Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a39303a3a2f34382d3438203d3e203135333533.roa
File:                     323630323a666131313a39303a3a2f34382d3438203d3e203135333533.roa (raw, json)
Hash identifier:          0/yL6GEb5sBMCrIChDgwWEuZXgU75GN0BTF1kLUr02I=
Subject key identifier:   7B:E7:AB:82:44:C0:6D:BD:61:B0:07:EB:FA:00:82:44:FC:8F:9B:C1
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       4BBC90619E3CEDE69B809DA6C32B7A10ECC320C6
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a39303a3a2f34382d3438203d3e203135333533.roa
Signing time:             Sat 01 Feb 2025 02:56:31 +0000
ROA not before:           Sat 01 Feb 2025 02:51:31 +0000
ROA not after:            Sat 31 Jan 2026 02:56:31 +0000
asID:                     15353
IP address blocks:        2602:fa11:90::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bc:90:61:9e:3c:ed:e6:9b:80:9d:a6:c3:2b:7a:10:ec:c3:20:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Feb  1 02:51:31 2025 GMT
            Not After : Jan 31 02:56:31 2026 GMT
        Subject: CN=7BE7AB8244C06DBD61B007EBFA008244FC8F9BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:91:5f:ad:1d:f1:fc:af:7a:21:78:23:a7:
                    b2:57:2f:5b:95:77:16:fd:fb:3b:c8:e2:ae:47:28:
                    0e:f3:1e:58:ab:db:17:cb:71:68:e7:26:a5:a8:5f:
                    5b:b2:60:bf:d6:72:5d:83:8a:62:7e:34:c6:fc:7d:
                    81:55:d0:ff:d8:e3:04:5b:b2:e2:2a:34:47:ad:68:
                    49:ed:96:05:3c:15:e5:93:3a:3d:70:f1:91:1d:4a:
                    b8:f7:47:df:db:e6:05:35:3e:94:b3:be:d6:df:d1:
                    c9:e8:e6:b5:1a:4f:39:20:82:a7:9a:2c:bb:ed:a0:
                    b6:0c:5e:e2:71:8a:11:d9:3c:8e:9a:ad:64:62:dc:
                    86:95:ea:ab:84:a7:01:e9:fe:6f:36:d1:cd:34:00:
                    63:38:91:a1:c0:c1:f5:0d:f2:7f:9f:ba:6c:04:3f:
                    14:23:4b:98:0b:9a:2d:03:49:49:aa:91:7b:7d:31:
                    ee:a0:e8:f0:fd:59:dd:1a:4a:95:8f:6b:78:5c:9c:
                    cb:c7:67:a5:ca:86:2e:b9:45:a3:c2:02:20:e2:6b:
                    b4:a9:c2:65:15:34:03:2f:54:80:9d:2d:b9:64:b8:
                    0d:31:7a:95:0b:ca:18:6d:de:fa:98:71:ed:4c:4e:
                    14:f0:cf:9e:16:93:e5:47:60:ea:53:f3:8c:3a:e3:
                    9a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E7:AB:82:44:C0:6D:BD:61:B0:07:EB:FA:00:82:44:FC:8F:9B:C1
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a39303a3a2f34382d3438203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:90::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:29:e5:09:06:5d:11:44:5b:c3:cf:31:0a:7f:a5:e3:48:1a:
         67:26:21:73:89:1e:b7:de:d3:bc:73:75:ce:7d:3b:8a:89:bb:
         d0:43:9f:e2:c1:91:ae:19:e9:ef:88:44:45:22:63:8b:7b:76:
         8b:96:f6:cb:24:6d:7b:a6:4f:4a:09:09:ac:63:09:33:9b:46:
         8a:95:b9:f6:e1:5a:e1:91:cd:f7:97:df:31:fb:39:a2:43:93:
         69:f3:b2:71:72:9c:d3:80:3f:09:e6:1c:b0:2f:63:d3:30:5c:
         fd:4d:ca:d5:25:3f:60:4e:a3:0e:f6:f3:d3:1d:e9:e0:2e:b5:
         98:96:4c:4c:67:f2:7c:45:6b:b1:ec:ab:e5:89:e1:5a:26:ce:
         30:11:8d:f6:20:1b:c5:b3:38:76:6f:f2:83:b1:42:8e:c6:a0:
         9e:24:28:78:89:d9:cc:36:97:5c:39:c8:7e:26:49:2d:f6:94:
         fc:eb:83:f5:41:43:b5:ad:a1:28:32:62:7a:b2:14:42:3b:eb:
         7f:07:84:b5:32:45:db:f1:25:3c:da:cf:0e:f4:2f:43:6e:ed:
         7e:b1:13:c9:f9:0c:9b:5e:91:88:ef:63:70:98:93:95:66:99:
         30:8e:6c:c0:eb:1a:78:92:28:48:c9:b4:be:68:37:35:16:f4:
         26:82:2a:86
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUS7yQYZ487eabgJ2mwyt6EOzDIMYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQy
NGVkMDMyMmUwY2UwMmRhZDYwHhcNMjUwMjAxMDI1MTMxWhcNMjYwMTMxMDI1NjMx
WjAzMTEwLwYDVQQDEyg3QkU3QUI4MjQ0QzA2REJENjFCMDA3RUJGQTAwODI0NEZD
OEY5QkMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquCRX60d8fyv
eiF4I6eyVy9blXcW/fs7yOKuRygO8x5Yq9sXy3Fo5yalqF9bsmC/1nJdg4pifjTG
/H2BVdD/2OMEW7LiKjRHrWhJ7ZYFPBXlkzo9cPGRHUq490ff2+YFNT6Us77W39HJ
6Oa1Gk85IIKnmiy77aC2DF7icYoR2TyOmq1kYtyGleqrhKcB6f5vNtHNNABjOJGh
wMH1DfJ/n7psBD8UI0uYC5otA0lJqpF7fTHuoOjw/VndGkqVj2t4XJzLx2elyoYu
uUWjwgIg4mu0qcJlFTQDL1SAnS25ZLgNMXqVC8oYbd76mHHtTE4U8M+eFpPlR2Dq
U/OMOuOavwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFHvnq4JEwG29YbAH6/oAgkT8
j5vBMB8GA1UdIwQYMBaAFLsmLS0Gpbv0/yImXHtPVR/wN0M9MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC82L0JCMjYyRDJEMDZBNUJCRjRGRjIyMjY1QzdCNEY1NTFG
RjAzNzQzM0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt
NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTM4ZGUyZC01MTJhLTQ2OTItOGM1My1k
MmQ5YTZjZWI1NDkvN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQyNGVk
MDMyMmUwY2UwMmRhZDYuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH
MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC82LzMyMzYzMDMy
M2E2NjYxMzEzMTNhMzkzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMzM1
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAmAvoRAJAwDQYJKoZIhvcNAQELBQADggEBAGQp5QkGXRFE
W8PPMQp/peNIGmcmIXOJHrfe07xzdc59O4qJu9BDn+LBka4Z6e+IREUiY4t7douW
9sskbXumT0oJCaxjCTObRoqVufbhWuGRzfeX3zH7OaJDk2nzsnFynNOAPwnmHLAv
Y9MwXP1NytUlP2BOow7289Md6eAutZiWTExn8nxFa7Hsq+WJ4VomzjARjfYgG8Wz
OHZv8oOxQo7GoJ4kKHiJ2cw2l1w5yH4mSS32lPzrg/VBQ7WtoSgyYnqyFEI7638H
hLUyRdvxJTzazw70L0Nu7X6xE8n5DJtekYjvY3CYk5VmmTCObMDrGniSKEjJtL5o
NzUW9CaCKoY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:50 2025 by rpki-client