Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a38313a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a38313a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          m8ThH2Dv93haSeNHQ5GOhaMLvyMTmE7jLVjXSaDb1aY=
Subject key identifier:   89:ED:68:C3:2A:1B:16:C8:F1:BA:A3:B4:0D:7C:70:62:17:51:27:81
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       30E9991FDF6D4B7B88EFB9DBD7409B92F3D92132
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a38313a3a2f34382d3438203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:41:59 +0000
ROA not before:           Wed 23 Oct 2024 18:36:59 +0000
ROA not after:            Wed 22 Oct 2025 18:41:59 +0000
asID:                     54148
IP address blocks:        2602:fa43:81::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e9:99:1f:df:6d:4b:7b:88:ef:b9:db:d7:40:9b:92:f3:d9:21:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:59 2024 GMT
            Not After : Oct 22 18:41:59 2025 GMT
        Subject: CN=89ED68C32A1B16C8F1BAA3B40D7C706217512781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:73:ce:27:c5:76:d2:7b:b7:bc:2e:85:14:c0:
                    e9:0e:05:88:d0:64:78:a1:4e:5b:87:95:b7:cc:49:
                    e2:09:57:6d:ec:99:b2:71:7f:bf:1b:80:be:02:15:
                    9f:48:80:2d:e0:6c:21:24:0c:2a:d7:4f:0f:82:23:
                    28:26:e4:25:c2:2d:ef:31:04:56:7b:61:01:d3:58:
                    23:6e:06:b3:33:99:23:09:04:fd:e3:68:86:3b:72:
                    30:8b:26:67:a1:da:8e:64:bf:ed:10:c3:0e:d9:22:
                    eb:da:3b:13:55:82:d4:71:62:e3:bf:94:5f:05:7d:
                    22:55:fb:f4:d9:10:dc:1a:93:84:d8:0e:d3:3b:7c:
                    5d:05:5c:4a:4f:8f:ed:51:cc:7e:67:8e:cf:e7:e0:
                    49:ff:53:ec:35:7d:ec:5b:8f:e3:34:b5:fa:5e:fe:
                    1f:e4:18:a2:f3:7f:23:22:6c:8f:ac:3a:59:5e:d3:
                    7a:14:59:ca:74:e3:bd:08:72:55:fa:10:17:71:ea:
                    d7:07:aa:ee:49:4a:b0:11:ad:b9:e9:06:47:ea:b8:
                    48:5a:1c:7d:0c:d7:f2:84:cd:be:b3:e1:6c:f8:72:
                    d2:b8:9a:d6:83:32:d6:21:e5:02:3e:77:c9:40:fc:
                    11:b1:9a:86:fd:d4:f3:89:71:df:c6:a9:f4:45:cd:
                    c1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:ED:68:C3:2A:1B:16:C8:F1:BA:A3:B4:0D:7C:70:62:17:51:27:81
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a38313a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:81::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:ff:82:3a:10:03:b4:48:69:c3:35:d3:57:06:b6:ac:90:cc:
         de:eb:42:7f:4e:74:df:01:75:5d:8d:49:c2:b1:d9:72:eb:38:
         3f:24:08:c0:14:01:7d:9b:d8:dc:c8:00:e0:cc:f6:f6:07:53:
         03:c5:12:b3:bc:98:e8:f6:7e:66:62:e1:7b:3a:8f:4e:43:c1:
         6f:a5:6f:7b:f4:60:78:48:d5:7b:56:ce:44:5d:8a:9a:5f:0b:
         aa:f3:11:f1:33:28:f9:76:7b:9a:6c:6b:09:c2:a8:5f:9e:40:
         a8:b4:84:59:68:94:28:01:5e:b8:74:b2:ca:1b:5d:de:da:c4:
         e7:52:5b:4b:9c:e1:b0:94:be:31:1a:eb:0e:49:6e:e7:8f:ec:
         35:ea:34:51:79:7d:5c:28:72:d7:f5:e9:4a:f1:60:7d:86:b6:
         3f:70:a4:cd:0f:74:d9:7d:46:bf:ca:39:64:c9:63:50:76:1d:
         69:4d:29:f7:fe:b6:8b:b0:dc:76:53:82:93:aa:f6:62:de:ce:
         64:0e:9c:ff:ea:82:c9:53:35:20:e3:19:19:91:c4:48:47:60:
         f7:0d:0e:a0:41:03:a8:50:cc:2b:6b:ac:df:1a:4f:d3:e8:5f:
         13:88:18:46:ef:e7:2a:4b:f0:a3:37:81:de:6f:1f:e0:0e:db:
         d3:3e:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----