Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a3a2f34372d3437203d3e20333937373330.roa
File:                     323630323a663736313a3a2f34372d3437203d3e20333937373330.roa (raw, json)
Hash identifier:          q8CqhbJg6kS+0FE+l3jBrtO97aIfDDhntjwL07ywqAQ=
Subject key identifier:   68:26:58:38:37:64:EF:66:9F:D9:1C:8F:13:29:71:C4:A4:EA:3D:1D
Certificate issuer:       /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
Certificate serial:       5FF06D91E31EDC5EA134ADC958FC79665EB2B67A
Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a3a2f34372d3437203d3e20333937373330.roa
Signing time:             Thu 16 Jan 2025 13:29:26 +0000
ROA not before:           Thu 16 Jan 2025 13:24:26 +0000
ROA not after:            Thu 15 Jan 2026 13:29:26 +0000
asID:                     397730
IP address blocks:        2602:f761::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f0:6d:91:e3:1e:dc:5e:a1:34:ad:c9:58:fc:79:66:5e:b2:b6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
        Validity
            Not Before: Jan 16 13:24:26 2025 GMT
            Not After : Jan 15 13:29:26 2026 GMT
        Subject: CN=682658383764EF669FD91C8F132971C4A4EA3D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:2f:10:e5:11:f6:d8:2b:cf:c0:6d:2f:10:
                    94:58:b6:37:14:64:7a:ea:77:41:f9:a2:fd:af:96:
                    e6:d5:0b:97:a4:0f:f2:db:b1:fb:02:b2:c2:6e:34:
                    43:52:e3:f0:6f:97:b5:bd:3a:7f:15:de:a9:75:7e:
                    74:fc:1f:0e:10:a2:a2:31:18:f8:0d:0f:f2:3a:d4:
                    71:d1:04:cf:9b:50:30:74:93:d4:0e:f1:50:44:a5:
                    72:ea:04:49:5c:c5:e9:f4:e4:25:b4:5b:95:04:4f:
                    4c:bf:34:ca:cb:9a:24:57:19:a6:c4:5a:e6:53:e9:
                    d5:76:4a:4b:ef:4e:27:13:37:49:60:f2:81:79:25:
                    eb:d6:8e:ad:1b:13:df:de:c8:64:83:0e:aa:37:15:
                    74:17:62:64:64:15:bc:40:e5:3a:48:f7:f1:95:ec:
                    24:af:a6:b7:90:56:56:20:31:ee:8f:c7:21:78:d6:
                    80:b1:73:23:ad:dc:42:3e:a1:d2:2e:89:45:02:d7:
                    ab:d3:3c:e7:ae:3b:7a:56:78:07:0e:50:94:5d:6c:
                    a5:61:31:0f:82:a6:cb:08:27:d8:66:44:ff:cc:79:
                    88:5e:ca:cf:f7:95:28:32:54:e3:0d:71:12:fe:91:
                    35:8e:e8:f5:a9:6b:f5:9b:5a:eb:60:d5:0f:00:5a:
                    fe:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:26:58:38:37:64:EF:66:9F:D9:1C:8F:13:29:71:C4:A4:EA:3D:1D
            X509v3 Authority Key Identifier:
                keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a3a2f34372d3437203d3e20333937373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f761::/47

    Signature Algorithm: sha256WithRSAEncryption
         2a:85:13:2c:98:43:d5:64:3e:c5:de:3b:43:61:94:e4:49:00:
         ac:ea:d4:c9:b0:db:bd:b4:0e:ac:30:93:4c:a3:33:e0:c8:91:
         f3:fd:43:9c:a6:db:6c:5f:26:22:5f:e6:1a:e0:67:ef:61:14:
         12:05:ab:6f:dd:a6:46:c8:04:50:ee:ae:80:f4:1f:4e:b6:5d:
         af:3b:5a:29:78:4a:e1:a6:39:ca:f1:fc:8d:a4:e3:9a:49:13:
         98:3b:ad:b1:43:1d:34:25:71:72:c7:bd:8b:84:de:fc:4c:f2:
         97:eb:13:9a:a3:30:3b:3a:49:75:28:0a:cf:18:aa:6f:01:dd:
         f3:30:e1:21:9c:f5:96:1a:23:fc:a2:36:4f:47:0c:e9:d6:db:
         88:70:b6:07:5b:01:90:d0:9d:5a:c0:00:a4:0e:4e:99:d1:ab:
         ea:57:af:3d:26:0c:f0:34:cf:2c:c7:5e:4b:1d:e6:b8:34:c3:
         9b:1e:7d:67:3c:96:93:ec:59:e7:6f:22:8b:b5:30:3d:02:05:
         e3:9f:a3:6a:af:f2:24:48:bb:d2:d0:a9:5e:3b:67:18:30:ed:
         52:3d:c2:25:d2:98:8b:b0:92:92:8b:68:e2:06:50:80:47:fd:
         42:fc:7e:c2:72:bc:b8:f1:d0:32:99:ec:37:0b:61:38:10:40:
         b9:5d:2b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----