Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66373a3a2f34382d3438203d3e203534363030.roa
File:                     323630323a663939323a66373a3a2f34382d3438203d3e203534363030.roa (raw, json)
Hash identifier:          mbxs/KyiiXCzMzovQkdebBf0tfpmu0WoGFLW/0GE3wA=
Subject key identifier:   6C:8C:FB:01:9D:0E:BB:5D:C2:FB:DF:B0:FD:6D:0D:95:3D:59:53:B0
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       1AF65CCF57F4B899F8A8E28A2487F6D539866748
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66373a3a2f34382d3438203d3e203534363030.roa
Signing time:             Thu 24 Oct 2024 15:23:40 +0000
ROA not before:           Thu 24 Oct 2024 15:18:40 +0000
ROA not after:            Thu 23 Oct 2025 15:23:40 +0000
asID:                     54600
IP address blocks:        2602:f992:f7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f6:5c:cf:57:f4:b8:99:f8:a8:e2:8a:24:87:f6:d5:39:86:67:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Oct 24 15:18:40 2024 GMT
            Not After : Oct 23 15:23:40 2025 GMT
        Subject: CN=6C8CFB019D0EBB5DC2FBDFB0FD6D0D953D5953B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:0e:e0:1e:d1:e5:77:0d:54:19:df:34:09:
                    01:e3:79:eb:4a:23:0b:01:dd:45:25:da:3d:b6:ce:
                    79:5b:f0:cf:4f:6c:05:40:93:20:21:07:1b:f3:c8:
                    de:44:d1:1b:5b:73:76:fb:8e:e4:20:d9:77:c6:0c:
                    1e:4a:1a:d7:a7:3b:20:e7:b5:89:98:53:75:90:8c:
                    88:f2:a3:0a:ea:ca:36:5a:3e:3d:dc:f6:92:5c:c0:
                    79:9d:58:42:66:73:31:50:5a:25:2b:ec:8a:d5:cf:
                    03:72:c5:7b:89:35:49:33:0d:ca:b9:a7:bb:19:dc:
                    03:ad:2f:55:76:f2:98:13:d5:b0:4a:2c:03:c6:71:
                    f4:3b:1e:96:a8:02:21:d9:89:a6:25:47:ee:91:29:
                    c2:fa:f3:20:49:04:cd:98:ce:b2:b8:45:83:5e:2a:
                    45:3b:62:1e:e4:59:e6:e4:b7:92:4c:2f:9c:c1:61:
                    ac:f3:b6:fb:ba:1e:76:36:78:c3:e2:c7:ff:0e:62:
                    41:b0:43:12:1d:ba:cc:92:bf:7e:72:ea:bc:d8:e1:
                    0c:54:2a:b1:e1:fb:7a:74:a7:06:0b:50:90:b5:16:
                    03:13:e9:d0:11:21:2e:5c:9a:c0:54:a2:df:02:e2:
                    a6:04:d4:7a:48:58:43:1a:3b:77:cf:f8:45:e8:cd:
                    d1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8C:FB:01:9D:0E:BB:5D:C2:FB:DF:B0:FD:6D:0D:95:3D:59:53:B0
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66373a3a2f34382d3438203d3e203534363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:f7::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:0c:b4:7b:5f:8c:56:f6:a9:35:b3:3a:0e:21:79:9d:53:66:
         6d:2a:4f:88:4a:7c:27:f4:4e:d2:cc:d3:da:c9:f9:e2:87:bc:
         6a:46:75:0a:7d:20:bd:9e:8f:8e:61:f5:b1:c9:de:11:19:43:
         09:57:ce:d8:00:58:6e:de:71:86:f5:1d:43:25:0d:d0:2e:87:
         fd:7b:74:c0:87:7a:d2:0b:94:dc:6d:c0:6f:a0:f6:ab:29:99:
         53:f0:59:9c:b4:5b:75:15:a5:08:a6:db:9d:03:47:fa:a5:99:
         c8:a6:8b:bf:72:87:60:7b:8a:9a:65:7c:1b:44:69:0a:e3:37:
         55:d5:ee:51:48:f0:77:4d:5d:96:7a:e5:78:cc:9a:b2:f1:9b:
         3e:55:f5:7b:eb:36:93:c5:15:97:97:ce:df:02:91:02:ec:61:
         e0:cd:75:63:de:00:83:f4:02:ed:9f:32:17:74:0f:f4:09:db:
         98:fc:e9:93:56:f7:cb:b6:fa:21:44:3d:d5:c8:21:f1:f5:97:
         12:08:f6:e7:d1:7e:65:6f:d4:79:1a:a4:a7:4a:2f:48:67:d6:
         1a:c7:31:aa:fd:6b:1e:1b:e0:09:bf:28:23:f1:c0:8d:34:f5:
         47:b1:4c:8b:dd:9d:36:d3:7f:1a:a1:03:8c:3a:63:69:a7:39:
         03:39:0b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----