Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/323630323a663732653a653a3a2f34382d3438203d3e203633323836.roa
File:                     323630323a663732653a653a3a2f34382d3438203d3e203633323836.roa (raw, json)
Hash identifier:          bVxZk3v4eClxW+S2do5LvdSkDa6rq5BXs4SWGgx3GDU=
Subject key identifier:   E9:18:E3:DD:09:F1:5A:90:7B:83:E2:40:59:FE:D9:08:71:F3:28:7C
Certificate issuer:       /CN=369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12
Certificate serial:       7C83B4FE44FADFE8738FDD96613514ABBB0D1E10
Authority key identifier: EB:4B:C0:6D:40:65:7A:9B:F4:3E:CE:83:09:AD:AD:76:DF:24:A6:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/323630323a663732653a653a3a2f34382d3438203d3e203633323836.roa
Signing time:             Wed 12 Feb 2025 23:33:43 +0000
ROA not before:           Wed 12 Feb 2025 23:28:43 +0000
ROA not after:            Wed 11 Feb 2026 23:33:43 +0000
asID:                     63286
IP address blocks:        2602:f72e:e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:83:b4:fe:44:fa:df:e8:73:8f:dd:96:61:35:14:ab:bb:0d:1e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12
        Validity
            Not Before: Feb 12 23:28:43 2025 GMT
            Not After : Feb 11 23:33:43 2026 GMT
        Subject: CN=E918E3DD09F15A907B83E24059FED90871F3287C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:75:4f:91:28:ce:9f:cd:85:18:ea:99:5e:
                    3d:cb:27:61:e4:40:83:15:fc:ad:71:bd:b9:87:a8:
                    b7:76:54:17:e2:c3:86:4f:ca:77:88:05:24:09:9e:
                    1b:e2:9b:40:1b:b3:68:c9:aa:92:3d:fe:b5:5a:9d:
                    73:82:49:4a:b2:91:7e:a9:33:ec:77:fb:53:af:2d:
                    e2:52:e4:7e:bc:e6:55:c5:5d:bc:b8:4c:bd:e3:68:
                    e8:3c:dd:e4:da:e5:29:fa:c9:ff:7b:74:1b:a4:35:
                    06:f6:2e:af:93:58:2e:07:e6:c2:f6:7c:ce:10:8b:
                    cc:eb:8d:ca:e1:43:05:3f:f7:f9:ab:6e:30:94:3e:
                    06:5d:c2:1f:35:18:58:e7:78:14:6a:bf:f0:77:f3:
                    9a:f7:7a:74:d9:93:63:fd:d1:c5:aa:a5:87:0b:99:
                    13:22:ae:05:81:73:4d:31:4f:46:66:06:2a:e2:34:
                    af:38:e3:87:17:26:92:3e:50:80:65:4f:e8:2e:28:
                    e3:16:37:22:4b:fd:dc:b8:a6:eb:c8:f5:62:17:26:
                    78:66:ae:67:0d:a1:aa:12:dc:65:8e:ca:3c:82:b5:
                    c9:cb:5c:47:eb:84:96:37:d3:c0:d4:8f:9a:50:d0:
                    a3:6a:c1:ee:cd:ce:a6:7c:45:f0:4f:c7:84:09:60:
                    4c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:18:E3:DD:09:F1:5A:90:7B:83:E2:40:59:FE:D9:08:71:F3:28:7C
            X509v3 Authority Key Identifier:
                keyid:EB:4B:C0:6D:40:65:7A:9B:F4:3E:CE:83:09:AD:AD:76:DF:24:A6:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/EB4BC06D40657A9BF43ECE8309ADAD76DF24A63B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/323630323a663732653a653a3a2f34382d3438203d3e203633323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:97:c4:0e:fb:96:87:0a:27:e4:51:dd:f1:7e:8a:5a:b7:3c:
         81:6c:75:3e:33:54:82:5d:ec:81:b9:bf:c5:37:c7:a2:81:80:
         2b:5c:c8:3a:23:b5:5b:c6:6f:e7:82:f5:16:75:3f:aa:4b:4e:
         ce:b3:03:a8:30:d8:b7:5e:35:8b:ed:f3:95:82:62:78:7c:03:
         d1:03:5b:ad:ef:3b:63:c3:a6:84:db:4b:33:e5:6c:59:f4:fe:
         8b:1f:11:8c:86:66:57:85:4e:c4:07:9e:9a:8d:6a:6f:f2:3b:
         14:99:86:3d:bb:18:89:13:98:ed:19:c6:ff:ed:f2:86:af:51:
         cf:cd:86:23:ab:bd:ca:47:16:6a:bc:2f:ee:d6:d3:6b:7d:26:
         b1:2a:f3:66:2a:a8:13:8a:11:f4:3f:ad:c3:10:d1:90:3d:fd:
         c2:0e:91:52:17:f7:2c:5e:bc:a2:f7:19:bd:e6:9f:41:82:22:
         dd:82:6f:44:15:52:69:0e:29:aa:6b:5f:2a:39:f1:6f:2e:ca:
         a2:60:f0:3b:89:b2:8d:45:be:eb:85:b6:f3:43:35:70:a1:99:
         38:7c:44:83:40:2e:b0:b3:6c:eb:73:1e:36:82:ab:9c:d0:94:
         ac:4d:32:87:4b:f8:e5:33:2c:d3:e0:29:e1:b1:69:e7:67:33:
         af:ff:63:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----