Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a313a3a2f34382d3438203d3e20323030333531.roa
File:                     323630323a666134333a313a3a2f34382d3438203d3e20323030333531.roa (raw, json)
Hash identifier:          URzvxJ9SILj4RwE5whAD1imPIng0SfQHdqjBa2X8uFY=
Subject key identifier:   DD:D3:09:96:17:65:52:A8:F8:0C:92:5F:A0:EA:D8:7C:D2:99:C6:27
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       7E876F005F2BB1F73AA4AFC5D08FDD353AA89F47
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a313a3a2f34382d3438203d3e20323030333531.roa
Signing time:             Wed 23 Oct 2024 18:41:55 +0000
ROA not before:           Wed 23 Oct 2024 18:36:55 +0000
ROA not after:            Wed 22 Oct 2025 18:41:55 +0000
asID:                     200351
IP address blocks:        2602:fa43:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:87:6f:00:5f:2b:b1:f7:3a:a4:af:c5:d0:8f:dd:35:3a:a8:9f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:55 2024 GMT
            Not After : Oct 22 18:41:55 2025 GMT
        Subject: CN=DDD30996176552A8F80C925FA0EAD87CD299C627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:68:12:5e:a6:cc:43:f0:7d:84:c9:4e:b3:57:
                    8b:24:56:7b:ee:fd:a6:fc:26:bb:c4:1c:94:ff:95:
                    b1:76:e1:58:83:21:65:c9:52:43:2b:fe:93:47:23:
                    fa:bf:68:75:db:fb:34:8d:8d:a6:b8:7d:55:ce:e0:
                    f9:35:43:70:fe:e4:55:a5:25:99:e0:53:f7:8e:cf:
                    5b:5b:3e:be:27:69:2c:ac:cc:3d:74:d7:19:e3:90:
                    6b:76:1e:b0:17:a0:c6:ca:73:9a:39:91:c1:4e:37:
                    18:ae:04:c8:09:76:72:db:d8:b2:56:9f:14:88:cf:
                    14:fe:d2:28:0c:1b:4b:4f:06:3b:a7:65:a4:89:1d:
                    fe:0f:d6:99:eb:64:04:6a:fe:1a:44:d1:a1:19:1c:
                    e5:b8:57:66:ac:48:7f:cc:5b:59:cd:89:83:04:f4:
                    29:82:64:3c:77:96:ff:53:4a:a4:4f:56:5b:f8:63:
                    48:80:60:15:82:07:dd:34:63:8e:fd:f0:02:2d:05:
                    44:2b:24:31:c5:aa:06:52:10:41:a5:d5:d6:29:2b:
                    ff:cb:f8:cf:4b:3c:c5:2c:0e:b7:95:03:2e:e8:86:
                    39:61:43:3d:fa:ed:27:d2:49:f6:3c:e9:c3:ec:19:
                    14:33:e4:5d:47:aa:8f:f4:c3:29:31:e2:9a:6d:89:
                    d8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D3:09:96:17:65:52:A8:F8:0C:92:5F:A0:EA:D8:7C:D2:99:C6:27
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a313a3a2f34382d3438203d3e20323030333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:9d:af:f9:ea:1a:fc:ad:69:eb:fa:d7:bb:00:1c:4c:08:3a:
         d8:6b:1e:88:cf:38:8d:ab:7b:51:b8:62:8c:09:4f:68:72:53:
         22:b2:21:03:b6:13:94:67:9f:58:60:ab:3a:c9:f8:6c:2e:6e:
         ac:de:94:39:0d:67:59:0d:99:d6:53:fa:58:1d:fd:2f:e6:ab:
         9e:e0:9a:c3:de:5e:c5:56:de:66:97:63:c4:22:e1:f6:20:e4:
         be:47:18:b4:1d:15:99:cb:da:25:41:16:69:de:09:87:ae:d6:
         e1:f5:02:fe:cc:8c:d2:cf:db:30:ba:6e:2e:fa:8a:b5:b7:98:
         13:b4:82:f7:d9:84:20:58:4f:02:68:2d:d6:69:17:54:ae:7a:
         0d:0e:9a:49:eb:1d:e8:dd:92:86:91:bd:c8:1c:37:81:76:47:
         d4:84:52:05:a9:36:37:44:63:40:15:50:45:1e:54:86:b2:36:
         79:73:fb:75:a6:ca:80:33:15:d7:4d:d9:72:88:29:8f:17:a8:
         c3:9e:c9:a6:81:03:03:00:fc:73:1f:1a:8d:64:28:2b:69:81:
         ac:60:4f:cf:28:67:9f:96:02:a1:e5:da:ff:92:06:8f:08:21:
         b1:4b:83:4d:77:1f:e4:c0:ad:68:dc:e4:35:e8:c4:9e:5b:15:
         ec:47:77:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----