Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a38303a3a2f34342d3434203d3e20323030333531.roa
File:                     323630323a666134333a38303a3a2f34342d3434203d3e20323030333531.roa (raw, json)
Hash identifier:          TVniZ0opuOGfDklwZLNh3XfZZuJGojm2Mnbsj4qL8x8=
Subject key identifier:   E3:BB:83:16:5B:69:39:FE:90:0E:CF:96:9C:2A:5B:57:2A:01:B2:67
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       01DAAC5481EE1D7E25D16BDCD9AE08C5AC650415
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a38303a3a2f34342d3434203d3e20323030333531.roa
Signing time:             Wed 23 Oct 2024 18:41:59 +0000
ROA not before:           Wed 23 Oct 2024 18:36:59 +0000
ROA not after:            Wed 22 Oct 2025 18:41:59 +0000
asID:                     200351
IP address blocks:        2602:fa43:80::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:da:ac:54:81:ee:1d:7e:25:d1:6b:dc:d9:ae:08:c5:ac:65:04:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:59 2024 GMT
            Not After : Oct 22 18:41:59 2025 GMT
        Subject: CN=E3BB83165B6939FE900ECF969C2A5B572A01B267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c9:74:fc:c8:bd:c4:32:da:65:37:d5:47:a5:
                    14:c6:0c:53:93:db:11:25:61:8b:11:72:d7:44:2b:
                    d7:f4:48:2f:50:01:e9:2c:75:1f:1c:ee:ff:98:88:
                    ad:7f:82:3a:80:cc:22:22:31:20:2c:1c:0d:11:bd:
                    0f:75:79:4b:17:82:6e:7a:04:24:d3:61:7a:39:cf:
                    e6:5b:8d:93:15:1e:24:70:fc:51:c4:bf:97:7c:ea:
                    78:46:8b:49:2a:27:8e:7f:4b:e2:dc:26:38:4c:f3:
                    a2:1f:c0:17:70:2d:3e:55:00:4a:43:e8:19:64:5f:
                    1b:7d:55:e2:f7:ca:d2:fc:4e:47:fd:17:d8:da:1d:
                    ff:23:98:71:0e:92:61:7a:c9:ad:f2:d6:25:84:47:
                    a9:29:c7:d5:31:77:c6:62:4a:5f:9f:6a:c0:2c:ae:
                    a8:84:42:e4:52:f6:f0:54:cb:cc:2c:6b:7f:ae:a4:
                    42:29:bf:45:1f:17:bc:ef:2f:37:5d:ec:ac:76:30:
                    a2:05:2a:54:96:0d:0c:27:56:9c:9a:72:03:36:35:
                    4a:19:91:f1:7b:76:81:13:60:d8:a0:6a:ce:2c:b6:
                    6a:82:f1:24:50:56:33:20:5a:ec:f9:ae:83:14:b5:
                    84:13:b5:f0:27:7b:fe:4a:17:5b:32:7a:90:6d:17:
                    54:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BB:83:16:5B:69:39:FE:90:0E:CF:96:9C:2A:5B:57:2A:01:B2:67
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a38303a3a2f34342d3434203d3e20323030333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:f0:b6:82:1e:ae:1d:30:20:37:ee:8d:15:b7:31:b4:8b:02:
         2b:a8:75:30:5d:6a:cc:86:12:2b:c8:89:c7:f9:4a:f2:a7:cc:
         fd:72:ea:46:d8:d6:37:6c:44:a5:24:ab:59:24:55:fb:66:e2:
         f4:7d:0a:88:2a:5d:be:5b:f3:74:98:0a:2d:9e:56:c3:40:3c:
         76:58:1d:db:5f:8f:9f:96:2a:ee:b3:ca:ef:50:de:97:e9:d9:
         f3:c5:07:a3:52:a7:e2:97:ad:51:90:ac:3c:7f:6f:b3:de:aa:
         ce:46:58:c6:6e:7a:bd:16:2f:95:e6:29:d0:1d:80:3c:9b:fb:
         d7:38:72:46:c4:09:27:c9:51:4a:cb:3f:44:90:28:68:12:18:
         c4:5a:15:6b:39:51:b6:bc:d8:8d:8a:e9:bd:fb:f5:49:44:85:
         04:1f:c2:c8:ec:b6:a3:09:97:98:74:ad:e5:4a:8d:11:b1:54:
         a7:45:90:94:b2:f9:5d:11:bf:9e:5d:72:e9:39:da:de:91:7c:
         fb:e2:5a:7a:97:84:74:a3:a4:4c:f7:55:2e:5a:0e:3a:32:d6:
         0a:b2:97:ee:46:b3:5e:82:c7:cf:51:c6:4c:88:8a:65:ae:8d:
         71:95:c4:9a:f8:99:b8:5e:7f:bd:ee:18:47:c1:34:78:f0:d2:
         19:81:c3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----