Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          X+Je/gJGn0fV8/+tt2jBoOTAKuFG3Ce/NKTXr4ruG+s=
Subject key identifier:   3E:2F:6E:FC:75:D2:84:5B:05:AA:2D:2A:10:18:3B:44:C5:12:53:6A
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       6D334CB433F4D2DC4B4F939DCB66AE11B1917A2D
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:41:54 +0000
ROA not before:           Wed 23 Oct 2024 18:36:54 +0000
ROA not after:            Wed 22 Oct 2025 18:41:54 +0000
asID:                     54148
IP address blocks:        2602:fa43:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:33:4c:b4:33:f4:d2:dc:4b:4f:93:9d:cb:66:ae:11:b1:91:7a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:54 2024 GMT
            Not After : Oct 22 18:41:54 2025 GMT
        Subject: CN=3E2F6EFC75D2845B05AA2D2A10183B44C512536A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:7b:26:3f:f5:4c:47:30:53:e5:ec:70:4d:
                    f7:31:3c:38:9d:b7:b7:3e:36:5d:be:d9:24:31:46:
                    57:81:01:e3:1d:78:a1:4b:4c:79:74:da:d4:69:ed:
                    c4:b9:b9:25:8e:09:45:1e:81:36:e1:39:fc:0b:6b:
                    b7:ff:8c:49:d9:ad:71:5a:1a:53:64:6e:d7:13:54:
                    db:c4:6e:a4:cd:23:c9:14:e4:cb:ee:2e:73:da:cc:
                    84:1e:27:63:f0:75:cc:68:f5:88:a3:b6:47:b2:e8:
                    fd:9e:65:31:55:95:e4:59:11:01:db:0c:2b:6f:bc:
                    56:8d:be:19:18:39:dd:d5:dc:b1:7b:0b:6e:d3:4d:
                    02:5b:18:31:20:b9:26:5c:50:61:e2:b5:64:29:44:
                    16:d1:7b:d5:d8:84:66:cb:1b:38:22:af:07:69:25:
                    d0:64:7e:0b:2c:d5:d0:7c:fc:0a:d6:4e:4e:32:86:
                    86:46:8a:ab:3e:72:b4:75:8d:da:36:ce:7d:fb:27:
                    e3:cd:1f:c4:94:64:dc:0f:a9:26:ec:7c:30:25:c9:
                    df:70:63:c7:91:e5:c2:5f:97:83:6e:fb:27:dc:ed:
                    a4:2a:29:d1:a2:8a:24:5f:bb:6e:cb:8c:de:fc:ee:
                    b1:c3:98:fe:01:a5:91:89:99:71:8e:4a:a7:0b:b3:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2F:6E:FC:75:D2:84:5B:05:AA:2D:2A:10:18:3B:44:C5:12:53:6A
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:86:d4:7a:2c:10:76:1b:a9:ae:12:cd:d9:5c:81:6c:7f:cb:
         48:13:00:54:af:cb:05:86:79:3c:e8:21:b9:67:27:da:16:38:
         d6:d7:81:11:a3:43:f3:fe:0b:00:de:16:88:c1:a9:61:09:59:
         2a:4f:52:40:87:08:5a:6d:f1:fe:da:18:c8:f8:82:7b:93:1f:
         44:39:4d:6a:fd:48:74:cc:93:11:fa:39:39:4d:9f:d0:63:3a:
         9a:d3:13:23:3f:53:76:0f:d1:64:1b:81:5a:2e:ef:80:4d:c6:
         af:46:d3:b4:b8:7c:ab:a9:e8:18:64:78:fb:07:a5:1f:58:5a:
         1e:c4:56:5b:22:4c:7a:59:59:ad:05:da:1c:91:d2:80:7b:7e:
         5f:a2:97:61:84:f9:d9:ed:8d:d7:3c:58:5d:92:6f:8d:82:d3:
         17:71:94:ae:b1:0f:b7:bd:2d:e2:d6:0e:ab:0f:f3:1b:d5:1a:
         e9:a7:1e:59:68:ba:b6:1f:4d:fe:73:c0:33:1e:a3:d1:c6:40:
         ca:f9:26:f1:7a:1f:fe:34:6e:eb:64:19:9e:be:e2:43:78:7b:
         44:c0:7d:18:d0:da:4b:b8:2e:89:ee:e1:73:77:bd:1a:c5:6a:
         87:40:86:de:30:84:94:47:8c:0b:50:b0:fe:c4:ca:d9:10:21:
         cd:a0:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----