           Wed 22 Jan 2025 22:44:59 +0000
ROA not after:            Wed 21 Jan 2026 22:49:59 +0000
asID:                     397730
IP address blocks:        2602:f761:40::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f7:eb:50:ce:19:81:ce:5d:13:1b:2d:99:91:50:e3:1d:4f:b1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
        Validity
            Not Before: Jan 22 22:44:59 2025 GMT
            Not After : Jan 21 22:49:59 2026 GMT
        Subject: CN=57784C3BBFA6F6ACEFFB4382793C1C6A5FC73421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b3:2b:df:ba:25:ac:87:3d:47:a3:08:06:28:
                    c6:58:1f:6f:dd:61:02:d5:12:bc:51:df:6b:2b:39:
                    df:79:5f:5c:ce:17:29:e2:ce:00:b7:11:4e:5e:a3:
                    d4:dd:ec:6c:45:70:82:15:7f:58:8e:07:78:da:6d:
                    09:0c:30:f6:47:1e:ab:15:a0:de:62:c4:ac:fc:9d:
                    31:88:48:eb:13:16:6b:15:24:83:4c:56:c1:5c:c5:
                    8e:b3:63:c6:fd:24:bf:47:10:ef:87:31:17:47:1a:
                    d4:37:38:ba:78:8c:b5:64:c1:25:db:df:24:0d:2b:
                    03:3b:5b:41:32:bb:d5:cd:d0:2e:7c:79:2d:c4:96:
                    87:cb:15:f2:1e:82:e3:17:d8:3e:d9:76:07:b3:d2:
                    5a:df:dc:59:10:1b:ef:ad:95:43:79:12:e7:2b:dc:
                    ca:33:ce:32:05:59:2c:28:fe:01:77:b1:a6:53:b5:
                    a9:5e:74:5b:52:0f:36:25:d3:27:c7:fd:7a:00:24:
                    d8:f0:6f:e4:85:9b:cb:00:69:6a:dc:05:42:2a:0e:
                    83:1f:ac:8f:7f:fa:47:ac:bd:25:5e:b4:91:cd:77:
                    7e:d0:1c:d0:a3:92:0e:6d:e6:34:d7:1e:83:89:ec:
                    d9:f1:4e:52:13:fb:6d:10:fe:42:ad:a0:33:c8:e9:
                    e7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:78:4C:3B:BF:A6:F6:AC:EF:FB:43:82:79:3C:1C:6A:5F:C7:34:21
            X509v3 Authority Key Identifier:
                keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a34303a3a2f34342d3434203d3e20333937373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f761:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         4c:cf:14:fe:0b:dd:44:84:07:a5:5d:9a:89:32:24:8d:7b:6a:
         7d:6c:58:d4:1e:85:65:fb:b8:72:ad:a3:0a:2a:65:f1:83:53:
         b9:92:b3:a9:2a:76:04:a4:b1:4b:db:9f:65:fe:b5:86:5b:04:
         da:3b:82:b5:4d:b7:41:5f:4a:1d:53:1d:12:61:55:8e:91:43:
         ac:8d:f9:d6:62:7d:fc:ef:c3:58:1b:12:b9:08:fa:49:a9:8d:
         83:30:50:3a:cc:73:47:01:9e:a4:d9:67:80:36:e2:8e:4b:3e:
         7a:f1:66:61:44:b9:19:d4:e8:bd:4f:56:b3:e7:38:1b:0a:1e:
         18:f6:ec:fc:68:4f:ae:3e:ce:5a:02:ee:53:de:99:9b:70:23:
         55:ac:41:ea:30:a8:12:5c:4d:cb:6d:f1:f5:ae:d9:54:5f:3c:
         47:07:51:29:98:11:df:83:48:d3:e5:95:55:b6:fd:b6:ff:14:
         54:cc:cc:df:69:db:c0:64:8f:12:30:a3:91:2b:d5:c7:9d:5c:
         d1:9c:12:5a:e3:19:c8:b3:85:57:42:0a:d8:39:c5:07:bf:55:
         a1:fb:b7:1e:48:27:5c:de:5d:60:c0:0f:93:3b:04:d8:7c:e1:
         e3:71:b6:20:4d:ee:c1:18:db:46:01:f5:4b:8f:8b:41:5f:c2:
         4b:e9:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----