Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          JmE3Rx/5TCkmXi+MbXB6O3eyc7Xw5accujOVjGUfOzU=
Subject key identifier:   19:A3:FF:3D:4D:BF:C8:97:B3:CF:4A:2A:CF:C1:31:FF:40:13:3C:A5
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       14CCE63B2FF02C611DDB808BDC6B8279CD35BBC7
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:41:58 +0000
ROA not before:           Wed 23 Oct 2024 18:36:58 +0000
ROA not after:            Wed 22 Oct 2025 18:41:58 +0000
asID:                     54148
IP address blocks:        2602:fa43:a8::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cc:e6:3b:2f:f0:2c:61:1d:db:80:8b:dc:6b:82:79:cd:35:bb:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:58 2024 GMT
            Not After : Oct 22 18:41:58 2025 GMT
        Subject: CN=19A3FF3D4DBFC897B3CF4A2ACFC131FF40133CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:db:3e:8a:20:8a:6e:84:9a:ed:3a:67:2d:
                    ff:d0:b6:9a:e9:95:e2:6d:06:cc:88:78:30:b0:1e:
                    02:28:58:07:f7:24:c9:19:e1:db:9f:c9:f2:f3:86:
                    f0:61:fc:db:7e:bb:c8:f9:ef:b2:58:dd:cc:72:d1:
                    96:7f:df:16:56:e2:3f:3c:ac:85:23:a1:cf:f4:04:
                    41:df:85:82:c9:d7:20:f6:67:7c:64:ee:85:10:ab:
                    1a:26:8f:6d:ee:04:91:78:05:e3:f9:23:fc:53:e1:
                    26:d7:bf:a7:11:d4:84:c0:3d:0d:0a:0c:b5:9a:40:
                    79:38:48:74:6e:22:89:5d:94:ed:8f:9c:a1:4e:20:
                    88:df:12:f9:0a:fb:dc:7a:e5:fc:d2:02:4e:fc:f3:
                    dc:fe:e3:ed:b4:79:cd:ea:18:b7:d5:1e:ee:ca:2b:
                    57:28:22:6d:44:c5:04:fb:90:55:6d:cc:f1:86:df:
                    c5:05:4e:6d:18:9b:7f:62:f0:33:37:a2:fb:37:d8:
                    97:a1:0b:f1:69:36:29:77:d7:b3:c4:ac:c5:25:47:
                    72:42:1e:d5:84:d5:16:81:52:d5:03:e0:d5:18:67:
                    af:bf:6d:37:5f:5d:10:e1:35:3e:65:a1:db:22:0d:
                    e3:53:06:05:7e:67:52:fb:7b:43:e1:d2:5d:32:dd:
                    4c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A3:FF:3D:4D:BF:C8:97:B3:CF:4A:2A:CF:C1:31:FF:40:13:3C:A5
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:a8::/46

    Signature Algorithm: sha256WithRSAEncryption
         65:f0:18:f1:b0:09:7b:f6:06:61:0b:57:6d:11:86:05:1a:5f:
         7f:20:1a:bc:38:5e:01:51:da:43:1e:d3:af:23:24:d0:5c:4b:
         d3:4b:7a:13:d4:15:1c:11:b4:9a:6d:15:e0:6b:ff:42:3c:24:
         5d:af:a0:9b:54:6d:cb:3f:71:52:4a:2a:06:d9:6f:64:ba:f8:
         8e:72:70:f8:8a:c0:9b:1f:d6:09:f6:e0:91:d7:ce:b6:d3:57:
         29:ba:61:dd:ac:41:46:23:44:32:6a:0f:c4:b5:6e:bd:f1:7f:
         67:48:5c:48:06:5a:58:9a:d3:99:7b:6c:a5:cb:71:b3:d1:f1:
         88:2e:b1:5b:bd:0d:a9:2e:0b:d7:45:43:b6:65:d9:c5:1b:b2:
         3e:1a:82:4e:47:86:d7:e6:64:73:74:92:a8:07:c4:b8:ad:34:
         a1:99:8e:08:7a:c2:95:60:f5:fe:e8:c5:b5:14:71:f4:1e:a9:
         37:d1:f0:0e:b0:73:c6:ec:fd:f1:7d:90:69:fc:31:53:24:20:
         74:27:66:a1:d1:bb:d3:ed:40:42:bc:eb:b1:41:7c:51:9f:27:
         c1:3f:2a:52:9c:9e:9a:20:9f:29:0a:3c:ef:d2:51:1c:53:c9:
         58:66:44:17:90:41:86:fd:52:27:8c:84:43:c7:6f:04:6c:b2:
         30:b7:bd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----