Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          /avjHW41tDe2ZBCgkMEeDvqWBE+QeSd6ULiQ8nd5Bco=
Subject key identifier:   1C:7E:1D:70:77:B1:CE:B3:A7:4C:8E:42:B2:E3:2A:09:FE:EE:75:29
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       186F92EE3E21D2377C2E6E17A4F098D83A6F5CEC
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:41:58 +0000
ROA not before:           Wed 23 Oct 2024 18:36:58 +0000
ROA not after:            Wed 22 Oct 2025 18:41:58 +0000
asID:                     54148
IP address blocks:        2602:fa43:a4::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6f:92:ee:3e:21:d2:37:7c:2e:6e:17:a4:f0:98:d8:3a:6f:5c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:58 2024 GMT
            Not After : Oct 22 18:41:58 2025 GMT
        Subject: CN=1C7E1D7077B1CEB3A74C8E42B2E32A09FEEE7529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:62:ae:57:7d:b8:35:0e:8a:1c:ba:cd:9c:10:
                    f7:68:1e:7c:de:ba:0f:59:32:a6:d2:eb:79:68:64:
                    8a:7f:6a:ec:ac:37:a4:83:bf:4f:e3:64:0f:0f:67:
                    4a:ac:7c:b0:ac:68:7a:37:f9:5d:a9:55:3b:80:82:
                    e0:33:a8:29:2f:89:6c:24:a9:ac:ee:c6:b7:2d:36:
                    54:2d:4e:35:94:aa:5a:1e:5c:03:9d:88:da:42:c7:
                    3d:9b:66:8b:96:c2:8d:a5:65:45:dc:df:d8:71:a2:
                    87:ed:90:47:89:6b:7e:86:e0:f9:95:c4:e7:8f:69:
                    63:88:23:6d:2d:6e:c1:29:a5:a6:13:76:7a:5a:6e:
                    39:56:fd:f9:60:f1:30:4d:04:b9:ea:ab:97:b6:b3:
                    79:6d:cb:b9:9d:a9:3a:b2:c7:3d:5a:20:fd:d1:91:
                    7d:25:32:25:16:d1:28:f3:8b:50:f2:c9:0c:77:ff:
                    0d:73:d8:d2:14:a3:2d:4f:45:23:d8:44:fd:e1:55:
                    e2:f1:4d:6d:c1:08:6e:32:cb:1d:94:ef:60:37:b1:
                    f5:0d:e4:b1:07:0d:53:48:b6:1e:13:60:2a:a4:2a:
                    58:f0:90:18:1d:df:d8:48:b9:08:44:d3:c7:d0:8b:
                    96:27:f6:90:fb:22:af:9e:86:9c:b6:16:2a:d1:fd:
                    ad:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7E:1D:70:77:B1:CE:B3:A7:4C:8E:42:B2:E3:2A:09:FE:EE:75:29
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:a4::/46

    Signature Algorithm: sha256WithRSAEncryption
         4f:ed:d8:f3:78:67:1e:f3:7f:90:84:80:12:8e:a0:18:7e:1b:
         c6:a8:a8:21:93:86:8d:b2:a0:8b:e8:cf:39:db:2b:10:e1:9d:
         df:95:7b:87:92:38:c4:ea:22:9f:31:ed:10:72:6c:5f:f9:df:
         20:78:49:26:91:35:fb:16:b6:5e:a4:42:0d:6e:92:f0:d4:bc:
         81:78:2d:5a:c4:af:e0:48:6d:33:8d:60:31:73:2a:18:45:45:
         17:6c:34:13:b6:3e:78:bc:ec:f3:15:f2:5d:1b:b9:b1:5b:ce:
         f9:a6:50:fd:26:98:44:4f:a8:e4:99:26:d9:67:bd:b9:a0:4e:
         a2:18:91:4f:ac:30:ef:e1:f1:bd:a1:59:00:f9:ba:56:55:3a:
         a2:21:3a:e6:d8:7a:8e:fe:f3:e4:c1:20:5b:72:ff:07:87:16:
         89:8f:dd:2a:45:1e:79:e7:8a:82:dd:1d:8f:ee:2d:d1:10:e0:
         32:e4:bd:3c:b6:68:b7:bf:64:ee:c4:64:02:17:7e:1c:28:e2:
         be:b5:1e:60:d7:2f:ed:8d:f9:1e:ad:ec:64:94:88:b1:1d:e2:
         6b:04:7d:5e:a6:e7:f3:fd:04:70:d4:93:30:c1:91:f8:8e:8e:
         00:36:4a:d4:e4:a0:0f:b4:b5:44:24:9c:89:a5:32:d0:46:99:
         e3:e8:b8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----