Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa
File:                     323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa (raw, json)
Hash identifier:          X3gobtjIiU6Ju/3ZCACUFgs37xuvMmCHuGD6b0L4z1E=
Subject key identifier:   A4:BC:AC:46:70:C9:1A:D1:25:ED:BC:42:42:AD:C2:93:96:C0:CB:A2
Certificate issuer:       /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Certificate serial:       764F7A6EF598FC80972D73484E156E0AEC97864A
Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa
Signing time:             Fri 14 Mar 2025 19:06:51 +0000
ROA not before:           Fri 14 Mar 2025 19:01:51 +0000
ROA not after:            Fri 13 Mar 2026 19:06:51 +0000
asID:                     47272
IP address blocks:        2602:f96d:e00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4f:7a:6e:f5:98:fc:80:97:2d:73:48:4e:15:6e:0a:ec:97:86:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
        Validity
            Not Before: Mar 14 19:01:51 2025 GMT
            Not After : Mar 13 19:06:51 2026 GMT
        Subject: CN=A4BCAC4670C91AD125EDBC4242ADC29396C0CBA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:7e:12:5f:c2:78:a4:10:26:b5:3a:a2:a1:
                    89:97:5f:bb:ed:d4:06:94:c2:69:7f:14:eb:bd:3a:
                    3c:0c:e8:25:00:f0:22:52:e4:d2:a2:56:e5:6c:58:
                    77:61:f2:2f:a4:50:22:b6:3e:40:9f:cc:a8:20:bf:
                    95:7b:09:03:55:c1:ed:ae:bc:67:c8:1a:bf:8e:77:
                    7c:a4:89:25:29:94:b0:f1:63:6a:ff:6d:62:59:63:
                    13:06:06:c2:59:70:10:80:ad:30:4e:47:ae:84:96:
                    cb:a4:21:0a:49:e3:f9:3b:ae:50:56:a6:d7:88:12:
                    6a:ce:f7:e9:06:19:c0:5e:cb:ee:75:4d:69:0a:f1:
                    fc:55:36:47:a3:9c:4c:45:f7:27:b0:51:ae:59:4a:
                    50:24:b2:63:1b:21:46:8d:4b:98:12:52:53:e6:72:
                    77:96:9a:f4:fc:e9:8e:9a:03:4e:4d:eb:71:1b:b1:
                    5d:44:d9:82:00:c7:c1:e3:55:90:b7:a6:91:1f:6d:
                    05:c7:c4:b6:02:9d:c9:ae:75:88:5b:37:14:7f:56:
                    82:ac:03:00:59:a7:6d:7e:3c:d7:79:97:6b:4b:fd:
                    8b:aa:f9:16:f6:08:4f:61:c9:d9:ad:6f:3b:92:f7:
                    29:8c:67:dd:68:e4:d1:6b:da:37:a0:42:d1:20:79:
                    e6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BC:AC:46:70:C9:1A:D1:25:ED:BC:42:42:AD:C2:93:96:C0:CB:A2
            X509v3 Authority Key Identifier:
                keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:8b:d6:30:e6:1d:00:b4:52:4a:dd:54:40:e2:99:dc:33:cd:
         3e:70:1d:6e:f0:0c:2f:9f:9f:33:b7:0b:b7:41:3c:f5:3f:ab:
         b8:dd:12:2b:9b:2c:7a:6d:8c:7d:09:5a:a9:0f:1d:e7:65:df:
         24:8c:3a:b6:e3:2d:af:4a:5a:bd:c3:36:62:9f:5f:2a:df:d6:
         d9:c2:a3:b9:0d:65:fe:9a:a2:a0:94:55:69:5d:cc:c8:ae:a6:
         f6:94:c2:d1:b9:27:6b:13:1a:06:0a:8e:c5:e9:27:ed:d7:77:
         37:d5:60:1c:f6:bf:fd:cf:b5:7a:6b:ad:61:e2:b3:46:3e:c1:
         80:94:7d:22:63:83:ce:9f:29:f7:ea:ba:2d:da:74:6c:80:64:
         6f:1a:91:94:e3:c9:1e:6d:4b:ad:b7:9a:18:4b:08:b0:ce:b6:
         e4:f4:3b:df:59:08:32:53:18:1c:09:48:47:c7:a9:ae:08:3d:
         f0:8f:b4:33:66:23:06:6d:a5:b9:76:fb:9f:fd:84:76:b6:05:
         4d:65:db:57:f9:73:b1:28:d0:a3:b5:62:a5:ca:61:2f:42:cb:
         3d:42:2c:8f:e5:dc:9b:89:f8:0d:4c:d8:68:5e:94:72:ea:0d:
         73:53:96:6c:de:1d:4d:9f:f3:85:b9:1b:6e:b0:31:af:3d:0e:
         ea:47:b3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----