Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/323630323a666137613a3a2f34342d3434203d3e20323033363335.roa
File:                     323630323a666137613a3a2f34342d3434203d3e20323033363335.roa (raw, json)
Hash identifier:          TZUSrTCquC0GtJ5cvn5lShc6cWcSDr6aZpH9wAOd/7E=
Subject key identifier:   13:14:C0:33:B8:E1:EA:E4:92:5B:15:A3:23:F6:D8:41:78:B2:2F:EC
Certificate issuer:       /CN=4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44
Certificate serial:       03CEE05C6E320FE0682B1544F6B0AA64D6FAE0C4
Authority key identifier: 2F:10:9D:2D:30:06:3E:6B:C5:80:23:A5:9C:9A:87:B6:05:87:6C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/323630323a666137613a3a2f34342d3434203d3e20323033363335.roa
Signing time:             Sun 01 Oct 2023 07:09:54 +0000
ROA not before:           Sun 01 Oct 2023 07:04:54 +0000
ROA not after:            Sun 29 Sep 2024 07:09:54 +0000
asID:                     203635
IP address blocks:        2602:fa7a::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ce:e0:5c:6e:32:0f:e0:68:2b:15:44:f6:b0:aa:64:d6:fa:e0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44
        Validity
            Not Before: Oct  1 07:04:54 2023 GMT
            Not After : Sep 29 07:09:54 2024 GMT
        Subject: CN=1314C033B8E1EAE4925B15A323F6D84178B22FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:56:81:67:7b:b7:fb:4c:ae:84:bd:f9:33:9a:
                    16:14:48:29:da:d2:8e:19:e0:72:85:e1:d5:15:be:
                    9d:b4:71:cd:eb:ff:e2:22:ff:b7:83:1c:c4:f0:06:
                    00:84:af:1b:a6:76:c2:e1:6f:e6:32:da:af:45:ba:
                    07:08:d5:16:76:85:7b:2f:bf:7f:4b:c9:34:2f:9b:
                    f7:dd:81:a5:7f:e0:95:33:73:10:0a:15:07:54:aa:
                    38:64:66:ab:36:af:b3:db:3f:78:36:02:6f:b5:88:
                    41:97:95:47:48:ad:16:82:52:44:ff:70:3d:85:59:
                    f5:43:25:45:d0:63:14:20:98:16:8a:fd:be:ec:26:
                    38:03:3b:13:92:80:54:62:82:ee:df:76:c1:13:b0:
                    dd:99:f0:91:fe:3d:b3:8a:1a:54:95:5b:c9:09:48:
                    ee:f3:53:68:66:a0:85:64:58:fa:79:5e:07:4b:bf:
                    86:ce:41:45:6c:b7:b7:d7:86:48:7c:98:6e:15:59:
                    e5:0b:22:58:19:7d:99:41:43:e4:42:b5:b3:a0:06:
                    54:75:75:a2:bf:59:16:f6:b4:a8:2d:e5:b9:dd:b0:
                    41:5f:db:30:97:37:78:91:e2:ad:9d:e9:7f:f6:3a:
                    2c:7c:56:7d:18:1d:35:e9:35:ce:d4:3c:41:d9:9e:
                    37:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:14:C0:33:B8:E1:EA:E4:92:5B:15:A3:23:F6:D8:41:78:B2:2F:EC
            X509v3 Authority Key Identifier:
                keyid:2F:10:9D:2D:30:06:3E:6B:C5:80:23:A5:9C:9A:87:B6:05:87:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/2F109D2D30063E6BC58023A59C9A87B605876C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/323630323a666137613a3a2f34342d3434203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7a::/44

    Signature Algorithm: sha256WithRSAEncryption
         6d:99:b4:3f:bf:82:72:8b:53:c8:31:aa:7e:86:6b:ae:10:ae:
         aa:49:91:00:a2:f2:e7:23:f0:58:ea:b5:70:4d:33:56:db:18:
         b0:07:67:b3:f7:90:48:b9:83:21:b9:36:9c:76:bc:de:8c:03:
         62:6b:e2:c6:dd:a2:b1:4a:86:b1:f8:8f:76:9b:f3:76:1f:67:
         63:71:69:0e:ea:ea:13:8c:fc:9e:85:5e:24:46:ab:2d:ad:a0:
         a9:3c:75:55:d7:b5:9a:f7:7f:9d:fb:4f:f1:7a:08:5b:97:5b:
         bc:48:88:b7:a4:33:10:14:7a:03:9a:8c:14:6e:3b:6b:4c:6c:
         f6:78:74:53:d0:ee:f2:ec:b7:44:17:04:26:4d:9a:d8:ff:7d:
         77:37:94:bf:39:c8:61:7a:b6:42:87:85:d8:17:67:98:f6:e2:
         97:a3:d1:fa:e1:db:72:1d:90:fa:0b:00:ca:44:dc:7a:e1:67:
         b3:e0:d6:00:0e:f0:3b:10:ac:b0:80:b1:e7:77:94:03:b8:f7:
         ba:1a:ad:22:af:ef:a6:80:2a:c4:b4:84:f0:4e:6a:65:61:10:
         31:03:db:e0:d9:80:6a:ca:4a:74:13:29:d6:b0:0c:2b:81:47:
         df:7c:de:ca:e7:bf:16:9c:84:be:9f:02:4e:91:d0:33:99:00:
         0f:f3:3f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org