Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a33383a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a33383a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          0DaTo0AXCCjWYerg2ezoj6kFEeVUPxwCnKErMcVokv0=
Subject key identifier:   8A:BD:47:15:8B:AC:3E:CE:09:8B:74:25:2C:B9:43:FB:95:41:9A:F6
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       67B9489BE8C1FCFAAC0F24894993A06EFD6CE764
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a33383a3a2f34362d3436203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:42:00 +0000
ROA not before:           Wed 23 Oct 2024 18:37:00 +0000
ROA not after:            Wed 22 Oct 2025 18:42:00 +0000
asID:                     54148
IP address blocks:        2602:fa43:38::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b9:48:9b:e8:c1:fc:fa:ac:0f:24:89:49:93:a0:6e:fd:6c:e7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:37:00 2024 GMT
            Not After : Oct 22 18:42:00 2025 GMT
        Subject: CN=8ABD47158BAC3ECE098B74252CB943FB95419AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:42:7f:f1:4a:1c:5a:9d:15:a3:6c:5b:2c:
                    76:44:bd:50:2b:d9:93:ba:61:12:3a:34:b2:57:8a:
                    0e:58:9b:ff:4e:a5:ef:92:0d:ca:fc:cd:d9:70:b4:
                    a6:ff:6b:77:a0:03:57:4e:83:c2:3c:63:55:5b:6e:
                    bf:bf:a5:64:4a:bc:36:29:ed:37:95:53:cd:09:5f:
                    f2:f9:b2:58:83:54:6c:21:fd:e6:db:d6:f6:c2:33:
                    c1:d3:61:6e:4e:4e:13:cb:cf:ad:e1:c2:81:a7:a5:
                    ce:c6:1c:a9:ec:14:bd:08:89:fb:ec:11:7f:89:5e:
                    37:ef:e6:c7:64:31:db:73:13:40:60:d0:ca:b3:f2:
                    79:57:f7:84:43:3b:b4:ba:87:6d:7d:da:0b:3e:f8:
                    83:f3:ea:0f:08:26:9c:92:8f:20:5a:d1:b3:28:f0:
                    f9:51:34:94:2c:33:8c:d1:be:6c:6b:b0:5a:dd:9a:
                    04:a1:c4:67:0e:91:fc:23:0b:c0:49:29:15:f3:92:
                    db:17:cb:9a:a8:50:d4:e8:bf:56:26:21:00:59:17:
                    36:f7:50:cb:bc:a8:a3:53:fd:4c:88:d6:6e:99:4a:
                    cd:ac:1b:78:d7:b6:17:11:19:6f:19:63:07:2b:f3:
                    ed:4c:e8:37:e1:b0:2a:02:74:55:23:be:5c:39:12:
                    44:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BD:47:15:8B:AC:3E:CE:09:8B:74:25:2C:B9:43:FB:95:41:9A:F6
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a33383a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:38::/46

    Signature Algorithm: sha256WithRSAEncryption
         83:b5:2b:f4:36:3b:60:2d:3a:e8:ca:4f:4a:8c:c2:e6:01:ae:
         44:27:85:14:01:50:7b:78:f8:20:78:9d:3d:2d:2a:a7:d2:3c:
         74:d3:a2:f7:90:70:3e:33:60:62:8c:f3:e0:df:27:08:ad:ff:
         3c:5a:23:9a:f4:8b:4f:91:f9:6e:c0:a2:27:ac:7b:5f:ed:04:
         20:6c:91:6f:a8:2c:cd:24:53:77:7c:97:75:59:21:4c:44:40:
         70:a9:57:90:6b:f6:6e:18:1e:f8:09:41:af:72:eb:91:28:4e:
         6a:3a:24:7a:27:2d:d3:6f:ca:65:46:0a:89:54:ad:6b:d9:45:
         05:9d:4e:7b:41:1f:08:bd:4e:72:dd:85:70:09:80:58:a6:a9:
         81:6b:1d:94:58:f6:4d:f3:b1:ee:87:79:df:26:b6:2e:86:58:
         7f:f1:82:7b:bf:69:cb:9d:09:cc:09:db:b0:48:25:3c:1a:60:
         67:c1:98:32:17:6b:32:f5:73:0c:6b:36:96:14:fd:98:02:b0:
         88:2f:14:ca:a8:f0:87:19:1e:0f:de:5c:78:68:ca:00:3c:78:
         78:f9:fc:6f:20:ce:70:5b:df:66:10:06:c3:89:45:5e:79:6f:
         48:bc:fc:99:58:69:4c:ad:6f:10:f0:6c:3e:3a:b4:81:16:f6:
         98:5e:75:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----