Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          08BMZO7nNUtQ5yK9HVYRhmU8pf+ua9Sw8l9buiCS46Q=
Subject key identifier:   77:87:B0:D7:40:74:77:60:9B:81:62:06:89:E8:4B:D1:AD:D3:11:93
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       5D1182666573513066196E91F9AA3946D40D1D34
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:41:59 +0000
ROA not before:           Wed 23 Oct 2024 18:36:59 +0000
ROA not after:            Wed 22 Oct 2025 18:41:59 +0000
asID:                     54148
IP address blocks:        2602:fa43:90::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:11:82:66:65:73:51:30:66:19:6e:91:f9:aa:39:46:d4:0d:1d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:59 2024 GMT
            Not After : Oct 22 18:41:59 2025 GMT
        Subject: CN=7787B0D7407477609B81620689E84BD1ADD31193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:88:57:79:ab:09:7d:e5:60:a0:8f:0e:41:
                    23:72:c7:a5:ad:66:1f:9d:72:e5:39:09:f7:7b:b4:
                    e0:0e:86:8e:40:bd:f8:ad:5b:ab:1d:8c:a2:89:1f:
                    1a:f9:a7:4f:84:1f:41:b5:2d:4a:55:f0:ea:24:c6:
                    f9:80:63:07:1e:1d:0b:2e:2e:d2:a4:0f:44:2d:79:
                    61:df:d7:af:32:0a:d3:2e:60:6e:dd:2b:3a:27:37:
                    52:1a:9b:7a:87:8c:b8:e0:8b:e5:71:5d:34:40:b7:
                    3d:54:08:0a:b6:25:48:a4:07:43:e4:20:f5:91:c4:
                    03:fa:c6:f1:9f:6b:e2:e4:bd:19:5e:79:3b:93:30:
                    f0:00:e1:d4:9c:11:c6:33:1a:de:07:d3:74:84:5d:
                    14:80:99:65:ca:66:7c:cd:71:65:60:aa:67:39:a9:
                    64:d0:4e:01:83:cb:e4:4d:81:57:f8:ee:c1:19:4e:
                    98:ae:d4:d6:74:89:03:77:0e:ef:7d:24:f1:f8:15:
                    78:d7:78:67:22:47:53:7a:f3:92:af:da:d6:47:a1:
                    a0:11:a6:ce:fd:28:64:98:14:5b:92:9c:b9:29:35:
                    6f:9d:b3:b7:f2:7d:14:51:cc:20:c5:e5:5b:f4:8d:
                    52:ca:34:a7:dc:49:2a:66:bf:71:82:e7:05:ac:bf:
                    f4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:87:B0:D7:40:74:77:60:9B:81:62:06:89:E8:4B:D1:AD:D3:11:93
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:90::/46

    Signature Algorithm: sha256WithRSAEncryption
         68:33:d6:08:9e:4a:40:c5:87:3f:34:73:6b:e6:4f:51:71:34:
         91:32:eb:38:38:c7:bb:bd:31:54:9d:5a:3d:43:77:fd:0b:1f:
         7e:f6:de:c2:4b:34:55:96:0c:0c:bf:c7:e7:87:0f:4b:58:5f:
         a2:e7:7b:c9:91:b1:18:78:b9:84:a3:6d:05:6f:69:bd:55:c9:
         da:fc:45:90:27:01:b4:b7:f0:a9:49:52:7e:5e:30:95:c4:a3:
         6c:31:df:cb:0a:c5:a6:51:53:f6:c2:ee:6d:7f:18:d0:c5:9f:
         b4:28:ef:73:86:60:ab:24:29:4b:76:85:38:a6:e0:92:23:2e:
         e8:88:af:77:d6:32:d9:5c:71:d8:89:e7:d0:5a:91:25:30:1a:
         3e:68:5a:a6:30:ff:ee:1c:66:d1:6d:37:78:f2:c2:cf:5f:26:
         f3:25:1b:93:d5:2c:b5:16:c2:8e:3f:cd:db:78:19:94:d7:0a:
         da:2a:57:48:b9:3e:11:f0:13:33:44:f1:66:96:a0:ee:90:e0:
         d3:ec:76:49:da:ab:da:b9:84:ec:cb:2d:ea:4d:ee:fd:c4:37:
         33:ff:7b:55:20:f0:76:ea:3a:9a:c1:4c:44:37:92:32:ad:fc:
         b5:92:a5:24:b2:a0:72:f2:b9:f7:4b:f7:1c:d7:b8:2f:33:7e:
         e7:56:da:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----