Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa
File:                     323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa (raw, json)
Hash identifier:          a5LfAq3h3waE9DKcYKpnPnj6Usx+IRJg7eqJq6GcIXY=
Subject key identifier:   0A:88:B5:7E:8E:C2:8C:54:ED:D6:BA:44:F6:98:80:41:B5:A9:23:23
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       3F1C7B3CD2D29C11FF1A260B452BC923874D6AB1
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:41:55 +0000
ROA not before:           Wed 23 Oct 2024 18:36:55 +0000
ROA not after:            Wed 22 Oct 2025 18:41:55 +0000
asID:                     54148
IP address blocks:        2602:fa43:80::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1c:7b:3c:d2:d2:9c:11:ff:1a:26:0b:45:2b:c9:23:87:4d:6a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:55 2024 GMT
            Not After : Oct 22 18:41:55 2025 GMT
        Subject: CN=0A88B57E8EC28C54EDD6BA44F6988041B5A92323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:93:20:fe:12:10:1b:7a:c0:c8:72:27:d6:
                    59:58:22:8e:c3:29:22:07:ca:78:4b:af:bd:5f:77:
                    db:48:64:24:bd:93:ef:70:3a:f3:4d:6a:97:a5:da:
                    71:8e:eb:50:d8:82:df:f8:22:04:a3:a1:3a:91:d6:
                    ec:83:96:f4:b7:c7:aa:bf:a9:c9:df:f3:5e:64:e6:
                    f7:0c:00:6a:e4:5c:78:93:96:e5:d7:a1:6f:93:cc:
                    38:4d:70:00:8c:3c:c6:d4:8c:c5:d2:d6:85:b0:70:
                    86:99:f6:d3:ca:f5:48:35:d8:51:bd:58:fa:18:79:
                    cb:f6:9d:20:89:21:10:08:9a:d4:2d:60:b0:36:1d:
                    15:d8:41:38:b9:3c:72:c0:4f:8d:1f:ca:bc:7a:6a:
                    8b:97:9c:e6:cf:04:51:5b:06:9e:a4:82:9d:0d:d7:
                    39:5d:13:ee:30:cb:db:d4:9c:6d:6a:1e:1b:be:e2:
                    43:23:39:b1:b4:55:02:bb:ef:a7:4f:cb:36:c8:bc:
                    10:45:9d:dc:33:af:07:50:fc:01:ba:2b:b6:96:75:
                    8f:0e:eb:81:1f:fb:40:07:1b:03:20:2e:fc:4e:39:
                    d8:03:f7:59:e9:d1:54:12:53:23:fd:3f:89:74:b2:
                    7c:3f:9d:34:62:d4:37:3a:db:98:8e:5b:f5:c5:0e:
                    07:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:88:B5:7E:8E:C2:8C:54:ED:D6:BA:44:F6:98:80:41:B5:A9:23:23
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:14:0f:6c:a9:f8:54:68:0c:4f:32:7d:72:ce:ad:64:fb:d3:
         52:cc:62:70:ad:85:3a:97:6b:24:47:98:ec:3e:fe:87:eb:cc:
         29:cc:a0:dd:6c:fb:97:96:83:52:e9:a3:34:23:15:51:f9:f9:
         68:d5:86:e3:bc:62:21:69:0f:9d:66:73:22:37:21:16:5d:d7:
         06:e6:01:3f:94:eb:cb:f0:8e:46:53:25:7e:27:a4:9a:49:a9:
         e1:f9:6e:4b:27:ad:f1:43:c2:08:b8:c4:85:e3:c9:8d:b8:a8:
         1c:fc:40:e4:db:02:0f:94:9c:e3:1d:3d:b6:c1:34:40:4c:b2:
         95:af:cb:3f:2d:63:20:16:13:24:4e:bd:86:05:cf:5e:d8:bd:
         b0:dd:9e:ca:c8:5d:ac:3d:33:27:17:cd:d6:82:bb:13:b3:92:
         2a:0e:07:6e:b4:b9:27:7c:62:f6:84:82:1f:d2:33:9b:f1:9e:
         c2:ab:97:3b:03:74:6f:0c:8b:2a:78:41:53:7c:24:6f:49:d1:
         44:e5:df:6e:b2:ee:1a:a8:6e:81:74:0a:16:0a:99:ed:da:df:
         62:7f:6c:b3:92:29:28:1f:94:4d:22:d5:e9:e0:31:08:94:81:
         38:59:d6:9d:00:0c:d4:8a:a3:1e:1e:7b:76:26:61:7b:43:8a:
         4c:f2:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----