Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666663a3a2f34382d3438203d3e203437323732.roa
File:                     323630323a663936643a6666663a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          Jn2jiPBI60zcx5ao77S4GEzzOK7V9MpCpLH2naGzdUM=
Subject key identifier:   55:1D:6A:EB:D4:92:5B:FA:20:4A:6E:6D:76:E9:A9:6D:9B:F3:BF:6D
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       4C37D585962CE233501D4A39A397917EE72C2E7D
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666663a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sat 27 Jul 2024 16:08:30 +0000
ROA not before:           Sat 27 Jul 2024 16:03:30 +0000
ROA not after:            Sat 26 Jul 2025 16:08:30 +0000
asID:                     47272
IP address blocks:        2602:f96d:fff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:37:d5:85:96:2c:e2:33:50:1d:4a:39:a3:97:91:7e:e7:2c:2e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Jul 27 16:03:30 2024 GMT
            Not After : Jul 26 16:08:30 2025 GMT
        Subject: CN=551D6AEBD4925BFA204A6E6D76E9A96D9BF3BF6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:5e:2b:bd:f2:d8:fa:51:09:97:39:e6:29:
                    9f:98:c1:58:ec:42:71:36:e0:e3:ea:99:b0:72:dd:
                    5f:f4:41:6a:4a:e4:61:75:7e:77:fe:cc:b2:aa:18:
                    9c:89:f2:63:d3:f9:94:79:e4:87:bc:cf:3e:03:7e:
                    0c:0b:a0:b6:2c:02:81:c4:3b:78:ed:b0:a7:3d:c4:
                    ad:3b:52:c4:ee:93:9e:e9:4c:4a:a1:de:df:cf:97:
                    5f:07:4b:a7:9a:44:f8:22:6e:0d:3e:e9:51:60:5d:
                    ac:91:3e:9a:01:3f:13:aa:3d:fb:97:ec:8f:e6:e4:
                    8b:e2:a0:c7:73:6e:50:02:fe:98:59:0e:f9:2b:64:
                    93:ce:cb:c2:4c:7a:24:c0:6c:5a:8f:2d:bd:6c:f1:
                    f6:fb:3d:9c:df:c2:ed:89:32:96:c6:22:74:2a:9f:
                    65:3f:91:97:19:9b:8d:02:76:da:29:5b:15:dc:a0:
                    18:f8:fb:f0:0e:d0:66:8e:c5:16:02:10:e3:87:b1:
                    f2:bd:3e:55:fb:cd:06:69:b0:43:65:4e:28:ba:5c:
                    fe:86:16:46:a9:e0:62:d0:ee:22:a5:af:3b:57:7a:
                    0b:56:f1:43:45:85:79:8a:35:e0:14:4d:d7:80:51:
                    ad:5b:a7:28:1e:67:d0:74:2d:28:3e:48:d0:3a:c9:
                    16:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1D:6A:EB:D4:92:5B:FA:20:4A:6E:6D:76:E9:A9:6D:9B:F3:BF:6D
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666663a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:03:70:98:a2:47:de:ea:3d:d3:d8:b9:f5:7b:77:a3:21:ed:
         fd:4c:3c:82:eb:3b:94:ce:74:21:fc:64:c5:6f:21:a4:cc:bc:
         b1:a7:58:60:d0:04:81:74:30:65:2c:ac:b9:b2:15:ec:b1:22:
         2e:e9:49:77:9c:52:85:7b:73:ca:0e:bc:60:b7:f8:15:60:0f:
         60:c7:c7:ea:2a:d5:9b:62:43:da:97:03:dc:e8:fb:0b:bd:53:
         27:44:79:52:c6:cc:50:4a:8f:11:71:5e:a6:ae:4d:2f:24:61:
         f0:60:09:55:a5:ca:86:ce:31:2f:73:af:1d:70:8e:26:c5:4e:
         a0:3e:e8:90:e1:3f:3f:c5:2c:1c:27:40:6c:f7:ed:6f:f9:49:
         d3:63:fa:9d:1f:d5:b8:01:f7:9e:48:33:93:b5:2f:0c:fb:4f:
         25:b4:3f:bd:63:bf:53:a2:1f:9a:33:f2:5d:e3:15:a0:b3:58:
         68:58:7f:b8:45:53:70:24:99:ee:09:2f:b4:89:84:86:5b:51:
         e3:1c:dc:df:36:19:54:72:21:57:96:90:8e:61:dc:b2:02:e1:
         43:7e:92:3d:65:eb:b7:8f:87:a0:5d:1c:04:f2:00:50:2c:5c:
         50:f8:58:95:09:96:51:e1:92:4c:70:19:1a:7a:5a:99:79:c0:
         b9:83:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----