Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/5/323630323a666131313a31303a3a2f34342d3438203d3e203135333533.roa
File:                     323630323a666131313a31303a3a2f34342d3438203d3e203135333533.roa (raw, json)
Hash identifier:          W+SvApbzKhORoRxgYM9GJANTR568yJKBVjrv5WttKHc=
Subject key identifier:   17:55:80:CC:BC:BC:43:E5:17:39:7C:20:9B:71:DC:58:FF:26:FB:84
Certificate issuer:       /CN=7c4424b0ef761568c29557b5f128d49a127610ee55feac9235
Certificate serial:       6D5499BF5173153CD5EB2F4AC5FCFFD1F4FBF0E8
Authority key identifier: A9:80:C9:07:35:84:AE:DF:F8:00:CA:D3:F0:89:96:83:DE:9E:B0:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef761568c29557b5f128d49a127610ee55feac9235.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/5/323630323a666131313a31303a3a2f34342d3438203d3e203135333533.roa
Signing time:             Sat 14 Oct 2023 01:46:32 +0000
ROA not before:           Sat 14 Oct 2023 01:41:32 +0000
ROA not after:            Sat 12 Oct 2024 01:46:32 +0000
asID:                     15353
IP address blocks:        2602:fa11:10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:54:99:bf:51:73:15:3c:d5:eb:2f:4a:c5:fc:ff:d1:f4:fb:f0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef761568c29557b5f128d49a127610ee55feac9235
        Validity
            Not Before: Oct 14 01:41:32 2023 GMT
            Not After : Oct 12 01:46:32 2024 GMT
        Subject: CN=175580CCBCBC43E517397C209B71DC58FF26FB84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:97:20:ec:b1:a5:9e:22:92:de:54:1f:16:f7:
                    79:d1:76:fe:30:1f:6e:d1:79:bd:62:54:92:12:51:
                    d9:ef:b8:ce:d1:18:db:fb:f8:e6:f0:ab:d3:97:24:
                    53:f7:0f:be:ae:1d:eb:44:d4:24:9b:0b:6b:c6:34:
                    33:07:04:06:ad:ef:5a:01:dc:ad:98:89:52:1b:37:
                    c0:da:53:43:f4:9a:19:90:70:e0:b9:a1:f4:f9:81:
                    1b:1f:cd:8c:81:9d:80:b4:51:5e:7f:98:35:18:2e:
                    19:b0:ac:aa:23:a6:6a:04:75:d1:10:a5:79:de:b4:
                    b9:cd:43:ea:3e:81:3b:3c:d7:95:5d:60:a2:41:c8:
                    1c:03:86:46:59:f1:89:61:ba:e0:00:1a:d5:9b:99:
                    a5:bc:b0:a7:67:af:13:4c:b9:ac:60:92:6a:12:e6:
                    22:6a:4f:c8:be:df:87:3d:29:e4:ea:a1:86:2d:1a:
                    92:07:68:ae:18:18:4e:95:81:72:41:96:26:fa:20:
                    ee:42:ef:b4:8e:b3:bf:e1:ca:d6:04:67:0c:77:91:
                    8b:8e:f0:74:18:40:5b:fd:aa:e7:2c:41:6d:61:f3:
                    0a:be:71:ce:13:6a:5c:60:1b:c8:d5:86:7c:40:cb:
                    f3:75:89:60:09:aa:c9:e4:97:e0:fb:9c:fd:09:32:
                    07:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:55:80:CC:BC:BC:43:E5:17:39:7C:20:9B:71:DC:58:FF:26:FB:84
            X509v3 Authority Key Identifier:
                keyid:A9:80:C9:07:35:84:AE:DF:F8:00:CA:D3:F0:89:96:83:DE:9E:B0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/5/A980C9073584AEDFF800CAD3F0899683DE9EB0D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef761568c29557b5f128d49a127610ee55feac9235.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/5/323630323a666131313a31303a3a2f34342d3438203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         8c:0a:dc:78:e9:68:46:f4:ef:ef:9d:03:bf:3f:04:20:c4:d0:
         69:6a:a1:2d:43:8e:25:7c:af:68:9d:90:aa:15:3a:2c:9b:d2:
         73:2e:bb:a8:91:f0:ed:6c:27:71:3f:d2:08:d6:13:f3:6c:6b:
         ab:8a:ef:d3:f3:51:75:d7:ab:ca:fe:ff:0e:b5:11:92:e8:e4:
         89:d7:44:27:40:92:59:1a:5b:34:15:a6:26:5f:3c:49:ab:c6:
         35:a1:7c:d0:b0:60:d7:d9:6a:2f:1f:8f:72:60:11:a4:87:5a:
         8c:83:7c:5e:a6:c3:46:d1:ed:2d:c5:3c:a7:7a:69:3e:5c:7e:
         88:4a:ab:06:f8:7d:f4:a4:5e:1c:b8:a2:b6:db:c7:4a:99:ab:
         27:a6:53:b8:53:bf:16:38:70:0a:fe:a8:13:b4:95:2d:c0:59:
         22:a4:be:dd:8c:d8:76:40:09:71:40:be:89:f9:9b:9e:ef:2e:
         c2:6c:bf:f3:06:ff:40:58:ca:f8:ba:0e:0a:36:66:81:fc:3b:
         93:93:ea:5b:34:80:73:e3:00:90:d1:da:75:8d:0b:ee:ab:20:
         6c:3f:8a:0d:a5:13:a0:17:83:00:17:57:c9:bb:14:bf:eb:e9:
         61:20:63:8a:d2:0c:d3:cf:06:b8:bc:9a:65:80:a9:73:80:b1:
         54:1f:9a:3b
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUbVSZv1FzFTzV6y9Kxfz/0fT78OgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0NDI0YjBlZjc2MTU2OGMyOTU1N2I1ZjEyOGQ0OWEx
Mjc2MTBlZTU1ZmVhYzkyMzUwHhcNMjMxMDE0MDE0MTMyWhcNMjQxMDEyMDE0NjMy
WjAzMTEwLwYDVQQDEygxNzU1ODBDQ0JDQkM0M0U1MTczOTdDMjA5QjcxREM1OEZG
MjZGQjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pcg7LGlniKS
3lQfFvd50Xb+MB9u0Xm9YlSSElHZ77jO0Rjb+/jm8KvTlyRT9w++rh3rRNQkmwtr
xjQzBwQGre9aAdytmIlSGzfA2lND9JoZkHDguaH0+YEbH82MgZ2AtFFef5g1GC4Z
sKyqI6ZqBHXREKV53rS5zUPqPoE7PNeVXWCiQcgcA4ZGWfGJYbrgABrVm5mlvLCn
Z68TTLmsYJJqEuYiak/Ivt+HPSnk6qGGLRqSB2iuGBhOlYFyQZYm+iDuQu+0jrO/
4crWBGcMd5GLjvB0GEBb/arnLEFtYfMKvnHOE2pcYBvI1YZ8QMvzdYlgCarJ5Jfg
+5z9CTIHqwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFBdVgMy8vEPlFzl8IJtx3Fj/
JvuEMB8GA1UdIwQYMBaAFKmAyQc1hK7f+ADK0/CJloPenrDQMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU5MTgzYmYzLTFhY2YtNGEyMC04ZmE0
LWI0NjdjMmMyMjYwYi81L0E5ODBDOTA3MzU4NEFFREZGODAwQ0FEM0YwODk5Njgz
REU5RUIwRDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt
NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTM4ZGUyZC01MTJhLTQ2OTItOGM1My1k
MmQ5YTZjZWI1NDkvN2M0NDI0YjBlZjc2MTU2OGMyOTU1N2I1ZjEyOGQ0OWExMjc2
MTBlZTU1ZmVhYzkyMzUuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH
MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzU5MTgzYmYzLTFhY2YtNGEyMC04ZmE0LWI0NjdjMmMyMjYwYi81LzMyMzYzMDMy
M2E2NjYxMzEzMTNhMzEzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMxMzUzMzM1
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQmAvoRABAwDQYJKoZIhvcNAQELBQADggEBAIwK3HjpaEb0
7++dA78/BCDE0GlqoS1DjiV8r2idkKoVOiyb0nMuu6iR8O1sJ3E/0gjWE/Nsa6uK
79PzUXXXq8r+/w61EZLo5InXRCdAklkaWzQVpiZfPEmrxjWhfNCwYNfZai8fj3Jg
EaSHWoyDfF6mw0bR7S3FPKd6aT5cfohKqwb4ffSkXhy4orbbx0qZqyemU7hTvxY4
cAr+qBO0lS3AWSKkvt2M2HZACXFAvon5m57vLsJsv/MG/0BYyvi6Dgo2ZoH8O5OT
6ls0gHPjAJDR2nWNC+6rIGw/ig2lE6AXgwAXV8m7FL/r6WEgY4rSDNPPBri8mmWA
qXOAsVQfmjs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org