Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/323630323a666137613a3a2f34342d3434203d3e203438353831.roa
File:                     323630323a666137613a3a2f34342d3434203d3e203438353831.roa (raw, json)
Hash identifier:          kgI7ZbH3l3UtuGSspyKPHTezK04KAFPB+QsmeQYfhqc=
Subject key identifier:   29:7E:A6:4F:00:58:41:6A:3C:97:3C:82:CA:3C:F0:E0:4F:8F:B0:79
Certificate issuer:       /CN=4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44
Certificate serial:       59D38E22969D6081B710D6E500A764E3B9268795
Authority key identifier: 2F:10:9D:2D:30:06:3E:6B:C5:80:23:A5:9C:9A:87:B6:05:87:6C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/323630323a666137613a3a2f34342d3434203d3e203438353831.roa
Signing time:             Mon 29 May 2023 04:06:24 +0000
ROA not before:           Mon 29 May 2023 04:01:24 +0000
ROA not after:            Mon 27 May 2024 04:06:24 +0000
asID:                     48581
IP address blocks:        2602:fa7a::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d3:8e:22:96:9d:60:81:b7:10:d6:e5:00:a7:64:e3:b9:26:87:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44
        Validity
            Not Before: May 29 04:01:24 2023 GMT
            Not After : May 27 04:06:24 2024 GMT
        Subject: CN=297EA64F0058416A3C973C82CA3CF0E04F8FB079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:52:a9:99:9c:5d:ed:75:9a:62:54:59:7e:6f:
                    ce:2b:e5:ab:16:d3:65:c5:a5:a8:ab:a9:27:a5:be:
                    75:c5:e1:70:96:8d:d1:b7:23:4c:48:ee:c9:8e:4e:
                    77:cc:99:40:f9:ab:6b:f8:e8:81:e4:6d:27:3a:cd:
                    0d:b2:17:8b:05:2b:51:3a:8d:0b:ad:35:55:b9:1f:
                    8e:c3:6c:b9:ec:29:07:bf:ad:0b:9a:b7:1b:dd:d8:
                    0b:19:a1:5c:15:68:8e:69:a5:06:3b:03:c6:66:41:
                    4f:31:e3:c4:14:ad:95:bf:c0:60:0f:c6:e4:a2:9a:
                    87:94:e2:40:6b:d5:39:c9:51:5d:5d:97:68:9a:81:
                    2a:d5:4c:0a:c8:4f:3b:29:a5:6f:6f:0e:c7:01:43:
                    6d:65:b9:9f:eb:c3:89:c9:90:2c:c9:4d:5c:bb:b5:
                    b0:56:8a:c0:f6:bc:db:87:39:bb:68:c0:0f:3d:08:
                    44:2d:29:74:8f:41:f9:0c:f5:bf:77:58:96:14:7e:
                    66:60:d3:48:01:80:84:75:a0:71:51:b2:5d:be:05:
                    64:b6:4e:40:26:96:87:93:74:48:07:d4:d3:14:17:
                    87:cc:e0:27:49:0d:4c:ed:98:f2:c4:f1:dc:ad:75:
                    b7:bd:97:bc:3e:af:7e:4d:e8:cd:55:36:f0:19:c7:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7E:A6:4F:00:58:41:6A:3C:97:3C:82:CA:3C:F0:E0:4F:8F:B0:79
            X509v3 Authority Key Identifier:
                keyid:2F:10:9D:2D:30:06:3E:6B:C5:80:23:A5:9C:9A:87:B6:05:87:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/2F109D2D30063E6BC58023A59C9A87B605876C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/323630323a666137613a3a2f34342d3434203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7a::/44

    Signature Algorithm: sha256WithRSAEncryption
         99:e5:69:1e:c5:fd:79:96:ac:13:34:04:c3:e6:53:71:38:13:
         bb:d1:d1:a8:2d:22:ce:9f:68:6c:36:9e:a7:97:b8:82:d4:21:
         e8:07:12:28:e3:77:03:1a:fe:9e:5e:b1:b1:46:fa:4e:de:37:
         3a:d4:ff:1e:a4:cb:68:1b:eb:b8:d0:f5:e5:2b:37:00:35:9b:
         56:2e:7a:a0:07:82:49:9b:5f:e2:41:fa:92:fb:b8:e0:22:01:
         8a:f3:22:2b:30:04:f6:e2:1a:81:c8:b5:ac:1c:8e:bc:a7:62:
         88:af:b6:d4:ea:17:5b:25:fc:88:80:99:2b:0a:1a:89:f7:72:
         67:e2:0b:86:10:96:cb:91:a0:09:21:32:f9:57:79:fe:7c:4f:
         69:01:39:82:9d:ca:43:b5:79:78:5f:3e:2d:84:d2:30:8c:7b:
         de:15:f6:ae:c2:d6:6d:7b:47:a7:97:b9:49:4c:4e:97:6c:bf:
         44:3a:10:51:9b:ee:50:18:67:3b:1b:6e:c0:cc:7f:2f:ec:ba:
         79:b5:ef:9b:f3:e9:5e:5a:a5:1a:98:b8:49:16:64:07:5f:7d:
         e4:bb:11:9a:fd:fb:2f:16:da:55:cf:67:50:d9:cf:e7:5a:a9:
         87:74:82:0f:98:b9:b5:7b:63:fe:02:e2:ea:99:51:65:11:82:
         7e:77:6d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----