Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/323630323a666137613a3a2f34302d3438203d3e203537383730.roa
File:                     323630323a666137613a3a2f34302d3438203d3e203537383730.roa (raw, json)
Hash identifier:          UycdbefqUxG8wb/TZpqIcOnRhSTer54l/sXwGdWirfo=
Subject key identifier:   73:5B:AE:93:40:FF:AB:CD:2E:42:35:1E:C2:84:FC:9F:48:05:A3:FB
Certificate issuer:       /CN=4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44
Certificate serial:       4964260952816E137758636EE85988BD55BDC9CA
Authority key identifier: 2F:10:9D:2D:30:06:3E:6B:C5:80:23:A5:9C:9A:87:B6:05:87:6C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/323630323a666137613a3a2f34302d3438203d3e203537383730.roa
Signing time:             Mon 18 Sep 2023 15:44:46 +0000
ROA not before:           Mon 18 Sep 2023 15:39:46 +0000
ROA not after:            Mon 16 Sep 2024 15:44:46 +0000
asID:                     57870
IP address blocks:        2602:fa7a::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:64:26:09:52:81:6e:13:77:58:63:6e:e8:59:88:bd:55:bd:c9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44
        Validity
            Not Before: Sep 18 15:39:46 2023 GMT
            Not After : Sep 16 15:44:46 2024 GMT
        Subject: CN=735BAE9340FFABCD2E42351EC284FC9F4805A3FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a8:5b:78:a6:47:b5:af:62:5f:26:a5:f6:86:
                    36:de:07:83:af:21:6f:2d:06:69:8f:21:67:8b:bf:
                    d9:99:24:28:f9:6e:ed:50:59:3a:e2:41:9e:80:91:
                    32:18:96:d2:f7:9e:bf:42:5d:32:c0:15:54:82:b4:
                    21:6e:0a:14:64:a0:57:5d:6c:86:1e:71:ba:5d:fe:
                    3e:d0:7f:7c:a6:61:0a:6d:a4:85:94:0e:8a:63:d6:
                    96:a7:61:a6:6e:62:28:87:54:8d:27:29:f4:1a:69:
                    68:05:9a:08:4f:61:fb:85:2e:38:7f:f7:2b:86:d5:
                    d4:05:13:0c:aa:0e:ec:d6:9f:ba:44:4c:46:73:48:
                    e9:5b:db:34:36:85:72:34:f7:3b:91:78:d1:26:d4:
                    87:c1:94:13:c7:b7:d8:aa:2e:8e:62:c6:98:43:2c:
                    d0:78:7f:02:bc:f8:16:6a:60:56:c3:b1:20:e7:1b:
                    22:46:43:0a:83:13:6c:5c:41:82:c1:ce:7f:01:dd:
                    48:0a:01:1a:62:27:f4:57:7a:81:a2:d8:87:32:32:
                    cb:09:02:34:d9:75:8e:79:95:1d:2d:4d:6a:d5:74:
                    05:96:d7:f6:f6:bf:b7:3d:1b:55:33:cb:62:4c:ef:
                    97:20:41:01:c9:c0:1d:e9:86:8c:0f:f7:0b:1b:8b:
                    34:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5B:AE:93:40:FF:AB:CD:2E:42:35:1E:C2:84:FC:9F:48:05:A3:FB
            X509v3 Authority Key Identifier:
                keyid:2F:10:9D:2D:30:06:3E:6B:C5:80:23:A5:9C:9A:87:B6:05:87:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/2F109D2D30063E6BC58023A59C9A87B605876C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/323630323a666137613a3a2f34302d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7a::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:2b:9c:d9:93:c5:45:21:bf:50:71:38:82:6f:3b:78:82:46:
         bf:be:32:23:a9:19:96:63:47:4e:72:c7:ba:11:1f:b5:c0:ea:
         ff:60:b7:21:11:e4:41:bc:f9:f4:14:97:51:fe:95:db:61:64:
         80:79:7f:3e:1c:c2:ca:7c:36:25:91:b7:97:29:9b:0c:c3:5d:
         ba:83:cc:fd:bd:be:77:87:52:26:76:b1:86:b8:f7:61:f3:a9:
         37:b7:8b:7b:a8:3b:a1:d5:cf:2f:06:c2:4b:89:5a:8a:95:79:
         d8:3e:ae:f1:ce:ba:ef:8b:73:75:3e:83:d2:a3:7c:7a:3a:52:
         7b:c2:5a:ee:6a:44:a6:d4:f0:05:dc:77:6d:2c:7f:03:2a:2f:
         b8:4a:71:6a:00:3c:d8:81:10:b2:61:8d:1b:f1:f8:54:5c:ca:
         fc:37:7c:ea:b3:50:07:69:3b:e0:03:98:27:31:d0:a4:4c:eb:
         45:c1:66:0b:41:45:6a:46:5a:78:cb:11:8e:7f:31:7a:37:b8:
         92:7a:09:b8:0f:bc:40:15:f5:38:d8:3a:e2:03:af:f9:37:a4:
         09:a9:c2:7a:78:ca:83:c7:a5:99:ed:bc:31:c1:96:55:1d:d5:
         88:22:46:16:ba:8c:93:4f:73:12:47:72:fb:fe:82:22:f8:3f:
         2e:a6:d0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----