Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          PA1TaW6/8Lb5fEqyNgA70xG0Gg/U0Bk7qDzPB8LU7mY=
Subject key identifier:   F8:94:78:97:8C:59:8C:BA:59:F0:4C:DA:90:E0:38:95:71:F0:55:A1
Certificate issuer:       /CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
Certificate serial:       7055CCFBE07F7C25F710C83925C954D923F5F065
Authority key identifier: 2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa
Signing time:             Wed 23 Oct 2024 18:41:54 +0000
ROA not before:           Wed 23 Oct 2024 18:36:54 +0000
ROA not after:            Wed 22 Oct 2025 18:41:54 +0000
asID:                     54148
IP address blocks:        2602:fa43:ac::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:55:cc:fb:e0:7f:7c:25:f7:10:c8:39:25:c9:54:d9:23:f5:f0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Validity
            Not Before: Oct 23 18:36:54 2024 GMT
            Not After : Oct 22 18:41:54 2025 GMT
        Subject: CN=F89478978C598CBA59F04CDA90E0389571F055A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:84:a7:29:fe:12:79:b0:00:50:82:47:62:
                    20:9c:95:ed:69:ec:86:79:86:1b:fb:4a:54:ce:b8:
                    e9:82:82:9e:b1:9b:87:18:ff:80:a9:d4:8b:95:a7:
                    46:47:46:36:01:96:7b:3d:f4:9d:f7:ac:38:83:41:
                    46:5e:56:4d:2b:60:80:39:bf:11:0a:a9:a4:ad:35:
                    7e:c3:a3:62:2d:92:3a:fe:ed:18:e4:0e:e7:ed:f5:
                    16:1e:52:87:c3:75:c0:e9:f0:3e:ed:40:07:6e:47:
                    30:df:34:7b:40:4c:fd:81:c7:47:3b:48:0a:7b:7f:
                    0d:b2:10:7f:87:6c:49:10:e6:d2:eb:62:56:f2:2b:
                    c0:00:c0:dd:40:ad:5a:c1:32:a3:4a:18:dd:47:78:
                    22:c3:81:52:ac:50:89:7d:43:04:47:f3:c3:41:62:
                    57:91:88:b6:b1:46:e8:ed:4d:da:0a:65:5c:55:60:
                    16:c4:ca:8e:63:d7:2d:8e:23:ba:76:b0:cc:94:e2:
                    24:85:7e:49:36:a6:08:8a:ad:86:bc:5a:3f:7b:df:
                    11:95:d4:f0:e1:33:f2:d7:7f:17:46:59:53:a9:27:
                    a2:06:91:60:38:db:1e:76:70:51:d6:e7:c8:b4:41:
                    94:9e:71:0e:8a:3a:81:c6:38:a9:5a:70:d8:a7:5b:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:94:78:97:8C:59:8C:BA:59:F0:4C:DA:90:E0:38:95:71:F0:55:A1
            X509v3 Authority Key Identifier:
                keyid:2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:ac::/46

    Signature Algorithm: sha256WithRSAEncryption
         44:ce:bb:ce:15:15:b0:ba:9a:f5:b2:79:e6:0a:14:36:e0:11:
         7d:5f:04:f6:9c:19:7c:68:aa:7b:e2:bd:23:2b:1b:5b:b5:55:
         7b:43:90:c7:27:37:89:5c:20:05:4a:28:fb:e7:af:57:2e:5d:
         f2:8e:84:98:89:0a:72:86:eb:13:af:8e:f1:91:c2:f5:5c:61:
         8d:e9:f5:2a:b2:b2:7a:88:ec:38:07:ec:56:07:fc:81:14:08:
         04:37:ab:e5:ab:e9:92:df:06:72:d0:ea:15:21:f5:ee:64:e9:
         ee:40:c4:47:02:c9:5f:15:69:80:cc:63:eb:e1:4b:29:33:a9:
         74:61:e0:30:50:5e:5c:9e:59:a1:ab:98:bf:02:64:8f:56:d3:
         b2:ac:85:95:19:64:aa:d1:e9:bd:7c:cd:6a:36:b2:49:14:15:
         fe:66:73:0e:7b:57:f9:15:68:9a:f4:b0:86:98:ca:b1:78:f8:
         f1:76:75:70:47:d9:24:85:7a:4b:c6:a1:d8:86:d0:0d:04:d7:
         8f:9c:8d:34:35:06:e9:41:54:50:ea:80:e4:ff:2a:6c:6b:93:
         b9:a3:03:44:29:8b:bd:44:c8:0b:b1:a9:fb:df:52:0f:1f:3a:
         e3:f8:9e:ea:71:87:ff:9b:03:c9:09:26:6f:2e:07:cd:a6:ae:
         bc:2d:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 22:39:05 2024 by rpki-client on console-fra.rpki-client.org