Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a31313a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a31313a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          8MbEMEv6syKAXORxbLEMzuaepQqrNrSGnC3ZGlXQmHU=
Subject key identifier:   86:5C:3E:BE:AB:31:A8:DB:67:BF:8C:97:9D:8C:E7:5F:13:17:62:34
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       0B9EF80D5D02AF29879A82CAB89098EF2352AC67
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a31313a3a2f34382d3438203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:41:56 +0000
ROA not before:           Wed 23 Oct 2024 18:36:56 +0000
ROA not after:            Wed 22 Oct 2025 18:41:56 +0000
asID:                     54148
IP address blocks:        2602:fa43:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9e:f8:0d:5d:02:af:29:87:9a:82:ca:b8:90:98:ef:23:52:ac:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:56 2024 GMT
            Not After : Oct 22 18:41:56 2025 GMT
        Subject: CN=865C3EBEAB31A8DB67BF8C979D8CE75F13176234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:1f:32:ff:49:72:eb:7b:8e:2a:cf:71:59:
                    ea:43:6d:1a:aa:93:9d:a3:6f:8c:60:69:7d:52:f4:
                    f3:2f:d4:3e:71:e1:2b:e1:cf:ce:15:28:4f:86:7d:
                    31:ce:b3:d6:e2:c3:08:ab:17:e6:00:82:44:8c:93:
                    06:34:4f:3b:41:0b:b5:6e:5c:6e:85:37:87:3a:17:
                    97:4b:3f:46:2a:8c:94:a8:7e:0e:17:dc:d4:d9:d4:
                    2e:6b:fd:fb:1d:1a:d7:5a:c1:b5:02:c4:3b:cc:00:
                    d4:2e:d8:e9:0e:42:69:a8:c7:53:88:5a:a8:1d:98:
                    90:50:cc:66:a3:8b:17:93:40:86:8b:d0:ea:03:e3:
                    3d:57:2e:79:e5:6e:84:44:9b:e8:7a:9a:18:e5:33:
                    3a:23:29:24:91:b7:10:00:ce:03:38:ce:e4:bc:f6:
                    c2:3a:87:bf:dd:4e:1f:3a:2f:c0:2e:07:17:3b:73:
                    4b:d0:bb:8b:fc:3d:bc:10:9e:cf:99:b3:01:98:2f:
                    ee:af:27:63:23:dc:e2:c0:08:36:67:a7:43:b3:a1:
                    cc:86:80:8b:81:5c:d3:b8:79:4f:7a:f8:72:b0:b8:
                    c8:a6:97:64:07:fe:7b:a9:b0:3d:8d:aa:bb:a3:21:
                    ad:00:a2:b1:18:2b:29:21:56:9c:31:a8:10:0b:93:
                    7e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5C:3E:BE:AB:31:A8:DB:67:BF:8C:97:9D:8C:E7:5F:13:17:62:34
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a31313a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:5f:79:25:42:1e:69:53:22:28:bb:bd:30:bb:7e:ea:8b:d7:
         4e:5f:10:84:44:37:a0:93:3a:89:88:e5:70:c3:dc:da:31:00:
         68:8d:05:94:42:00:38:78:18:03:ef:c0:ed:ae:47:d0:bf:eb:
         43:b6:c0:0c:b1:08:83:52:22:7f:59:a9:22:5b:41:a7:79:77:
         c7:ad:fc:c4:6e:e2:cf:83:ad:2a:47:ca:66:e2:6d:64:f5:8d:
         88:3c:35:fc:c2:60:6b:88:34:da:46:45:ff:26:f5:53:6b:f6:
         ce:65:57:eb:e8:38:c0:21:a9:72:35:cd:1f:7a:61:32:7e:8b:
         94:1f:18:78:24:36:aa:a3:db:a0:50:d1:27:99:c3:a0:de:c2:
         d8:8f:41:fe:5c:c4:17:6a:4a:a1:a7:cc:e4:4e:81:46:c6:91:
         dd:22:6b:c3:c2:e0:1f:25:94:d6:4f:35:7f:75:a7:5a:61:a8:
         43:ed:92:24:42:79:1f:71:f8:30:1c:3d:1e:ba:9f:e1:86:89:
         de:3e:fb:08:c5:3f:a4:f3:a9:b4:d2:bb:62:21:a2:45:8b:82:
         6a:15:78:5f:1b:81:ff:93:5a:7e:4d:9a:a8:eb:0d:4a:19:7c:
         a4:d3:c2:ef:7d:e9:fe:86:12:c6:74:6a:50:b8:da:64:55:1d:
         22:de:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----