Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa
File:                     323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa (raw, json)
Hash identifier:          r5nA6cv1mjmjHt/LC0BJxYkax+FHsuEmlM26qVYJDHQ=
Subject key identifier:   27:6D:6F:84:DB:26:60:C4:55:C1:AB:9A:16:BF:F9:35:B9:64:4E:F9
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       242DC8C82ADDC6C5DF57DE2C24E88FCCA88FF6A4
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:41:58 +0000
ROA not before:           Wed 23 Oct 2024 18:36:58 +0000
ROA not after:            Wed 22 Oct 2025 18:41:58 +0000
asID:                     54148
IP address blocks:        2602:fa43:40::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2d:c8:c8:2a:dd:c6:c5:df:57:de:2c:24:e8:8f:cc:a8:8f:f6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:58 2024 GMT
            Not After : Oct 22 18:41:58 2025 GMT
        Subject: CN=276D6F84DB2660C455C1AB9A16BFF935B9644EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:a5:8e:af:3d:b1:38:2f:0d:9a:ba:c6:22:
                    20:a5:31:1e:ff:10:d7:dc:12:c2:38:2c:35:8a:a2:
                    11:f9:c9:7d:38:f1:aa:99:7a:01:ff:d2:61:c9:0d:
                    12:54:93:95:41:7d:61:2d:b8:c0:8d:90:96:dc:56:
                    93:b9:2d:ec:76:4b:04:7b:1c:62:fc:8d:e2:fe:31:
                    93:3a:71:b6:a0:e0:d5:76:56:97:d2:79:2c:a2:cb:
                    22:8d:03:bc:19:4b:fa:aa:be:d5:cb:50:74:c0:a3:
                    08:f2:46:65:25:b2:e8:66:0a:22:3a:bb:a2:e8:df:
                    1e:7e:af:7e:ac:76:8f:03:62:97:06:a8:8b:c6:e5:
                    a5:13:34:81:67:55:05:38:a1:1f:dc:b7:19:a7:09:
                    a2:31:7e:e9:6e:a4:0f:8d:c3:b3:4e:a8:0e:3c:d5:
                    b4:dd:fc:22:70:ed:97:b0:33:c2:80:ae:8b:dc:28:
                    d0:00:66:94:af:c8:3b:ba:90:09:73:0f:97:a6:dc:
                    f4:1a:e2:61:f0:16:b3:d5:8d:29:3d:e9:b1:70:be:
                    cb:40:48:36:8d:4e:d3:2e:2d:00:39:36:e5:e6:6e:
                    7f:49:6c:7d:72:06:cf:28:c5:e5:4d:8f:f8:c7:db:
                    93:36:ef:61:28:7b:68:9a:89:c4:22:ec:d5:2b:79:
                    23:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6D:6F:84:DB:26:60:C4:55:C1:AB:9A:16:BF:F9:35:B9:64:4E:F9
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         0e:ba:2c:a2:f7:46:44:c6:c1:b1:35:c9:f4:59:1c:18:09:9e:
         10:63:31:00:85:ab:d5:a4:c7:86:a7:ae:ac:0a:b4:58:f5:a3:
         6c:9a:07:75:19:72:89:f4:83:47:bc:03:12:df:ef:0f:f6:88:
         61:92:aa:62:b2:92:dd:cc:6b:27:df:e3:80:5b:81:53:a7:33:
         00:35:32:01:61:80:9e:87:ef:47:d2:59:f3:49:bc:80:7b:74:
         44:92:88:81:31:0c:ff:2b:76:5b:7e:06:fa:d4:77:2a:d5:35:
         6c:22:1f:a0:e6:c9:d5:f6:e3:b4:65:d6:e6:6b:22:1e:5e:c0:
         a7:1b:3b:28:29:5d:cc:b1:17:85:09:d1:89:7e:52:75:51:04:
         b5:29:6b:c9:8d:61:bf:8f:b2:ea:28:42:d3:94:6a:91:e8:d7:
         6b:a0:83:fb:99:aa:6f:e3:40:8a:36:2d:fb:b7:01:49:1f:83:
         6f:c1:1c:5b:a9:5a:87:c8:da:8c:23:27:ea:26:b3:f1:46:0b:
         8f:da:8f:66:00:fe:30:04:2d:ec:7c:80:9c:b4:5e:c9:8d:fe:
         f2:fc:e4:f7:05:8b:a2:02:b8:86:3b:10:6a:08:ff:cd:e4:6f:
         0f:0b:d1:2f:97:73:d0:6e:76:fa:67:e1:20:a2:56:89:93:b4:
         9c:39:3d:51
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUJC3IyCrdxsXfV94sJOiPzKiP9qQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTMxNjViZDI1NTg4MWUwMDA3ODA2OGNl
MzJlZmIzZWVhZWFlMDdjZjIwHhcNMjQxMDIzMTgzNjU4WhcNMjUxMDIyMTg0MTU4
WjAzMTEwLwYDVQQDEygyNzZENkY4NERCMjY2MEM0NTVDMUFCOUExNkJGRjkzNUI5
NjQ0RUY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA092ljq89sTgv
DZq6xiIgpTEe/xDX3BLCOCw1iqIR+cl9OPGqmXoB/9JhyQ0SVJOVQX1hLbjAjZCW
3FaTuS3sdksEexxi/I3i/jGTOnG2oODVdlaX0nksossijQO8GUv6qr7Vy1B0wKMI
8kZlJbLoZgoiOrui6N8efq9+rHaPA2KXBqiLxuWlEzSBZ1UFOKEf3LcZpwmiMX7p
bqQPjcOzTqgOPNW03fwicO2XsDPCgK6L3CjQAGaUr8g7upAJcw+Xptz0GuJh8Baz
1Y0pPemxcL7LQEg2jU7TLi0AOTbl5m5/SWx9cgbPKMXlTY/4x9uTNu9hKHtomonE
IuzVK3kj4QIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFCdtb4TbJmDEVcGrmha/+TW5
ZE75MB8GA1UdIwQYMBaAFCyLMjvZW7DURIHLotzOPTq8OjxZMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk4MmY4NWJjLTNkNjktNDhhMi1iOWMz
LTdlZjBhODM5Y2UxOS8zLzJDOEIzMjNCRDk1QkIwRDQ0NDgxQ0JBMkRDQ0UzRDNB
QkMzQTNDNTkuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt
NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lZTFiZGZmOC1kYmI1LTRmMGYtOThlNi1j
OGUxMzI2YmE3OWIvN2VjYWUzMjA0OTMxNjViZDI1NTg4MWUwMDA3ODA2OGNlMzJl
ZmIzZWVhZWFlMDdjZjIuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH
MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzk4MmY4NWJjLTNkNjktNDhhMi1iOWMzLTdlZjBhODM5Y2UxOS8zLzMyMzYzMDMy
M2E2NjYxMzQzMzNhMzQzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDM1MzQzMTM0
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQmAvpDAEAwDQYJKoZIhvcNAQELBQADggEBAA66LKL3RkTG
wbE1yfRZHBgJnhBjMQCFq9Wkx4anrqwKtFj1o2yaB3UZcon0g0e8AxLf7w/2iGGS
qmKykt3Mayff44BbgVOnMwA1MgFhgJ6H70fSWfNJvIB7dESSiIExDP8rdlt+BvrU
dyrVNWwiH6DmydX247Rl1uZrIh5ewKcbOygpXcyxF4UJ0Yl+UnVRBLUpa8mNYb+P
suooQtOUapHo12ugg/uZqm/jQIo2Lfu3AUkfg2/BHFupWofI2owjJ+oms/FGC4/a
j2YA/jAELex8gJy0XsmN/vL85PcFi6ICuIY7EGoI/83kbw8L0S+Xc9Budvpn4SCi
VomTtJw5PVE=
-----END CERTIFICATE-----