Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/323630323a663732653a3a2f34352d3438203d3e203633323836.roa
File:                     323630323a663732653a3a2f34352d3438203d3e203633323836.roa (raw, json)
Hash identifier:          kZTR1axcezbFuRuEOhM0/0xLImWf9B7F+ryerGs/7hQ=
Subject key identifier:   27:EC:E4:B3:7C:5F:70:74:38:3A:0A:B4:F8:C4:06:5D:99:49:5A:E3
Certificate issuer:       /CN=369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12
Certificate serial:       39D9E28672AEEC3D1933EB09150B82CF315888DA
Authority key identifier: EB:4B:C0:6D:40:65:7A:9B:F4:3E:CE:83:09:AD:AD:76:DF:24:A6:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/323630323a663732653a3a2f34352d3438203d3e203633323836.roa
Signing time:             Wed 29 Jan 2025 07:33:49 +0000
ROA not before:           Wed 29 Jan 2025 07:28:49 +0000
ROA not after:            Wed 28 Jan 2026 07:33:49 +0000
asID:                     63286
IP address blocks:        2602:f72e::/45 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d9:e2:86:72:ae:ec:3d:19:33:eb:09:15:0b:82:cf:31:58:88:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12
        Validity
            Not Before: Jan 29 07:28:49 2025 GMT
            Not After : Jan 28 07:33:49 2026 GMT
        Subject: CN=27ECE4B37C5F7074383A0AB4F8C4065D99495AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:58:df:1c:78:c4:43:42:a8:7f:b9:a9:58:6d:
                    5c:a1:aa:8e:47:a9:35:6b:c9:25:43:61:0b:e2:c1:
                    d1:de:9b:ab:60:9c:8a:4f:56:2e:0e:06:7a:83:87:
                    a8:6d:fe:49:f1:8a:5b:e4:8b:f2:0f:17:e0:fe:df:
                    5d:1a:38:ea:cc:bc:b9:5f:31:86:04:3a:0e:04:7d:
                    46:ff:a4:bd:f6:c8:08:05:69:5e:4d:59:9e:9e:4d:
                    e9:71:d0:b5:ad:d4:31:f0:38:cc:23:8f:91:98:79:
                    e1:13:f3:92:1b:96:96:2f:fa:ed:0f:d4:30:e9:dc:
                    fc:da:37:cd:69:30:45:3a:06:de:81:8a:5e:a7:a3:
                    ee:11:05:61:6c:95:49:28:ac:e6:69:49:20:33:03:
                    03:d7:68:0b:f3:74:45:05:00:15:2d:d9:bd:c3:38:
                    53:c9:e8:66:80:cc:2f:b6:fb:56:6f:b9:29:4d:ee:
                    a1:32:fe:54:48:75:32:75:c4:a9:19:b0:3f:45:71:
                    6b:c1:56:32:69:76:ec:d7:fb:f5:3a:6f:b8:18:d7:
                    6d:e8:86:e1:d4:4b:b1:e0:7c:be:81:61:ec:85:11:
                    c0:5a:43:1d:1a:31:84:7a:f3:b0:78:12:c7:1d:23:
                    0b:b3:c9:28:fd:87:95:d1:7f:f3:70:1e:de:aa:38:
                    f0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EC:E4:B3:7C:5F:70:74:38:3A:0A:B4:F8:C4:06:5D:99:49:5A:E3
            X509v3 Authority Key Identifier:
                keyid:EB:4B:C0:6D:40:65:7A:9B:F4:3E:CE:83:09:AD:AD:76:DF:24:A6:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/EB4BC06D40657A9BF43ECE8309ADAD76DF24A63B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/323630323a663732653a3a2f34352d3438203d3e203633323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e::/45

    Signature Algorithm: sha256WithRSAEncryption
         7a:ea:6b:1e:6f:f7:d9:07:f8:70:2d:ce:dc:4b:10:f8:f0:3c:
         43:78:4e:c8:1c:be:ac:08:6c:f5:cd:ae:06:06:eb:e8:87:cb:
         a3:ca:a5:07:8b:f0:47:65:80:d8:55:6e:6f:c0:63:7b:38:01:
         9f:df:bc:2a:99:19:a1:7c:75:6f:83:66:80:53:53:9b:49:e2:
         03:21:21:19:3c:5b:a6:07:ec:d2:79:d1:dc:43:34:d0:2a:91:
         cb:8c:60:c7:c8:83:72:35:20:fb:c4:82:a2:ee:87:7e:50:63:
         6d:fd:50:72:62:aa:6c:12:85:37:b0:ea:09:13:24:fe:a5:d3:
         0a:a2:fc:6a:b9:b4:45:3c:22:5e:a9:de:24:51:f7:f2:e8:f1:
         c8:46:77:fd:f1:d8:89:6e:55:02:c5:d1:74:82:b8:4b:76:4a:
         3f:b1:29:c5:ee:ca:5f:1a:11:9a:d3:fa:3e:be:8f:48:30:b2:
         a7:b3:e2:d9:f6:52:a7:3e:da:91:dc:53:83:de:07:e6:d7:b8:
         7e:72:97:17:b9:1c:bd:9a:fd:5d:ce:d0:c3:aa:e8:f2:58:d3:
         d4:3c:3d:86:ce:f2:21:4b:37:e2:f3:b1:95:aa:6f:4b:b7:fc:
         64:e6:0d:e6:ea:52:7f:38:27:6d:bf:54:59:98:b8:8c:e5:e3:
         e2:e6:78:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----