Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a323a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a323a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          yKXOuF35shyZi4jlHkI2HmM+zqfGzJ4KU+D4fTquaTI=
Subject key identifier:   5F:9A:70:1F:65:E8:27:47:E1:53:06:9A:44:2B:C9:91:6A:E7:68:72
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       204F4C3042510CA4FCFF9E2D6C833C51A9FC3FB7
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a323a3a2f34382d3438203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:41:57 +0000
ROA not before:           Wed 23 Oct 2024 18:36:57 +0000
ROA not after:            Wed 22 Oct 2025 18:41:57 +0000
asID:                     54148
IP address blocks:        2602:fa43:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4f:4c:30:42:51:0c:a4:fc:ff:9e:2d:6c:83:3c:51:a9:fc:3f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:57 2024 GMT
            Not After : Oct 22 18:41:57 2025 GMT
        Subject: CN=5F9A701F65E82747E153069A442BC9916AE76872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8b:95:5e:98:25:84:0d:17:c8:44:05:23:04:
                    67:ee:6e:07:02:bc:a5:3b:0b:5a:e1:55:b1:3c:06:
                    35:89:f8:05:1a:58:49:12:e3:47:1a:61:31:6e:c1:
                    c6:8a:70:15:c1:f3:e6:5a:c4:08:25:77:02:90:04:
                    65:49:28:cb:cc:f0:35:42:b4:89:8e:05:89:28:37:
                    ab:c3:6c:39:cb:14:d7:2e:d4:a7:40:38:d8:cb:33:
                    b4:af:bd:8f:48:b5:fc:fd:d1:18:ef:d8:b4:f9:ae:
                    18:99:3e:bd:70:fb:3b:fa:09:b1:3e:78:37:0b:51:
                    20:44:31:b4:65:98:40:1d:91:dc:6a:d8:84:d5:56:
                    f5:bc:fa:3d:85:a0:09:bf:06:45:3c:89:92:23:65:
                    75:f5:9d:ec:98:68:fa:45:16:ac:be:75:af:83:b8:
                    af:10:6d:2a:ac:0b:01:9b:71:24:1b:95:fb:8a:61:
                    e8:e1:11:f0:5c:41:07:40:d0:31:11:48:10:ce:b1:
                    ec:52:3f:80:64:62:f0:d7:38:9c:6d:08:75:aa:d3:
                    3b:1b:c4:0f:93:94:c2:4b:58:37:3b:0e:07:2a:5f:
                    31:14:e5:8e:3b:86:41:1d:1f:28:a9:60:24:5d:2a:
                    12:22:56:a6:32:d6:e5:27:fe:ba:00:af:a0:fc:32:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9A:70:1F:65:E8:27:47:E1:53:06:9A:44:2B:C9:91:6A:E7:68:72
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a323a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:91:32:b9:e1:6a:cd:ca:39:42:7d:20:72:9b:8f:e9:c1:01:
         28:be:93:e6:4c:40:d0:16:b4:c6:d7:7b:f5:76:59:88:78:89:
         67:ae:81:ee:d0:9a:b5:a0:46:f4:f3:49:d4:a7:f4:a6:8b:91:
         e5:a1:74:c7:9b:57:66:50:1b:31:99:38:a2:4b:19:dc:6b:f7:
         55:7e:6f:b3:3f:25:47:d4:6c:95:88:ea:c8:c2:74:2c:f2:6d:
         5e:dd:d5:73:3b:41:08:7a:f5:f1:fd:aa:6f:c9:d0:63:2b:6e:
         de:64:ca:4b:d2:cc:9c:4b:b0:7e:b3:eb:dc:fe:d9:7e:dd:cd:
         f8:af:fd:bd:5c:a4:85:ad:f4:ba:06:76:53:c1:79:8d:ee:b7:
         5a:3d:70:28:94:ac:c7:ab:56:be:49:06:22:89:0c:d8:92:eb:
         0d:00:4a:39:6e:f8:fe:07:58:1a:49:ef:b0:92:4f:8b:1a:68:
         0b:6f:4b:36:aa:cb:d2:dc:6d:23:81:32:1d:06:11:ed:36:96:
         a3:ab:87:f0:9f:50:af:b9:e2:3c:a2:94:a7:b9:69:9e:01:94:
         c2:b2:ae:2e:c4:9f:74:ff:e1:6a:38:12:5b:0d:b1:5e:0d:8d:
         74:23:16:5c:70:03:06:8f:a1:ce:3b:cc:5b:88:3f:6e:6d:a6:
         17:b8:c9:8b
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgIUIE9MMEJRDKT8/54tbIM8Uan8P7cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTMxNjViZDI1NTg4MWUwMDA3ODA2OGNl
MzJlZmIzZWVhZWFlMDdjZjIwHhcNMjQxMDIzMTgzNjU3WhcNMjUxMDIyMTg0MTU3
WjAzMTEwLwYDVQQDEyg1RjlBNzAxRjY1RTgyNzQ3RTE1MzA2OUE0NDJCQzk5MTZB
RTc2ODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4uVXpglhA0X
yEQFIwRn7m4HArylOwta4VWxPAY1ifgFGlhJEuNHGmExbsHGinAVwfPmWsQIJXcC
kARlSSjLzPA1QrSJjgWJKDerw2w5yxTXLtSnQDjYyzO0r72PSLX8/dEY79i0+a4Y
mT69cPs7+gmxPng3C1EgRDG0ZZhAHZHcatiE1Vb1vPo9haAJvwZFPImSI2V19Z3s
mGj6RRasvnWvg7ivEG0qrAsBm3EkG5X7imHo4RHwXEEHQNAxEUgQzrHsUj+AZGLw
1zicbQh1qtM7G8QPk5TCS1g3Ow4HKl8xFOWOO4ZBHR8oqWAkXSoSIlamMtblJ/66
AK+g/DLq9QIDAQABo4IC0jCCAs4wHQYDVR0OBBYEFF+acB9l6CdH4VMGmkQryZFq
52hyMB8GA1UdIwQYMBaAFCyLMjvZW7DURIHLotzOPTq8OjxZMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk4MmY4NWJjLTNkNjktNDhhMi1iOWMz
LTdlZjBhODM5Y2UxOS8zLzJDOEIzMjNCRDk1QkIwRDQ0NDgxQ0JBMkRDQ0UzRDNB
QkMzQTNDNTkuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt
NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lZTFiZGZmOC1kYmI1LTRmMGYtOThlNi1j
OGUxMzI2YmE3OWIvN2VjYWUzMjA0OTMxNjViZDI1NTg4MWUwMDA3ODA2OGNlMzJl
ZmIzZWVhZWFlMDdjZjIuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYIKwYBBQUH
MAuGgY9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzk4MmY4NWJjLTNkNjktNDhhMi1iOWMzLTdlZjBhODM5Y2UxOS8zLzMyMzYzMDMy
M2E2NjYxMzQzMzNhMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM0MzEzNDM4
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAJgL6QwACMA0GCSqGSIb3DQEBCwUAA4IBAQBJkTK54WrNyjlC
fSBym4/pwQEovpPmTEDQFrTG13v1dlmIeIlnroHu0Jq1oEb080nUp/Smi5HloXTH
m1dmUBsxmTiiSxnca/dVfm+zPyVH1GyViOrIwnQs8m1e3dVzO0EIevXx/apvydBj
K27eZMpL0sycS7B+s+vc/tl+3c34r/29XKSFrfS6BnZTwXmN7rdaPXAolKzHq1a+
SQYiiQzYkusNAEo5bvj+B1gaSe+wkk+LGmgLb0s2qsvS3G0jgTIdBhHtNpajq4fw
n1CvueI8opSnuWmeAZTCsq4uxJ90/+FqOBJbDbFeDY10IxZccAMGj6HOO8xbiD9u
baYXuMmL
-----END CERTIFICATE-----