Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a38323a3a2f34382d3438203d3e20323030333531.roa
File:                     323630323a666134333a38323a3a2f34382d3438203d3e20323030333531.roa (raw, json)
Hash identifier:          4AqpLa7+PaW9YR3/fU/Sd/8R61vY7Tt2r3bPmQ75E6g=
Subject key identifier:   08:5F:5D:4A:A2:7D:F5:EE:D7:C8:91:79:05:34:77:15:38:96:BD:34
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       260F14F894A0A46EABC59C8EDFF0E7EF7A6B5BCA
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a38323a3a2f34382d3438203d3e20323030333531.roa
Signing time:             Wed 23 Oct 2024 18:42:00 +0000
ROA not before:           Wed 23 Oct 2024 18:37:00 +0000
ROA not after:            Wed 22 Oct 2025 18:42:00 +0000
asID:                     200351
IP address blocks:        2602:fa43:82::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0f:14:f8:94:a0:a4:6e:ab:c5:9c:8e:df:f0:e7:ef:7a:6b:5b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:37:00 2024 GMT
            Not After : Oct 22 18:42:00 2025 GMT
        Subject: CN=085F5D4AA27DF5EED7C89179053477153896BD34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:85:7f:e1:15:62:a0:86:55:46:b3:a8:8b:
                    89:9b:b9:ce:8a:b1:0e:f9:1a:af:89:de:c6:38:71:
                    ef:da:b1:5c:a1:6d:a7:8c:81:0e:ee:30:64:bc:ce:
                    bd:81:f2:d3:be:be:84:c2:53:8e:58:7a:8a:a8:bf:
                    20:2b:53:e5:10:9f:d1:05:d7:e4:0f:e6:94:0a:6d:
                    fc:60:cc:c3:bb:f4:01:db:44:49:ab:e1:82:8b:16:
                    71:03:a0:36:2b:fa:11:c8:c1:0f:f4:62:35:e4:21:
                    99:9d:f6:5e:62:bd:b9:c4:73:17:e6:8f:1d:df:15:
                    dc:d1:0d:6f:9b:49:b9:59:a6:94:eb:ec:b1:cc:4f:
                    12:71:5e:1a:93:16:cc:b7:fd:3a:80:f4:60:c0:6d:
                    9f:ec:2f:5c:ab:da:5f:fc:c5:03:b6:e6:79:4a:65:
                    82:e6:5a:8b:11:f4:2c:57:45:87:b9:5b:4e:d4:20:
                    77:61:51:a2:14:14:2e:76:8f:bd:c9:5f:b0:b1:11:
                    98:09:c0:34:9e:4b:11:a8:cf:f4:b3:68:00:14:c3:
                    a2:a7:a8:74:bb:29:9f:73:ea:f4:13:8e:8b:52:12:
                    fc:35:f1:df:e4:fb:99:79:d6:c1:1f:97:e3:62:21:
                    26:a8:45:27:1a:84:98:27:b8:3c:cc:4f:d6:f3:e0:
                    c5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5F:5D:4A:A2:7D:F5:EE:D7:C8:91:79:05:34:77:15:38:96:BD:34
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a38323a3a2f34382d3438203d3e20323030333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:82::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:61:08:dc:ee:29:36:2b:2e:cc:94:bf:5e:3c:35:d7:e1:a2:
         55:3e:2b:ad:cb:f0:65:89:0e:08:de:fb:88:16:58:07:01:00:
         92:0c:de:a9:a6:1c:b8:9c:0b:49:eb:9d:05:f4:93:f5:8b:eb:
         f0:8b:cf:7f:ed:1e:04:9c:9a:cb:74:2f:8c:de:64:2e:9f:50:
         d1:2d:03:b5:f0:03:f9:a4:8d:f6:07:0a:52:fb:ac:c2:e1:63:
         b8:11:06:cb:4e:b4:9f:b5:a1:63:a0:58:b6:d0:f1:a9:d5:86:
         31:ed:1b:7a:f8:d4:a9:ac:fa:5f:14:a3:71:b4:b8:00:fd:93:
         05:d7:f0:0a:85:1c:d7:44:4f:91:5c:cd:cd:44:81:e9:35:65:
         cf:f4:bd:ae:35:c7:22:4b:a6:01:0c:9a:14:a0:42:37:bc:33:
         2c:ce:a4:98:b7:3a:32:e1:dd:e6:79:e9:47:7a:84:cb:68:01:
         19:06:27:8e:29:3d:6a:50:34:79:da:b7:ac:bc:91:cf:31:d3:
         a1:f5:fc:dd:52:03:dd:55:a0:f8:6a:2b:e9:02:98:c5:d0:f5:
         2f:58:ef:4f:21:04:40:4c:28:31:06:94:17:9e:e8:99:c3:7f:
         68:6b:97:a8:ce:d5:29:5f:d9:83:58:48:f1:f4:04:fb:19:e9:
         10:aa:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----