Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/1/323630323a666131313a31303a3a2f34342d3434203d3e203135333533.roa
File:                     323630323a666131313a31303a3a2f34342d3434203d3e203135333533.roa (raw, json)
Hash identifier:          WZhQZvyF5KiNSqsNdQdK6U5iUU9ALzI/uYy7gAzDcc4=
Subject key identifier:   1A:66:50:9C:9C:17:7F:1D:D1:2F:A6:03:C9:68:F8:9B:55:00:7B:AF
Certificate issuer:       /CN=7c4424b0ef04e3ca954b0f3538136c6b5a94a7b8d7fe4b9e5c
Certificate serial:       701DEC74044B25AC6B7A80BE015154515684BCCD
Authority key identifier: 38:7F:EA:60:A6:56:47:5E:B6:49:B8:F7:0E:EB:39:1D:98:0C:59:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef04e3ca954b0f3538136c6b5a94a7b8d7fe4b9e5c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/1/323630323a666131313a31303a3a2f34342d3434203d3e203135333533.roa
Signing time:             Sun 12 Nov 2023 08:19:52 +0000
ROA not before:           Sun 12 Nov 2023 08:14:52 +0000
ROA not after:            Sun 10 Nov 2024 08:19:52 +0000
asID:                     15353
IP address blocks:        2602:fa11:10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1d:ec:74:04:4b:25:ac:6b:7a:80:be:01:51:54:51:56:84:bc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef04e3ca954b0f3538136c6b5a94a7b8d7fe4b9e5c
        Validity
            Not Before: Nov 12 08:14:52 2023 GMT
            Not After : Nov 10 08:19:52 2024 GMT
        Subject: CN=1A66509C9C177F1DD12FA603C968F89B55007BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:69:f3:a6:cb:87:15:cd:a9:ce:0b:09:40:40:
                    ec:d2:48:79:23:df:8d:35:e6:59:f7:d8:06:34:25:
                    f7:6d:25:2e:aa:37:9e:03:98:fa:02:c3:30:0b:5b:
                    45:e4:cb:82:e8:1d:62:3d:97:cf:89:b5:25:a8:e8:
                    fb:9e:18:1f:2c:a6:db:01:4c:5b:cd:93:cb:e8:e2:
                    c5:a9:fb:ff:49:7f:42:f5:c1:c8:ec:01:1a:09:eb:
                    1e:8e:0e:75:a9:a4:8a:63:88:56:90:80:e3:a4:0f:
                    e2:f5:c0:41:5c:99:e8:3f:4d:b1:b6:a2:99:cc:e4:
                    31:d4:9e:85:c2:9d:5e:33:0b:91:64:89:4d:1f:b2:
                    bb:0f:59:0f:cc:10:87:8d:8b:7d:60:9e:f6:65:ab:
                    0d:cf:f1:dc:7c:46:06:b9:5b:bd:ee:1c:d7:e0:88:
                    1b:63:b1:35:39:9e:98:ed:38:ed:78:d7:81:15:51:
                    fa:d8:1c:60:66:3e:72:8f:83:11:bf:8b:b5:16:71:
                    41:00:42:6d:62:4d:99:57:d4:ac:01:cd:e7:ce:66:
                    03:24:12:3d:a4:90:d3:49:0d:94:c0:72:4a:34:d3:
                    48:db:41:f3:2b:d3:dd:e9:2d:a7:af:54:fb:20:55:
                    d6:09:39:32:e4:9d:7e:41:91:f4:1f:88:d4:c8:eb:
                    30:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:66:50:9C:9C:17:7F:1D:D1:2F:A6:03:C9:68:F8:9B:55:00:7B:AF
            X509v3 Authority Key Identifier:
                keyid:38:7F:EA:60:A6:56:47:5E:B6:49:B8:F7:0E:EB:39:1D:98:0C:59:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/1/387FEA60A656475EB649B8F70EEB391D980C59AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef04e3ca954b0f3538136c6b5a94a7b8d7fe4b9e5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/1/323630323a666131313a31303a3a2f34342d3434203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:b2:b8:b6:35:c5:de:3b:6d:41:7a:ec:f2:75:51:40:ef:30:
         68:0b:73:8d:b0:9b:7f:8c:dc:47:49:30:b9:c7:94:52:9a:68:
         53:c5:e2:5e:86:76:0c:46:c5:af:82:6c:59:50:9f:d6:f5:cb:
         11:63:c9:f1:bb:ff:91:9c:dd:ee:0b:1c:d7:1f:4e:dd:80:24:
         61:77:2b:54:72:e2:51:4e:a5:d4:ee:c4:9a:87:cc:af:e3:52:
         bf:56:2c:81:df:3f:73:cf:ca:68:49:3f:01:39:45:2b:a3:b5:
         2d:ad:a8:64:5f:d1:38:8d:e7:b1:a5:a4:bd:6f:01:61:38:89:
         e2:ee:97:af:c5:e4:b1:e2:1e:8a:13:4b:38:6a:c3:5a:d6:79:
         8a:3b:57:0d:31:6e:a8:de:1b:2d:38:4b:0b:7b:01:a8:fb:61:
         8b:e0:b3:91:08:d7:ce:f8:cf:51:66:1f:f1:8c:6c:d6:5b:0e:
         9f:d2:10:a4:81:d5:c6:3e:96:37:90:a8:7d:2b:eb:a1:f0:05:
         28:15:e0:8c:66:2d:c8:cf:c0:b4:b7:91:f8:18:cf:e3:62:2e:
         c1:0d:7a:3f:4e:4f:60:37:7f:62:ff:99:c0:bc:c6:fb:7d:26:
         8d:90:fe:fc:48:b0:08:ee:7c:d8:49:7a:96:13:a2:15:1e:a0:
         da:32:f6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----