Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a39633a3a2f34362d3436203d3e20323030333531.roa
File:                     323630323a666134333a39633a3a2f34362d3436203d3e20323030333531.roa (raw, json)
Hash identifier:          nCjwsAbJ3wn6kDqFaCQPMZmqc7xu/I7o4rJz7f8u2Hs=
Subject key identifier:   9C:20:B9:E1:58:0D:75:46:87:D9:4F:A3:04:0A:32:DD:4D:7F:F4:04
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       5262162C1A1EEA898129E70F5F3819EB2CFBFC1E
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a39633a3a2f34362d3436203d3e20323030333531.roa
Signing time:             Wed 23 Oct 2024 18:41:59 +0000
ROA not before:           Wed 23 Oct 2024 18:36:59 +0000
ROA not after:            Wed 22 Oct 2025 18:41:59 +0000
asID:                     200351
IP address blocks:        2602:fa43:9c::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:62:16:2c:1a:1e:ea:89:81:29:e7:0f:5f:38:19:eb:2c:fb:fc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:59 2024 GMT
            Not After : Oct 22 18:41:59 2025 GMT
        Subject: CN=9C20B9E1580D754687D94FA3040A32DD4D7FF404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:2f:89:96:0a:03:41:ad:06:fc:31:bb:54:
                    12:e8:41:73:e6:28:f0:ca:8f:7a:d4:cf:12:a2:9f:
                    c0:2d:c6:61:1f:c1:c3:1e:92:9e:98:ab:e8:aa:88:
                    8a:6e:45:0e:44:a0:db:30:aa:81:29:24:2e:64:cd:
                    82:c8:74:74:12:fc:df:b2:6e:27:92:d3:21:71:16:
                    be:43:6f:4e:4c:e2:5c:2a:a3:ce:e8:6e:f1:4b:b1:
                    4f:a3:46:44:da:f5:e7:36:d8:61:dd:6d:22:25:ee:
                    fc:a0:96:54:b7:b5:62:08:e6:86:42:9f:3a:ec:39:
                    69:e1:30:24:6d:c6:b6:77:2e:0b:b4:01:90:1d:95:
                    79:c2:3a:7b:c7:3f:b9:00:ee:b3:04:6b:c2:63:eb:
                    05:41:12:d7:c8:6f:84:8b:78:8b:24:1c:fd:4a:70:
                    dd:d1:4d:c1:ac:17:e2:e0:5c:c6:26:a6:29:f7:4e:
                    17:67:a3:7e:c1:8a:53:a9:04:55:47:de:0b:d0:04:
                    84:55:38:08:9b:3c:03:c0:08:20:38:60:0c:3a:4f:
                    87:bc:59:17:72:86:b0:9a:c8:66:27:04:9a:90:67:
                    9c:98:9c:e2:c9:3d:89:2f:08:44:cf:c4:b8:1c:e5:
                    9a:ca:a2:8e:4b:b1:b4:0f:a5:3e:89:2a:d5:77:6d:
                    9d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:20:B9:E1:58:0D:75:46:87:D9:4F:A3:04:0A:32:DD:4D:7F:F4:04
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a39633a3a2f34362d3436203d3e20323030333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:9c::/46

    Signature Algorithm: sha256WithRSAEncryption
         04:d1:13:91:50:0e:15:1e:3e:b2:62:52:a2:ce:dc:66:4a:dc:
         f1:71:97:32:a2:b8:43:c0:6f:c0:4a:50:1c:8e:08:60:64:2a:
         37:ac:b3:fe:5a:8d:6c:04:05:57:fb:53:8a:5e:0a:6a:61:06:
         ff:0d:d3:ac:3f:ad:f6:13:73:0d:7b:d4:d5:05:9f:c8:87:46:
         47:bc:bf:e5:3d:f7:3e:91:1d:6c:14:7e:64:54:24:9b:23:83:
         60:11:c1:a9:a9:91:69:67:e0:eb:d2:01:db:08:0f:6a:e5:a2:
         63:5b:09:06:3b:3a:0f:72:25:4d:a0:e1:ce:45:1c:59:84:94:
         ad:c3:0b:ac:4c:93:5a:5c:a8:c7:0d:38:f2:24:8d:26:f7:fd:
         eb:9a:7a:07:2b:47:23:fb:b9:71:a0:c3:82:e6:26:60:76:7a:
         1c:2f:82:61:07:bb:a6:ee:c8:44:ff:85:92:d0:75:60:65:33:
         13:df:9c:a6:ab:49:0a:99:21:96:9b:76:a1:bc:41:52:e6:a0:
         b7:5a:0b:02:06:3a:ae:9c:74:32:43:42:76:ac:1f:26:c1:59:
         63:ed:1f:b4:55:0e:ec:a2:d0:d5:90:88:83:9c:30:32:fe:2a:
         99:b9:34:d7:4e:f7:b2:dd:7b:70:ef:34:39:a5:0b:01:66:fa:
         7e:c7:7d:0b
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUUmIWLBoe6omBKecPXzgZ6yz7/B4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTMxNjViZDI1NTg4MWUwMDA3ODA2OGNl
MzJlZmIzZWVhZWFlMDdjZjIwHhcNMjQxMDIzMTgzNjU5WhcNMjUxMDIyMTg0MTU5
WjAzMTEwLwYDVQQDEyg5QzIwQjlFMTU4MEQ3NTQ2ODdEOTRGQTMwNDBBMzJERDRE
N0ZGNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjYviZYKA0Gt
Bvwxu1QS6EFz5ijwyo961M8Sop/ALcZhH8HDHpKemKvoqoiKbkUORKDbMKqBKSQu
ZM2CyHR0Evzfsm4nktMhcRa+Q29OTOJcKqPO6G7xS7FPo0ZE2vXnNthh3W0iJe78
oJZUt7ViCOaGQp867Dlp4TAkbca2dy4LtAGQHZV5wjp7xz+5AO6zBGvCY+sFQRLX
yG+Ei3iLJBz9SnDd0U3BrBfi4FzGJqYp904XZ6N+wYpTqQRVR94L0ASEVTgImzwD
wAggOGAMOk+HvFkXcoawmshmJwSakGecmJziyT2JLwhEz8S4HOWayqKOS7G0D6U+
iSrVd22diQIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFJwgueFYDXVGh9lPowQKMt1N
f/QEMB8GA1UdIwQYMBaAFCyLMjvZW7DURIHLotzOPTq8OjxZMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk4MmY4NWJjLTNkNjktNDhhMi1iOWMz
LTdlZjBhODM5Y2UxOS8zLzJDOEIzMjNCRDk1QkIwRDQ0NDgxQ0JBMkRDQ0UzRDNB
QkMzQTNDNTkuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt
NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lZTFiZGZmOC1kYmI1LTRmMGYtOThlNi1j
OGUxMzI2YmE3OWIvN2VjYWUzMjA0OTMxNjViZDI1NTg4MWUwMDA3ODA2OGNlMzJl
ZmIzZWVhZWFlMDdjZjIuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH
MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzk4MmY4NWJjLTNkNjktNDhhMi1iOWMzLTdlZjBhODM5Y2UxOS8zLzMyMzYzMDMy
M2E2NjYxMzQzMzNhMzk2MzNhM2EyZjM0MzYyZDM0MzYyMDNkM2UyMDMyMzAzMDMz
MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHAiYC+kMAnDANBgkqhkiG9w0BAQsFAAOCAQEABNETkVAO
FR4+smJSos7cZkrc8XGXMqK4Q8BvwEpQHI4IYGQqN6yz/lqNbAQFV/tTil4KamEG
/w3TrD+t9hNzDXvU1QWfyIdGR7y/5T33PpEdbBR+ZFQkmyODYBHBqamRaWfg69IB
2wgPauWiY1sJBjs6D3IlTaDhzkUcWYSUrcMLrEyTWlyoxw048iSNJvf965p6BytH
I/u5caDDguYmYHZ6HC+CYQe7pu7IRP+FktB1YGUzE9+cpqtJCpkhlpt2obxBUuag
t1oLAgY6rpx0MkNCdqwfJsFZY+0ftFUO7KLQ1ZCIg5wwMv4qmbk01073st17cO80
OaULAWb6fsd9Cw==
-----END CERTIFICATE-----