Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a3a2f34382d3438203d3e20323030333531.roa
File:                     323630323a666134333a3a2f34382d3438203d3e20323030333531.roa (raw, json)
Hash identifier:          qZD5wKuI6J+eWNVDuy2weAbDn9I13LE8XX/iudtYN1U=
Subject key identifier:   46:ED:3F:D8:62:B6:4A:42:30:2C:D5:64:3E:8C:C3:B3:3F:51:1C:83
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       58D01773837FBBDC4F36B6AE3881B237BB9C7364
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a3a2f34382d3438203d3e20323030333531.roa
Signing time:             Wed 23 Oct 2024 18:41:56 +0000
ROA not before:           Wed 23 Oct 2024 18:36:56 +0000
ROA not after:            Wed 22 Oct 2025 18:41:56 +0000
asID:                     200351
IP address blocks:        2602:fa43::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d0:17:73:83:7f:bb:dc:4f:36:b6:ae:38:81:b2:37:bb:9c:73:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:56 2024 GMT
            Not After : Oct 22 18:41:56 2025 GMT
        Subject: CN=46ED3FD862B64A42302CD5643E8CC3B33F511C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7c:06:80:80:fb:e0:57:d4:b2:42:a5:c7:be:
                    9d:68:5a:ad:ed:15:6c:bf:44:53:a7:0a:b2:04:44:
                    12:ae:cc:47:58:2f:34:90:1d:f0:93:16:f7:0b:f4:
                    10:65:3d:5a:8b:9b:14:04:26:3f:fb:28:f5:8b:a6:
                    3a:1e:b5:af:b1:68:09:a4:ea:1e:b4:22:ba:9c:14:
                    2b:48:23:88:14:b9:72:f8:44:3e:66:68:02:ba:6c:
                    ad:4b:a8:6f:3d:f2:e5:1b:6b:c8:f5:a7:98:57:1a:
                    a6:d3:b7:fe:fd:39:01:32:2c:4b:99:82:30:e8:0f:
                    b1:e9:fe:0c:3e:5c:6a:ad:02:57:8f:a3:da:3f:56:
                    a6:36:62:46:48:7f:15:2a:75:ec:76:9e:ad:32:6a:
                    05:af:b6:d2:92:09:88:75:ee:f1:eb:b2:2f:dc:05:
                    56:ba:1f:8b:0b:eb:eb:c6:f6:f3:64:45:f3:ba:4b:
                    d9:cd:5a:dc:55:2b:92:91:eb:76:c3:5d:b2:5c:42:
                    d5:4e:e7:3c:0c:17:4a:fc:cd:97:8c:35:3f:09:6b:
                    68:70:fe:1f:d2:ae:74:92:97:e2:e6:5f:1e:82:8c:
                    b7:40:51:a6:98:0b:a4:e8:da:56:a2:54:c6:92:76:
                    46:5f:b0:2b:bd:94:6b:1f:54:bc:e0:cd:7a:2f:43:
                    b0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:ED:3F:D8:62:B6:4A:42:30:2C:D5:64:3E:8C:C3:B3:3F:51:1C:83
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a3a2f34382d3438203d3e20323030333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:2f:7c:97:61:76:e2:1e:01:06:a1:74:ca:95:8a:5f:ee:33:
         df:42:62:42:fe:a0:96:48:f8:60:a6:f7:4e:e2:f4:5a:a9:d5:
         d3:01:6c:1f:ab:fb:80:76:b9:9c:89:82:e5:a9:35:27:d1:76:
         69:99:e3:37:64:94:10:7d:6c:ee:fd:a7:08:d6:a0:37:12:73:
         3e:52:cb:1c:e7:c0:e6:df:ea:5b:b1:b7:8c:4e:5c:74:29:db:
         a3:3d:2f:2b:7d:a8:cd:4e:f3:ae:1a:60:06:49:c5:5c:98:4e:
         22:6c:a5:b9:2e:d7:4d:f0:92:84:ff:49:7b:99:d4:43:3f:33:
         88:39:73:c2:ea:24:ab:1c:d2:12:d9:7f:ae:45:a2:e6:be:d5:
         76:de:2a:5d:44:18:5f:0c:d0:23:e7:38:08:06:64:53:63:9b:
         04:4f:14:e0:2e:7b:77:4f:90:b5:33:57:70:a0:65:1e:76:a3:
         47:a7:d7:a0:4c:23:b9:53:1a:21:48:41:ae:89:5a:18:bb:d3:
         05:59:74:b8:f2:62:3c:b8:74:96:51:d4:20:53:6e:74:0e:09:
         f3:fd:f7:dd:2f:dd:db:e9:7d:88:c1:cd:7b:36:da:ee:c6:a7:
         4d:da:17:4b:4c:e1:73:c7:3b:0e:3b:29:da:21:3f:c9:d9:a2:
         a4:0a:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----