Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a32303a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a32303a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          E5hwG9IomxUW2yrvlHWCVSzK0lS4Y21TxYhliYQMTjo=
Subject key identifier:   9D:FA:A8:C4:5B:E3:A4:07:6B:B8:A2:BA:11:D2:6D:F1:98:5D:17:B9
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       39F9FA42FA8027EEF24D222E03B745980031B907
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a32303a3a2f34362d3436203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:41:55 +0000
ROA not before:           Wed 23 Oct 2024 18:36:55 +0000
ROA not after:            Wed 22 Oct 2025 18:41:55 +0000
asID:                     54148
IP address blocks:        2602:fa43:20::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f9:fa:42:fa:80:27:ee:f2:4d:22:2e:03:b7:45:98:00:31:b9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:55 2024 GMT
            Not After : Oct 22 18:41:55 2025 GMT
        Subject: CN=9DFAA8C45BE3A4076BB8A2BA11D26DF1985D17B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6e:e7:60:44:2a:63:d6:e4:40:0e:91:03:62:
                    1e:1c:d5:43:ac:d7:dd:75:7c:1f:c5:43:83:e9:0c:
                    e3:f1:33:6b:56:08:2d:74:d0:e6:25:95:4b:b1:24:
                    b8:97:bc:67:0d:d3:8d:cd:00:48:20:b9:b7:ab:31:
                    43:18:d0:8f:9d:62:43:55:4f:42:0b:c9:d1:4e:f2:
                    1d:81:06:2a:91:66:81:98:3b:79:fe:03:0f:a4:25:
                    69:79:3b:0b:dd:c9:2d:d2:9e:b8:9d:fc:fe:59:d1:
                    28:23:00:1c:11:23:b0:ea:57:09:38:ce:cb:f4:c2:
                    45:30:03:cf:d5:ba:8a:16:4a:5e:52:69:b9:9a:52:
                    47:c6:62:6d:bc:d0:1f:05:00:5f:47:f6:4f:5b:66:
                    5f:61:b3:8a:ce:6d:f8:af:65:72:75:1e:df:ba:39:
                    3b:4f:13:e8:6c:96:d2:60:cf:cc:01:42:bf:19:2c:
                    be:46:08:e5:7c:84:44:ad:ce:76:ee:55:82:38:5f:
                    2c:5c:5b:2c:1e:a3:73:0f:1c:4a:67:98:d5:ef:61:
                    27:4e:49:77:a8:7e:6e:07:46:28:ce:62:61:8c:74:
                    03:63:e3:f4:4a:10:23:97:f4:7b:4d:c6:37:22:8e:
                    7a:32:09:7d:6d:17:4b:39:7f:1a:ff:0c:dc:96:5d:
                    9a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FA:A8:C4:5B:E3:A4:07:6B:B8:A2:BA:11:D2:6D:F1:98:5D:17:B9
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a32303a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:20::/46

    Signature Algorithm: sha256WithRSAEncryption
         76:78:24:ef:a4:8b:2c:a2:78:bd:49:95:e9:a3:46:95:cf:97:
         7e:a7:02:b5:b3:97:88:8e:c9:65:70:ef:4a:a9:fc:79:e3:2f:
         78:54:b2:80:31:76:ce:b8:dc:d0:70:f6:3e:0b:cb:dc:da:09:
         64:8e:00:92:ac:d1:38:8e:5f:9e:c4:9b:0f:67:29:32:e0:86:
         fc:0d:ad:0f:31:5f:99:a2:5a:d9:fd:b8:73:6e:95:9c:3c:67:
         0b:be:a3:ff:4d:34:e2:ac:5b:ea:80:6c:7f:b5:e9:be:26:e7:
         d1:4f:a5:35:79:de:42:f0:8f:e4:6b:47:1b:5e:a5:ab:9f:44:
         44:87:26:40:36:5e:cb:6b:02:cd:b8:77:58:8f:f3:4e:b2:5a:
         9b:67:3e:08:87:1d:ff:bf:95:4b:f7:f0:17:ba:5d:64:1f:50:
         58:ba:1b:8b:47:33:9a:4c:d7:a8:d0:05:64:26:69:a2:af:6e:
         ac:ef:39:6a:45:dd:c4:ed:4e:20:18:57:3e:b7:88:50:d1:7b:
         10:86:4f:39:4f:52:1a:25:28:81:fe:bf:24:08:5f:6d:a3:60:
         ed:d4:c8:30:eb:17:91:d7:6d:ec:64:63:dc:77:bb:5d:dc:0c:
         05:1f:6a:55:cd:31:a3:cb:b6:d0:2e:2d:97:e7:c6:a9:34:57:
         3e:b3:30:1c
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUOfn6QvqAJ+7yTSIuA7dFmAAxuQcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTMxNjViZDI1NTg4MWUwMDA3ODA2OGNl
MzJlZmIzZWVhZWFlMDdjZjIwHhcNMjQxMDIzMTgzNjU1WhcNMjUxMDIyMTg0MTU1
WjAzMTEwLwYDVQQDEyg5REZBQThDNDVCRTNBNDA3NkJCOEEyQkExMUQyNkRGMTk4
NUQxN0I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA027nYEQqY9bk
QA6RA2IeHNVDrNfddXwfxUOD6Qzj8TNrVggtdNDmJZVLsSS4l7xnDdONzQBIILm3
qzFDGNCPnWJDVU9CC8nRTvIdgQYqkWaBmDt5/gMPpCVpeTsL3ckt0p64nfz+WdEo
IwAcESOw6lcJOM7L9MJFMAPP1bqKFkpeUmm5mlJHxmJtvNAfBQBfR/ZPW2ZfYbOK
zm34r2VydR7fujk7TxPobJbSYM/MAUK/GSy+RgjlfIRErc527lWCOF8sXFssHqNz
DxxKZ5jV72EnTkl3qH5uB0YozmJhjHQDY+P0ShAjl/R7TcY3Io56Mgl9bRdLOX8a
/wzcll2a2QIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFJ36qMRb46QHa7iiuhHSbfGY
XRe5MB8GA1UdIwQYMBaAFCyLMjvZW7DURIHLotzOPTq8OjxZMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk4MmY4NWJjLTNkNjktNDhhMi1iOWMz
LTdlZjBhODM5Y2UxOS8zLzJDOEIzMjNCRDk1QkIwRDQ0NDgxQ0JBMkRDQ0UzRDNB
QkMzQTNDNTkuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt
NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lZTFiZGZmOC1kYmI1LTRmMGYtOThlNi1j
OGUxMzI2YmE3OWIvN2VjYWUzMjA0OTMxNjViZDI1NTg4MWUwMDA3ODA2OGNlMzJl
ZmIzZWVhZWFlMDdjZjIuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH
MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzk4MmY4NWJjLTNkNjktNDhhMi1iOWMzLTdlZjBhODM5Y2UxOS8zLzMyMzYzMDMy
M2E2NjYxMzQzMzNhMzIzMDNhM2EyZjM0MzYyZDM0MzYyMDNkM2UyMDM1MzQzMTM0
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwImAvpDACAwDQYJKoZIhvcNAQELBQADggEBAHZ4JO+kiyyi
eL1JlemjRpXPl36nArWzl4iOyWVw70qp/HnjL3hUsoAxds643NBw9j4Ly9zaCWSO
AJKs0TiOX57Emw9nKTLghvwNrQ8xX5miWtn9uHNulZw8Zwu+o/9NNOKsW+qAbH+1
6b4m59FPpTV53kLwj+RrRxtepaufRESHJkA2XstrAs24d1iP806yWptnPgiHHf+/
lUv38Be6XWQfUFi6G4tHM5pM16jQBWQmaaKvbqzvOWpF3cTtTiAYVz63iFDRexCG
TzlPUholKIH+vyQIX22jYO3UyDDrF5HXbexkY9x3u13cDAUfalXNMaPLttAuLZfn
xqk0Vz6zMBw=
-----END CERTIFICATE-----