Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa
File:                     323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa (raw, json)
Hash identifier:          NmtXX6Mx24HLEY6qgnRY2oV+aGWJjgdkQ91ZdbELFK0=
Subject key identifier:   C1:5E:E7:3D:74:0C:C5:2E:96:23:2E:95:6C:9D:E5:B5:F5:43:BF:FC
Certificate issuer:       /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial:       030EFE3F23DA95396DC27B3ABC96DB69C91525D8
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa
Signing time:             Wed 24 Dec 2025 07:06:22 +0000
ROA not before:           Wed 24 Dec 2025 07:01:22 +0000
ROA not after:            Wed 23 Dec 2026 07:06:22 +0000
asID:                     204539
IP address blocks:        2602:f92a:a46b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0e:fe:3f:23:da:95:39:6d:c2:7b:3a:bc:96:db:69:c9:15:25:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
        Validity
            Not Before: Dec 24 07:01:22 2025 GMT
            Not After : Dec 23 07:06:22 2026 GMT
        Subject: CN=C15EE73D740CC52E96232E956C9DE5B5F543BFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:02:82:09:02:8b:74:16:48:f9:04:48:ae:9f:
                    80:99:7f:3d:09:b1:63:38:5b:74:8e:4c:fe:d1:90:
                    9e:cb:87:33:01:8e:ef:7a:c2:80:06:ec:dc:00:87:
                    4e:c9:4c:72:06:c5:65:e5:fc:97:bb:8c:b2:bf:15:
                    ba:c8:48:2c:f3:f2:f2:a4:48:14:8e:8b:67:e5:27:
                    d2:14:d9:70:3d:fd:de:b2:fb:84:b9:29:c4:d5:cd:
                    f9:07:b8:51:51:04:51:f9:a0:64:98:f6:f5:ad:c8:
                    41:15:06:f1:11:51:67:18:2c:e6:12:80:d3:a0:30:
                    e1:33:60:61:9b:c1:f2:97:c5:03:4a:fd:6d:54:85:
                    b5:79:a7:f7:7a:fa:64:3e:ac:df:5f:c3:b7:ac:bf:
                    77:ac:69:24:f4:9a:0f:85:e5:8d:1e:e6:9e:80:bd:
                    98:6c:82:70:ea:da:5f:2e:0f:27:89:6f:75:76:d0:
                    ec:17:86:02:1f:92:d8:27:d2:f0:72:1f:10:c0:7b:
                    a8:b2:c7:82:4a:a0:7a:98:0b:36:df:fc:80:9e:17:
                    05:a9:99:78:9b:a2:d2:0b:3d:fd:73:74:7d:6e:b1:
                    52:2f:1e:ed:8e:a3:1d:48:5a:6c:d8:4c:36:ce:4c:
                    11:71:8c:92:ff:69:f9:87:c4:fd:b3:e7:46:3f:5e:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5E:E7:3D:74:0C:C5:2E:96:23:2E:95:6C:9D:E5:B5:F5:43:BF:FC
            X509v3 Authority Key Identifier:
                keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a46b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:be:cc:cf:a0:b9:eb:07:bf:0a:28:9d:49:d0:cf:94:7a:e3:
         04:c3:c0:75:10:ba:94:43:2d:c7:12:f6:e6:21:73:a5:fe:6f:
         34:b7:72:7a:42:b7:4c:98:bb:c2:95:c1:5c:fd:6d:cf:1d:6b:
         4f:c0:5c:7e:55:a8:0f:c8:bf:ef:12:e8:ea:58:22:d7:e0:aa:
         31:d6:ea:71:8f:ab:60:1c:b0:f9:9e:95:ec:0d:97:00:ca:8f:
         9a:89:e9:df:72:64:86:5f:5e:c6:12:ad:3b:95:70:fb:47:c2:
         d9:15:44:cd:11:db:9b:58:12:6f:69:4b:26:78:1f:06:53:a1:
         b0:70:e7:a4:fc:1e:02:d7:62:dc:47:7a:96:0d:6e:d4:99:3a:
         ea:53:c9:85:92:ac:0e:c6:1a:2c:84:41:11:6e:ba:2c:4d:aa:
         74:ee:d2:9c:2f:80:c8:4e:f3:38:0d:fd:da:b5:10:55:22:ea:
         29:10:a7:b2:98:8c:f2:1e:e4:9d:d7:1d:64:6c:2a:cf:ae:dc:
         dc:c4:2c:a7:3d:b7:a8:3c:1c:f0:a7:5d:47:e5:19:cb:57:ff:
         db:50:a4:f8:61:10:23:71:64:aa:c8:19:69:4f:a2:b4:2a:0e:
         e9:4f:8c:99:e8:88:a2:b5:35:4e:a3:b3:b8:44:d9:16:e1:71:
         3d:bf:38:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----