Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          Q7RERNN07ey/ytn4Zi1Kg3VCPZfD9EiroMfLlbOCYsI=
Subject key identifier:   52:07:6C:88:E6:63:1C:75:7D:00:88:98:CC:45:2C:C4:49:E1:04:C5
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       450AACDB51A9E4EE48A5EF58826A06F3F11997F7
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:41:56 +0000
ROA not before:           Wed 23 Oct 2024 18:36:56 +0000
ROA not after:            Wed 22 Oct 2025 18:41:56 +0000
asID:                     54148
IP address blocks:        2602:fa43:24::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0a:ac:db:51:a9:e4:ee:48:a5:ef:58:82:6a:06:f3:f1:19:97:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:56 2024 GMT
            Not After : Oct 22 18:41:56 2025 GMT
        Subject: CN=52076C88E6631C757D008898CC452CC449E104C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ef:eb:8f:77:44:60:dd:e5:ca:cd:a6:3c:d4:
                    2a:68:ea:6a:72:5e:cc:cf:38:43:80:75:62:a7:68:
                    2d:f5:51:33:67:84:4c:98:ae:a2:73:dc:3c:de:fa:
                    a1:83:ab:2a:a8:55:be:7b:87:dc:08:92:77:e7:72:
                    92:68:30:ea:aa:82:a0:8c:4f:2c:31:0d:14:d0:9a:
                    74:0f:c4:19:2e:f9:2e:85:0a:83:08:ee:44:84:d2:
                    20:97:05:82:ef:ea:32:8b:8a:95:4f:99:fa:2c:fe:
                    0d:97:a4:04:30:75:d4:ec:a3:85:ef:c7:5d:55:b1:
                    66:69:e0:35:d5:07:4e:a5:f1:22:72:48:01:73:04:
                    7e:27:7b:f0:54:15:40:45:2a:c1:5c:bc:08:b4:ff:
                    dc:31:f9:3e:e9:d6:5d:17:da:9e:f7:6c:09:93:0c:
                    e2:42:b5:30:76:dd:e5:d4:2b:5d:8f:0a:9b:20:5d:
                    03:ee:be:8b:68:4a:ec:20:f0:67:0c:66:59:a1:4c:
                    fe:4d:a1:fd:f3:f1:38:7e:ed:20:1b:81:9c:e6:1d:
                    c9:34:8d:4b:d1:f6:eb:fb:df:24:cb:ef:76:d8:c2:
                    ab:80:d2:97:35:cd:ff:b4:1e:ad:16:1b:89:03:0d:
                    96:4b:de:ef:fa:91:8d:4e:81:7c:98:e9:75:f1:dd:
                    ac:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:07:6C:88:E6:63:1C:75:7D:00:88:98:CC:45:2C:C4:49:E1:04:C5
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:24::/46

    Signature Algorithm: sha256WithRSAEncryption
         83:6f:f3:d3:68:b1:be:05:4b:6b:a5:2f:70:24:79:48:5d:7b:
         0e:e4:8e:36:e2:35:7c:6d:5c:fc:92:09:33:18:b2:e0:31:a2:
         d0:6d:a2:39:b1:0a:d7:d8:88:10:74:42:36:82:fa:8c:76:89:
         d8:3a:30:2e:5b:cf:73:17:86:b6:d6:bb:26:d0:0c:90:3d:32:
         51:46:6d:f0:ba:21:19:28:3b:e6:50:b1:4d:83:3b:3b:74:47:
         ee:6b:4d:0f:80:05:66:01:2f:f9:a6:bd:d2:1d:e9:28:e9:03:
         df:3b:9a:06:4b:a1:82:dd:b0:2c:8b:5e:62:86:a7:9c:2d:13:
         0c:95:e8:8f:98:38:3a:55:fa:47:e8:cc:f1:9f:09:56:d8:d8:
         a6:07:bb:36:fc:1d:5e:86:95:76:10:d9:f1:5b:c2:87:b8:70:
         3f:bf:c9:34:55:c4:d7:98:98:5a:d9:1d:30:99:a6:83:01:00:
         ba:fb:83:4e:e8:15:e4:c2:2e:82:2c:2a:8d:86:f2:f7:4c:7b:
         80:45:03:27:90:90:3b:4e:c3:71:7c:b2:9c:3e:fd:72:fb:39:
         01:62:22:63:94:1b:c1:eb:99:fe:aa:08:c7:37:88:38:51:07:
         1a:97:3a:71:fe:2b:f0:1d:23:c9:44:ce:19:29:42:99:df:bc:
         f3:49:d6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----