Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/5/323630323a666131313a32303a3a2f34342d3438203d3e20323132363138.roa
File:                     323630323a666131313a32303a3a2f34342d3438203d3e20323132363138.roa (raw, json)
Hash identifier:          TixcODKpFQxxGcAZi6Q63qK5IGq3cyz5aoyUnqD6QUg=
Subject key identifier:   1E:84:9C:5A:06:75:85:F5:55:F2:C8:63:10:FC:50:73:8B:49:47:A4
Certificate issuer:       /CN=7c4424b0ef761568c29557b5f128d49a127610ee55feac9235
Certificate serial:       0BCE32A265DC78A8B9B97534C579521226BB19E4
Authority key identifier: A9:80:C9:07:35:84:AE:DF:F8:00:CA:D3:F0:89:96:83:DE:9E:B0:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef761568c29557b5f128d49a127610ee55feac9235.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/5/323630323a666131313a32303a3a2f34342d3438203d3e20323132363138.roa
Signing time:             Wed 18 Oct 2023 23:36:36 +0000
ROA not before:           Wed 18 Oct 2023 23:31:36 +0000
ROA not after:            Wed 16 Oct 2024 23:36:36 +0000
asID:                     212618
IP address blocks:        2602:fa11:20::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ce:32:a2:65:dc:78:a8:b9:b9:75:34:c5:79:52:12:26:bb:19:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef761568c29557b5f128d49a127610ee55feac9235
        Validity
            Not Before: Oct 18 23:31:36 2023 GMT
            Not After : Oct 16 23:36:36 2024 GMT
        Subject: CN=1E849C5A067585F555F2C86310FC50738B4947A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:78:09:40:19:b2:aa:7a:64:9b:1b:44:ad:7f:
                    28:9e:34:10:32:e2:68:7e:8d:0c:c3:98:46:1f:8a:
                    70:c8:68:e4:3c:1d:d3:65:5a:be:a1:00:a5:6c:84:
                    7a:6e:32:52:b7:26:f7:23:1e:b7:3f:4c:d1:b4:39:
                    c7:dc:9b:a7:a1:75:ea:19:7b:0a:18:c2:bc:5d:f8:
                    8f:b9:bd:ce:03:28:8e:92:51:0a:41:ce:79:15:7d:
                    34:23:61:7d:26:27:20:f2:e7:88:5f:ea:4a:8e:e9:
                    1c:f0:6e:27:70:6b:89:17:9a:68:fb:75:bf:0e:82:
                    ef:e4:f3:92:eb:45:77:6e:a0:dd:98:36:dc:86:0b:
                    62:fe:d2:97:2c:d9:e7:a5:63:c4:03:aa:99:e1:de:
                    ea:f9:26:1c:e0:3b:e1:1f:57:42:29:da:45:7a:a1:
                    fd:19:09:0f:d8:63:d2:e4:f0:28:96:a5:13:58:19:
                    7f:4c:a8:08:b8:b4:db:51:1f:a0:23:75:9a:e1:be:
                    d6:60:dc:9c:cd:cf:18:4d:78:d1:58:c0:2e:8d:8e:
                    38:0a:7a:4d:54:07:2e:95:36:88:13:ea:00:6f:d2:
                    4f:f2:08:93:d5:43:be:eb:0f:14:b4:98:0b:4a:4d:
                    fe:93:1e:4c:af:d8:f2:a1:62:47:ad:85:f7:33:d8:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:84:9C:5A:06:75:85:F5:55:F2:C8:63:10:FC:50:73:8B:49:47:A4
            X509v3 Authority Key Identifier:
                keyid:A9:80:C9:07:35:84:AE:DF:F8:00:CA:D3:F0:89:96:83:DE:9E:B0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/5/A980C9073584AEDFF800CAD3F0899683DE9EB0D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef761568c29557b5f128d49a127610ee55feac9235.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/5/323630323a666131313a32303a3a2f34342d3438203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:79:a4:3d:30:75:63:14:3a:2f:5a:33:60:b7:13:0e:d8:f0:
         b7:7a:33:1c:39:74:fe:cd:a7:ab:79:6e:41:70:a9:bf:69:9d:
         90:b8:5c:35:5b:12:30:8e:88:f9:42:6b:3b:79:46:cd:b5:2a:
         09:be:e3:b6:79:be:66:cd:ea:7e:5f:29:7e:d0:c6:8e:07:8f:
         ac:72:59:79:af:df:b8:3c:64:f6:13:5b:f6:e3:40:24:54:d7:
         87:2f:f8:36:8a:fe:c2:3d:f8:6b:03:43:07:7c:81:4a:2b:0b:
         fa:d0:4c:05:1d:8a:a4:66:c6:bf:88:3e:19:57:1e:37:13:c9:
         c0:b2:d2:c5:53:c1:ed:90:ed:45:cd:ae:3d:da:0a:09:f0:e7:
         65:79:a0:29:fb:f6:fc:9d:46:ac:7f:98:4d:45:7f:ef:a2:c2:
         9c:3a:2b:5f:0e:e2:85:f0:8a:49:87:5f:f7:a7:90:c2:84:cc:
         da:3a:8b:18:b4:f4:1e:99:74:9c:ce:15:08:06:23:b5:ae:91:
         6a:3c:3e:a6:ba:8b:b4:26:d5:96:25:36:7d:27:40:f5:ac:cb:
         d8:8a:3e:10:68:0b:73:51:87:1a:c1:3e:4e:30:4e:93:5a:25:
         7a:f1:bd:d5:75:d6:14:da:c0:ce:65:72:fc:7d:42:21:4d:8c:
         6d:82:36:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----