Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a31303a3a2f34342d3434203d3e203534313438.roa
File:                     323630323a666134333a31303a3a2f34342d3434203d3e203534313438.roa (raw, json)
Hash identifier:          wAlMljVyqLKDPf+/F8Mm8VkueNFQ/QWUiolgO6nOXjg=
Subject key identifier:   AE:5A:54:2C:0B:48:51:89:43:94:63:B5:58:1E:F9:19:A2:54:F5:6E
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       37980356842C4F36D53220468FE345AF0439DB20
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a31303a3a2f34342d3434203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:41:59 +0000
ROA not before:           Wed 23 Oct 2024 18:36:59 +0000
ROA not after:            Wed 22 Oct 2025 18:41:59 +0000
asID:                     54148
IP address blocks:        2602:fa43:10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:98:03:56:84:2c:4f:36:d5:32:20:46:8f:e3:45:af:04:39:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:59 2024 GMT
            Not After : Oct 22 18:41:59 2025 GMT
        Subject: CN=AE5A542C0B485189439463B5581EF919A254F56E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:77:fe:20:9a:90:f5:ac:09:82:43:34:4a:8d:
                    14:06:cf:94:47:fa:ec:31:e2:c7:3b:56:90:1f:93:
                    db:20:73:5f:c6:30:76:3c:d6:b6:63:5b:37:d7:87:
                    f1:5a:4b:3e:4c:ed:ac:bf:b2:c2:73:37:91:78:c6:
                    96:8a:ed:95:14:fa:68:3a:90:ac:1d:02:50:01:28:
                    8c:8b:e9:06:fd:68:22:c2:7d:7c:4b:94:1b:a6:ef:
                    e7:39:96:76:0b:7a:7b:88:2a:b6:90:31:37:9e:d3:
                    42:58:1b:ef:9a:ae:c0:cf:e1:10:0b:bd:85:dc:99:
                    2a:fb:89:73:70:8e:5a:99:2e:10:d0:bf:46:0e:94:
                    47:a2:13:18:b8:c2:f1:66:98:66:7b:40:2b:cc:14:
                    4a:3e:2f:b1:f6:5c:5d:37:da:af:a1:e6:3c:5d:4d:
                    76:be:f9:dd:db:ce:52:9a:f6:0c:29:c8:09:3b:03:
                    1e:d8:0e:0a:ff:09:e1:94:01:17:5d:e8:df:b2:1a:
                    d1:01:b9:e7:c0:39:ea:08:01:19:6b:06:ac:b6:38:
                    e4:05:f5:7b:43:9d:0b:ba:00:67:e2:3b:57:8e:b2:
                    22:09:42:21:ca:e3:2c:63:f3:55:81:e2:e3:ec:9f:
                    f2:cc:f4:6a:cb:48:58:08:44:0a:2c:bd:62:6f:d4:
                    a9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5A:54:2C:0B:48:51:89:43:94:63:B5:58:1E:F9:19:A2:54:F5:6E
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a31303a3a2f34342d3434203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         7c:db:1c:fa:47:07:3e:ce:46:38:50:77:07:b2:29:33:49:2e:
         b8:25:a9:15:f3:bb:3a:40:98:cc:5c:7c:61:18:85:0d:b9:51:
         41:fd:82:eb:13:69:43:03:d0:6b:31:40:de:27:63:43:8f:dc:
         c1:2b:f8:1f:c1:06:b1:2a:fc:f5:eb:55:29:cd:fe:89:99:c4:
         12:d3:29:78:84:72:e9:85:b3:09:02:25:22:c2:7b:79:da:e8:
         cc:8d:6b:21:68:47:83:09:eb:f8:ec:73:f3:be:1f:31:63:f2:
         16:05:48:05:fb:36:af:9c:96:a4:84:dd:f1:20:fe:63:e8:63:
         db:47:5e:4f:51:e2:6d:7f:ea:e5:11:bb:1f:6c:3a:23:18:2f:
         e5:a6:50:09:35:5c:02:7f:b5:43:f7:5e:91:a0:25:9c:4b:c2:
         c2:9a:95:c6:fd:b5:29:33:f1:4f:24:fc:b2:fd:ce:16:a9:41:
         c8:d7:c1:3d:b9:30:6b:bf:8f:23:a4:00:46:f7:05:ec:b6:a3:
         81:06:4a:b3:cf:d6:0a:1f:06:a2:ad:b1:27:40:ba:71:c2:15:
         ff:75:02:d0:d1:33:da:a9:aa:37:05:b1:fb:01:af:f4:12:d6:
         6e:09:7d:e6:a6:ff:99:63:ff:dd:73:0b:28:6a:e8:e8:cd:66:
         08:f0:62:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----