Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa
File:                     323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (raw, json)
Hash identifier:          4IHJsjfC0Zoq18aE2FFzAMYZQpT6YF+Y54OUnxbTiPM=
Subject key identifier:   F5:1D:91:00:40:AE:12:6F:65:90:AF:EB:43:47:48:6A:A0:C7:26:89
Certificate issuer:       /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial:       7A5F427E13A4A05C3E2F010636DD430CF5BCE22D
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa
Signing time:             Fri 17 Jan 2025 20:03:30 +0000
ROA not before:           Fri 17 Jan 2025 19:58:30 +0000
ROA not after:            Fri 16 Jan 2026 20:03:30 +0000
asID:                     46766
IP address blocks:        2602:f9a2:10::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5f:42:7e:13:a4:a0:5c:3e:2f:01:06:36:dd:43:0c:f5:bc:e2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
        Validity
            Not Before: Jan 17 19:58:30 2025 GMT
            Not After : Jan 16 20:03:30 2026 GMT
        Subject: CN=F51D910040AE126F6590AFEB4347486AA0C72689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:51:58:09:7b:86:67:7a:d8:6d:d0:d5:0b:
                    75:e5:7e:4b:1a:66:fd:8a:1b:16:23:a3:2f:31:fa:
                    99:75:62:e6:f5:5b:8b:36:db:dc:77:0d:eb:ff:98:
                    ea:4e:a3:33:68:45:7d:14:6d:32:eb:e5:2f:ee:b0:
                    6c:5b:ea:f5:c0:19:46:9c:61:24:20:4b:19:20:c0:
                    82:b0:b3:9a:ec:3b:b9:3c:ba:69:14:24:4c:85:cb:
                    82:f2:df:43:8d:f5:d3:45:3c:66:64:fd:1e:43:9b:
                    44:68:89:14:d5:63:d3:02:a3:83:13:e3:0e:c5:98:
                    46:e3:0e:f3:b7:e1:3d:e3:58:14:5f:4c:75:f3:f5:
                    88:67:23:dc:bd:59:9f:83:62:48:74:95:65:4d:eb:
                    11:64:5a:5a:7c:7a:6d:6f:61:8e:d8:70:ff:65:5e:
                    93:39:5d:9f:05:17:cb:55:2d:86:e4:02:9d:22:95:
                    cc:b3:fe:93:51:ac:cd:f3:b1:6e:3d:16:3a:3e:dc:
                    e3:50:66:e8:30:f6:e4:90:ef:63:9b:2a:0f:e6:a0:
                    46:9e:46:6a:b9:9b:d2:df:e7:09:b9:49:5b:fe:a2:
                    cb:24:9b:3c:b0:06:71:20:47:05:79:e4:26:7a:19:
                    8d:ee:ad:2b:df:5a:f0:76:86:92:2e:ab:d2:be:31:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1D:91:00:40:AE:12:6F:65:90:AF:EB:43:47:48:6A:A0:C7:26:89
            X509v3 Authority Key Identifier:
                keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a2:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:62:84:03:f2:b6:32:92:fd:04:c0:3d:8a:33:21:e0:d5:ac:
         11:17:94:a6:49:1e:03:df:fb:56:16:5a:51:ce:06:59:47:f1:
         a4:e4:15:ba:14:be:04:40:c7:b8:29:80:08:bb:1c:ca:8c:3b:
         b3:c3:30:c2:cd:bb:dd:6b:bf:96:78:73:7f:c6:56:6f:4c:f5:
         55:4b:e1:97:d4:c4:99:7f:f3:f4:fa:30:8b:09:85:c0:90:24:
         7e:2b:19:74:25:52:4d:6d:83:c1:04:f3:ae:23:33:3a:8b:b2:
         ec:70:65:8f:12:86:0f:12:9b:09:6c:8c:d2:45:20:24:f8:6c:
         98:1b:40:5c:f9:a5:01:eb:f3:9c:91:35:06:35:af:2c:19:de:
         93:a9:f1:b7:29:13:91:8a:97:54:49:77:5c:1b:dd:ef:3a:20:
         29:e0:7f:ae:b5:7a:51:19:1a:c7:78:c5:a1:ef:d4:02:08:66:
         ef:c2:d0:ac:47:7c:84:af:07:c7:1c:7f:ae:30:bd:3c:ca:99:
         f0:f5:2f:9f:b9:0b:8c:00:e3:61:21:76:5c:df:a5:26:33:4f:
         b9:10:fe:6a:98:a4:e7:e2:6a:8e:f6:d0:36:36:62:e9:04:de:
         49:91:b5:59:d7:cb:89:60:54:e5:83:35:bc:5a:99:fe:b6:8e:
         1a:99:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----