Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a39343a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a39343a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          f4Ya9BplKVon3QwViq3FZWMaseUF+pD7jTOVJ5q/sxo=
Subject key identifier:   39:FB:18:48:48:BB:CD:0E:17:4F:CE:85:EE:9C:F2:09:93:05:73:A3
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       3CD74BC5EFA832B427751C6A5153E6FC9D3FCD9C
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a39343a3a2f34362d3436203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:48:03 +0000
ROA not before:           Wed 23 Oct 2024 18:43:03 +0000
ROA not after:            Wed 22 Oct 2025 18:48:03 +0000
asID:                     54148
IP address blocks:        2602:fa43:94::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d7:4b:c5:ef:a8:32:b4:27:75:1c:6a:51:53:e6:fc:9d:3f:cd:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:43:03 2024 GMT
            Not After : Oct 22 18:48:03 2025 GMT
        Subject: CN=39FB184848BBCD0E174FCE85EE9CF209930573A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:5f:99:3c:34:d6:07:6f:80:78:65:73:43:
                    10:2f:9a:65:6c:2e:0a:63:b1:bc:d3:60:74:5d:12:
                    84:1c:6c:bd:64:e0:84:39:86:6c:01:d2:d5:2c:18:
                    16:96:a9:d7:7c:5d:7b:fb:25:ed:db:66:a3:36:f5:
                    e8:05:54:76:ff:15:ea:29:9b:66:83:80:3e:f1:3f:
                    8d:fc:ed:98:6f:aa:f9:9e:ad:97:c5:c7:35:3f:a2:
                    3d:77:ed:5f:fc:e3:29:57:db:75:ab:0c:8a:bb:16:
                    e5:31:d7:6b:e1:70:ee:75:5a:6a:01:0a:7e:86:8b:
                    2c:b0:72:28:c5:62:61:cb:b3:df:b7:4c:3b:c2:70:
                    bc:13:40:04:8c:0f:bd:b1:c8:21:a4:ab:40:5a:72:
                    78:b5:d6:3d:1a:7e:53:5f:c0:26:36:f6:14:7f:6f:
                    2d:31:76:a9:f2:c3:25:6e:f2:27:6b:0c:e1:64:de:
                    ea:2c:12:81:39:1f:ea:f6:6c:c2:56:90:2c:40:a5:
                    20:40:83:64:d4:f0:d5:ce:d3:12:6f:38:e2:d1:09:
                    e1:a6:15:2b:56:48:99:64:79:11:1f:d9:4d:f0:88:
                    5c:d7:0d:63:83:ad:9d:f2:9b:62:c9:79:7e:ca:25:
                    4b:d4:b7:28:e1:fa:32:2b:80:7f:11:7d:38:80:65:
                    ba:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FB:18:48:48:BB:CD:0E:17:4F:CE:85:EE:9C:F2:09:93:05:73:A3
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a39343a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:94::/46

    Signature Algorithm: sha256WithRSAEncryption
         48:79:66:46:d4:d3:2e:a5:db:0c:d0:d6:73:2e:d3:bd:b9:98:
         49:cf:17:13:92:3b:3b:4b:ff:d2:81:2e:ff:d9:fc:66:2a:77:
         91:ca:e0:d1:d4:d8:5a:58:2f:6a:84:17:81:f0:85:be:ae:49:
         8b:7f:73:cc:d1:07:aa:1e:d3:b4:0d:bc:93:65:a8:0a:6e:24:
         f2:67:08:64:aa:5c:15:29:d3:f1:98:e0:a4:ba:1d:97:f6:4b:
         b0:b2:99:a1:e9:bb:78:83:a5:4b:1f:bb:8d:a4:ea:c0:3f:b8:
         52:44:48:8d:4b:3a:16:a2:2a:b9:12:b8:48:92:ff:00:5b:df:
         39:bc:a1:75:e6:e5:f5:75:1d:13:02:d9:b0:61:b8:23:5a:15:
         84:d6:47:c9:81:90:17:5b:3b:06:5c:35:a5:64:87:80:63:86:
         d6:b3:5c:df:a1:b9:db:96:34:c6:6e:a8:3a:ac:34:aa:df:66:
         80:ae:e0:97:0a:28:f3:01:28:49:1e:df:e6:56:d4:f0:cf:47:
         51:9a:a4:d5:d8:d6:b3:d1:c5:5f:76:c0:51:b8:1f:1d:f1:1b:
         95:d8:22:f1:37:32:60:f8:e2:36:04:5a:e1:4b:cb:8c:8a:ee:
         26:f7:51:a7:24:f3:3a:e3:d8:de:e1:8f:79:18:38:6d:f5:86:
         4a:c2:85:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----