Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa
File:                     323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa (raw, json)
Hash identifier:          gtQBwh4DbdGDPNVl4V3fGF/0TlZhnvyfJ8TPgZi+Usw=
Subject key identifier:   CB:89:C9:F3:0B:EA:CE:EF:21:24:C6:09:D5:2B:73:15:21:54:8D:80
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       7840C2CA2391F56AD993E10E7BD1A8BA9CA2BA00
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa
Signing time:             Mon 14 Oct 2024 10:50:17 +0000
ROA not before:           Mon 14 Oct 2024 10:45:17 +0000
ROA not after:            Mon 13 Oct 2025 10:50:17 +0000
asID:                     198585
IP address blocks:        2602:fa6e:200::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:40:c2:ca:23:91:f5:6a:d9:93:e1:0e:7b:d1:a8:ba:9c:a2:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Oct 14 10:45:17 2024 GMT
            Not After : Oct 13 10:50:17 2025 GMT
        Subject: CN=CB89C9F30BEACEEF2124C609D52B731521548D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:98:13:60:83:a9:a5:de:37:1a:3d:be:3b:
                    d7:6e:af:98:27:ba:29:a8:bd:61:61:89:cc:c9:62:
                    01:61:d9:2d:bf:2b:39:68:db:57:ac:19:89:53:f6:
                    7c:b8:23:d7:11:4e:6f:1b:ef:5f:18:07:e7:e5:cf:
                    06:4b:de:28:62:4f:7f:4f:38:c6:7e:a6:ee:59:cb:
                    ea:9b:b8:07:a8:f9:da:2c:47:f8:5f:ec:14:42:46:
                    0e:35:a7:e0:92:c6:da:be:38:f7:bd:37:21:46:af:
                    e9:5f:81:5e:1b:68:18:cb:ba:9a:13:94:bd:4c:18:
                    29:12:15:e1:b9:7b:72:fc:1f:8b:36:b1:d8:43:a4:
                    76:60:e9:69:b0:01:ee:7b:65:c9:b3:2f:8a:a8:bc:
                    e7:79:61:8f:17:01:ad:f1:6c:aa:ac:8a:be:7a:30:
                    b5:d6:b0:cf:35:2d:01:f8:85:c7:cf:e9:f6:e1:f2:
                    35:f2:cb:23:61:8c:d6:06:e7:a8:64:69:1a:61:b6:
                    8f:c8:5d:df:2b:27:dd:f3:33:09:4d:f2:bf:c9:d2:
                    00:e2:c5:cd:53:3a:25:ba:13:46:70:84:1c:95:61:
                    d7:cc:ab:1a:ea:f8:8e:c6:cb:b0:38:1b:11:96:67:
                    9b:ba:4b:01:df:63:cd:16:fb:17:eb:0d:33:13:d8:
                    41:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:89:C9:F3:0B:EA:CE:EF:21:24:C6:09:D5:2B:73:15:21:54:8D:80
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:a8:f0:f3:03:54:46:c2:94:42:a1:d5:6c:60:7f:41:8a:
         f5:f3:10:f7:8c:db:fe:ba:0e:01:9f:8d:88:2b:85:26:54:9f:
         c6:ba:98:a4:6d:71:eb:30:d3:06:f0:46:3f:92:f3:96:72:2b:
         b0:a7:d1:3c:8f:78:26:fc:3a:c7:bd:68:7b:64:50:20:c8:b0:
         19:fd:49:5e:71:db:c9:e6:89:49:55:de:db:4b:a4:3d:12:61:
         4f:cb:7c:e6:fc:8d:6c:cb:5f:1b:01:09:33:ff:a4:a2:a5:70:
         74:9a:f4:73:84:ed:2a:fc:c8:a9:20:ac:c0:8a:e8:2c:f0:e9:
         9a:ea:b2:10:9c:aa:d8:be:cd:ff:f7:06:e7:f7:9f:af:ed:7d:
         bd:91:25:a4:ac:00:6f:45:74:e1:3a:bc:7c:fa:87:71:d0:7c:
         4d:ec:69:de:ca:21:55:0a:5e:78:bc:b1:61:d5:08:76:4e:fd:
         34:10:75:12:9b:db:18:e3:60:86:70:ce:73:f8:22:ff:d1:e0:
         55:40:89:b8:b4:34:de:5b:7a:2b:7b:b1:1b:93:77:14:55:3e:
         90:e6:96:d7:fc:a1:60:2f:2d:b8:5e:52:39:44:48:99:82:68:
         04:9e:0b:c4:1d:3d:45:0b:ed:95:48:bf:5c:64:ab:3d:a2:1b:
         a6:3d:c5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----