Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/323630323a666162383a3a2f33362d3336203d3e20323033343533.roa
File:                     323630323a666162383a3a2f33362d3336203d3e20323033343533.roa (raw, json)
Hash identifier:          2y5MjN3UNuAkK2SGg1fxmZITUchSnWtcq8B22ZIhwkw=
Subject key identifier:   92:D8:FA:91:C2:B6:D2:80:00:70:52:E7:2D:DB:AB:D7:EE:88:A7:3B
Certificate issuer:       /CN=1822fe9c8a94760625f39a68cc0cb2452e118f941f2e744c13
Certificate serial:       1A1C37D47FC0D52F4E87C49863B573E788A4781E
Authority key identifier: DC:DC:33:8C:7E:15:4C:E2:3D:0D:A6:07:DE:19:25:37:B8:1D:7F:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a94760625f39a68cc0cb2452e118f941f2e744c13.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/323630323a666162383a3a2f33362d3336203d3e20323033343533.roa
Signing time:             Sat 28 Oct 2023 00:44:05 +0000
ROA not before:           Sat 28 Oct 2023 00:39:05 +0000
ROA not after:            Sat 26 Oct 2024 00:44:05 +0000
asID:                     203453
IP address blocks:        2602:fab8::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1c:37:d4:7f:c0:d5:2f:4e:87:c4:98:63:b5:73:e7:88:a4:78:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822fe9c8a94760625f39a68cc0cb2452e118f941f2e744c13
        Validity
            Not Before: Oct 28 00:39:05 2023 GMT
            Not After : Oct 26 00:44:05 2024 GMT
        Subject: CN=92D8FA91C2B6D280007052E72DDBABD7EE88A73B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:1a:11:96:53:2a:43:0a:20:0a:2a:b7:a7:
                    e7:72:a9:fd:fd:88:4a:e9:b5:f9:5c:83:1b:c4:47:
                    05:06:d5:9c:e6:b6:88:4d:01:5d:71:97:b6:66:eb:
                    07:32:61:5d:6f:28:2d:46:ef:02:66:bc:a0:34:c0:
                    3b:8b:af:a7:11:ae:00:d7:61:ff:b3:25:63:3d:1a:
                    0d:22:24:94:fe:a3:e9:12:5f:0e:e4:a4:a5:bb:d2:
                    4e:b1:84:ad:ab:65:e1:58:5b:98:6b:06:bd:b5:56:
                    21:8a:d4:2a:ab:cd:49:a0:78:25:aa:c6:37:a3:9e:
                    59:4b:8e:40:82:7c:2d:0a:d3:a4:18:b5:80:81:9e:
                    27:ad:69:14:ca:b1:75:e4:e9:29:1b:cf:e6:b3:77:
                    67:05:a1:a3:7f:7b:4c:d8:da:3e:e1:21:9f:8c:32:
                    2e:25:77:01:6d:13:b7:0f:9a:91:f6:d8:6f:f3:d5:
                    38:67:7c:54:dd:e2:43:aa:3e:9c:08:7e:ca:d0:5a:
                    72:42:2e:6b:f5:3a:40:bb:0a:7f:c0:68:b8:67:b4:
                    f5:99:a6:e5:22:58:16:a9:ad:a8:8d:24:d8:b6:77:
                    ec:93:2c:0b:3d:bd:8a:e8:c3:4e:17:2f:b4:c0:9b:
                    99:e1:5c:55:d0:71:c9:e0:73:dd:47:1a:02:45:1a:
                    1b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D8:FA:91:C2:B6:D2:80:00:70:52:E7:2D:DB:AB:D7:EE:88:A7:3B
            X509v3 Authority Key Identifier:
                keyid:DC:DC:33:8C:7E:15:4C:E2:3D:0D:A6:07:DE:19:25:37:B8:1D:7F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/DCDC338C7E154CE23D0DA607DE192537B81D7FFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a94760625f39a68cc0cb2452e118f941f2e744c13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/323630323a666162383a3a2f33362d3336203d3e20323033343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fab8::/36

    Signature Algorithm: sha256WithRSAEncryption
         31:46:31:1e:52:e1:3c:dd:e5:14:77:4f:19:43:9c:74:c3:e3:
         3a:b6:10:5d:64:76:75:c7:1b:c0:e7:e3:6e:ba:37:4f:63:8f:
         a4:a6:4e:93:ef:e4:20:d2:02:6e:15:ac:9c:10:c2:3c:2a:dc:
         3c:01:23:cf:65:69:ce:32:d5:a7:a7:91:4d:e5:f4:cb:af:e8:
         0f:4e:d3:e4:68:8d:71:1b:06:f6:b1:0e:40:48:28:1d:d6:06:
         28:a4:e2:f0:1e:04:88:ab:47:85:eb:52:18:f2:47:0d:a9:3f:
         16:cd:f1:76:17:41:50:77:bc:96:69:26:51:4d:b4:83:48:f9:
         fe:56:f2:73:b9:e1:91:e1:68:07:b4:a6:d3:91:9c:d4:9c:5f:
         d0:35:91:9b:91:20:0b:26:ad:24:8d:d7:da:05:77:29:26:69:
         e9:8b:1c:29:ea:d4:87:84:2b:80:6f:f3:ba:24:11:38:6f:2e:
         d5:1b:5d:e2:09:30:28:5f:59:fa:f1:8c:42:f3:8b:5b:2f:2b:
         6e:48:4f:33:d5:07:54:11:4d:0d:bc:79:44:e6:96:a5:d1:d9:
         4d:3b:87:e4:30:4a:55:a4:4f:0e:14:1b:8c:90:9e:64:ec:d8:
         09:34:03:8d:4b:c2:62:62:43:11:6a:f4:4c:06:af:f9:f5:8f:
         69:52:c5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----