Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a39343a3a2f34362d3436203d3e20323030333531.roa
File:                     323630323a666134333a39343a3a2f34362d3436203d3e20323030333531.roa (raw, json)
Hash identifier:          Wzm1dhARjsNt4DYTtm/i2ZQuD2z1DzrldZMwh/+pqpk=
Subject key identifier:   D4:9D:9C:22:CA:3E:21:98:9B:AE:9D:D3:3E:54:A4:35:B1:18:E4:E6
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       5A764AA2268CB505C237C7CCFF1D32CF4424F2EE
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a39343a3a2f34362d3436203d3e20323030333531.roa
Signing time:             Wed 23 Oct 2024 18:41:58 +0000
ROA not before:           Wed 23 Oct 2024 18:36:58 +0000
ROA not after:            Wed 22 Oct 2025 18:41:58 +0000
asID:                     200351
IP address blocks:        2602:fa43:94::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:76:4a:a2:26:8c:b5:05:c2:37:c7:cc:ff:1d:32:cf:44:24:f2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:58 2024 GMT
            Not After : Oct 22 18:41:58 2025 GMT
        Subject: CN=D49D9C22CA3E21989BAE9DD33E54A435B118E4E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:78:f4:c9:da:5e:cb:28:41:df:3c:ee:ed:
                    15:37:97:4b:ba:e3:de:b0:dd:a1:f9:3b:f8:a9:3a:
                    fb:5e:13:ff:fe:fb:1b:57:25:98:55:e4:07:85:47:
                    fb:38:4a:10:7e:62:9e:f2:27:7a:d0:59:4c:78:bc:
                    cd:45:6b:5d:9b:23:2b:51:b0:e2:d5:70:af:df:17:
                    d8:98:79:93:98:f0:ed:c8:f4:26:7a:7f:ae:84:d5:
                    77:a4:1b:90:b3:58:79:64:7d:a4:6f:1d:4e:cd:d7:
                    28:4c:da:3a:a2:d0:da:08:f4:db:15:f4:e0:e2:a6:
                    f1:22:15:25:4e:e4:5a:cb:38:4a:c0:cd:43:bb:6b:
                    11:b6:be:7a:67:38:f2:b6:fd:fd:31:42:33:57:da:
                    ca:89:93:fc:d7:db:f4:68:7a:e0:ff:b9:ff:d0:e5:
                    08:6a:99:6c:e5:24:f5:ce:df:c5:76:3c:65:33:4f:
                    3b:52:b4:1f:5d:c4:f7:ba:76:43:eb:a9:69:3d:d6:
                    77:c2:f6:2d:c4:68:4d:57:74:55:44:46:6e:f0:bd:
                    38:12:1a:14:d5:a2:4e:21:78:07:51:1f:2b:80:08:
                    5f:55:d6:99:36:37:c0:97:ad:ca:c5:b5:fd:d5:af:
                    fc:29:46:ec:ff:31:a3:df:d3:10:ae:f5:4a:2b:02:
                    15:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9D:9C:22:CA:3E:21:98:9B:AE:9D:D3:3E:54:A4:35:B1:18:E4:E6
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a39343a3a2f34362d3436203d3e20323030333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:94::/46

    Signature Algorithm: sha256WithRSAEncryption
         22:a4:a8:fd:8b:4d:47:48:4c:b5:9f:1a:b4:a3:98:fd:84:10:
         bc:c8:05:d9:a8:f1:c1:1c:62:86:23:41:7d:3e:56:83:fe:79:
         38:49:87:56:2e:6a:25:ad:78:5e:70:46:5a:0d:2b:56:7e:17:
         77:e3:b5:be:a3:0a:e8:d0:77:24:4b:80:4b:6c:39:e6:8b:2b:
         54:ac:db:db:36:ed:d8:dc:13:03:64:8b:13:29:1f:2b:32:d2:
         67:1e:c2:78:cc:82:e9:c8:e9:38:95:1b:c9:39:c3:7e:00:8c:
         55:63:03:2c:41:64:ee:e6:f6:d5:67:75:dc:32:a9:1b:26:57:
         45:be:2a:2d:89:e7:48:23:b2:a5:ad:ef:60:ab:52:e6:3e:57:
         1c:f7:1b:10:64:2d:e8:a8:9d:50:9f:1e:84:30:32:5e:61:fb:
         98:bd:f9:8f:ed:8e:d5:56:f7:92:6d:09:fb:ef:ab:68:1b:36:
         f6:cb:aa:86:4b:28:74:14:20:18:a6:9f:45:ed:06:38:4c:e5:
         43:2f:41:22:06:9b:fc:6c:e3:27:70:91:b8:0a:b1:b6:38:7a:
         97:8e:bf:9e:e3:21:62:a9:af:b4:a9:d4:74:7d:34:ee:e6:5a:
         0a:0a:24:da:45:0c:52:6c:6c:8c:64:82:07:5b:1c:77:88:d1:
         4b:4c:52:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----