Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          2JlqkV9Cnx/jYoZ/j270P4aYNWEL/cOhVsp09DJ7L0g=
Subject key identifier:   00:3B:22:36:51:06:FD:9F:53:C3:41:1D:E2:0A:5D:80:11:ED:CE:06
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       639FAFF0FF5BC7B252B85131D3C64054CFB439ED
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a3a2f34382d3438203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:41:58 +0000
ROA not before:           Wed 23 Oct 2024 18:36:58 +0000
ROA not after:            Wed 22 Oct 2025 18:41:58 +0000
asID:                     54148
IP address blocks:        2602:fa43::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9f:af:f0:ff:5b:c7:b2:52:b8:51:31:d3:c6:40:54:cf:b4:39:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:58 2024 GMT
            Not After : Oct 22 18:41:58 2025 GMT
        Subject: CN=003B22365106FD9F53C3411DE20A5D8011EDCE06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c2:7b:a5:9c:b7:d2:f1:8d:f0:a4:d3:95:d8:
                    3d:8e:fd:ec:e1:25:36:21:f3:8c:7e:0b:64:62:cc:
                    47:ee:fb:d0:52:0e:a4:8d:0d:b1:e3:e7:02:ed:23:
                    38:ec:2b:57:9a:37:36:50:16:92:32:db:d4:4d:44:
                    ae:8f:1c:19:ad:b3:26:e1:f4:6a:1f:79:12:1f:96:
                    72:4c:1f:de:b2:dd:77:55:a2:2c:f1:c8:a7:2d:ea:
                    82:b2:28:29:5f:ed:06:10:ca:b0:8d:ff:97:cc:7e:
                    07:ec:d0:63:d7:14:b4:33:47:7e:a0:8a:e3:30:da:
                    93:df:17:7b:e3:3c:81:43:50:66:7a:7b:dc:4f:bc:
                    06:ca:ca:bc:02:9c:75:ea:3c:24:b6:1d:7f:90:07:
                    bc:30:b8:87:af:a3:65:73:0d:cd:71:3b:30:61:72:
                    73:dc:9f:20:ac:10:2b:e5:c8:63:a2:ec:be:0c:38:
                    e2:bc:76:15:2e:5b:d9:94:58:21:8d:43:d3:d1:43:
                    fa:46:a4:59:59:a9:3d:a5:6c:90:d3:0c:78:bf:e0:
                    14:09:9a:1e:6b:f7:7f:96:6a:07:fd:42:43:57:57:
                    dc:7c:19:75:6b:58:54:12:d3:fe:26:ac:a9:c7:71:
                    74:a0:af:60:92:64:d7:c9:a8:4b:79:6d:b8:bb:ac:
                    91:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3B:22:36:51:06:FD:9F:53:C3:41:1D:E2:0A:5D:80:11:ED:CE:06
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:ef:c5:39:76:73:13:07:ee:65:0c:27:29:bf:8f:1c:cc:48:
         14:80:5f:46:93:b6:b5:c0:85:25:d1:d7:79:cf:05:68:4d:ad:
         4b:41:30:3a:53:d9:4f:54:37:c5:f9:ec:dc:7a:a9:bf:c4:ed:
         ab:d2:6b:f7:90:6f:31:03:34:db:ad:a0:0c:8d:3a:6a:3a:f7:
         47:70:34:7d:0d:f1:3d:dc:88:3b:67:55:d9:6c:3f:52:3d:b3:
         35:5d:fe:dd:09:d1:a5:8b:3c:64:b8:66:71:be:bf:19:70:9b:
         20:88:4a:c3:4e:97:23:c1:2c:b9:cd:41:e6:8c:ff:66:50:41:
         31:3f:30:e0:1e:c4:c2:bc:3d:b2:6b:38:57:d3:42:67:21:1f:
         1d:ac:8e:61:a8:f7:12:ea:39:af:af:6c:2b:9a:4c:88:89:1b:
         f2:4a:1a:f9:21:2d:3c:c5:e0:66:c0:77:18:5c:32:4c:13:66:
         0a:13:7e:f2:0d:de:91:d6:25:6c:e9:d6:fc:91:aa:a5:1c:cf:
         6a:18:f2:e6:76:fb:35:1f:0e:a3:f6:78:4e:d5:30:36:15:59:
         94:85:e5:2a:0e:89:15:41:df:7d:9e:ed:0b:b5:d9:fd:ab:6a:
         f5:13:3e:8e:3f:07:a1:18:12:34:76:d5:ec:77:4e:6b:e9:f3:
         be:b2:7b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----