Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/323630323a663931353a323a3a2f34382d3438203d3e20323135343336.roa
File:                     323630323a663931353a323a3a2f34382d3438203d3e20323135343336.roa (raw, json)
Hash identifier:          6S98IewIy4xHv8zYdGreOHE+RfPZYo9dLCMFLusw9Yw=
Subject key identifier:   0B:DD:69:4C:5D:8E:32:00:B3:7C:3C:96:62:98:AC:9A:DF:D8:4D:55
Certificate issuer:       /CN=2b75ca250f10a6d223fa5bcb5d706f1704f864c33e1c55ed51
Certificate serial:       09DDB33AC05E05D4160F5C40ED9165DF8CBA1F00
Authority key identifier: A9:E6:44:E6:E2:C8:B2:4F:DE:A7:74:1E:75:40:08:6D:94:14:11:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250f10a6d223fa5bcb5d706f1704f864c33e1c55ed51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/323630323a663931353a323a3a2f34382d3438203d3e20323135343336.roa
Signing time:             Mon 22 Apr 2024 19:23:38 +0000
ROA not before:           Mon 22 Apr 2024 19:18:38 +0000
ROA not after:            Mon 21 Apr 2025 19:23:38 +0000
asID:                     215436
IP address blocks:        2602:f915:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:dd:b3:3a:c0:5e:05:d4:16:0f:5c:40:ed:91:65:df:8c:ba:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b75ca250f10a6d223fa5bcb5d706f1704f864c33e1c55ed51
        Validity
            Not Before: Apr 22 19:18:38 2024 GMT
            Not After : Apr 21 19:23:38 2025 GMT
        Subject: CN=0BDD694C5D8E3200B37C3C966298AC9ADFD84D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:49:db:1b:4d:16:4e:df:54:e9:26:cd:2e:78:
                    e5:ac:29:d0:a1:20:ef:50:23:19:a6:58:bd:4c:d5:
                    3d:c4:1b:07:f8:6a:2b:74:16:65:45:4b:71:da:0e:
                    bf:56:b9:dd:8a:fa:9e:20:0b:8d:5b:af:26:4d:2d:
                    07:89:31:05:8c:46:ff:b6:ec:69:9b:96:cf:11:fc:
                    4e:06:b8:1c:1d:e4:8a:33:f2:45:64:77:43:ba:28:
                    56:a1:88:68:43:7e:fe:b3:76:e3:8c:24:62:75:2b:
                    ed:cf:5c:87:6e:7f:ff:70:9b:85:fb:e6:f6:c9:34:
                    6c:52:a1:54:8a:3d:d5:65:57:d1:1a:0a:13:0e:15:
                    81:1e:1b:1b:68:7a:12:9a:f6:0e:d2:ca:cc:23:90:
                    ba:a7:21:7c:7d:e1:21:16:9c:ce:bf:56:24:7a:9e:
                    2f:74:1d:e7:eb:c3:bf:08:f5:74:e9:46:31:ae:38:
                    f6:4e:ec:4c:b9:b4:66:b9:2f:35:fd:d4:b2:51:78:
                    6d:d7:84:92:ab:0f:91:b4:84:56:94:6a:23:ef:86:
                    35:0f:4a:f8:45:d5:47:91:07:70:d4:0f:a9:d5:42:
                    22:0b:59:6b:b1:19:1f:e0:7c:59:7d:be:62:fc:8a:
                    a9:dd:17:3f:94:f1:70:1c:6d:45:f8:45:0d:d2:7e:
                    13:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DD:69:4C:5D:8E:32:00:B3:7C:3C:96:62:98:AC:9A:DF:D8:4D:55
            X509v3 Authority Key Identifier:
                keyid:A9:E6:44:E6:E2:C8:B2:4F:DE:A7:74:1E:75:40:08:6D:94:14:11:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/A9E644E6E2C8B24FDEA7741E7540086D941411B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250f10a6d223fa5bcb5d706f1704f864c33e1c55ed51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/323630323a663931353a323a3a2f34382d3438203d3e20323135343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f915:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:40:73:2d:b5:fd:16:c9:83:e8:a2:fa:8e:11:d4:ad:66:04:
         43:81:4c:6b:06:c1:25:86:a0:52:bf:20:90:fd:90:e8:66:f4:
         4d:5c:71:0b:22:ba:78:15:59:49:2f:02:32:3a:7f:39:b5:b0:
         96:f8:5b:96:8b:a8:4b:fc:36:f6:a6:7a:86:bc:bb:30:44:96:
         86:da:5f:e7:2f:f3:3e:8d:5a:45:b5:75:df:e5:5b:66:9d:86:
         f1:92:2e:5f:b9:3b:e1:84:6e:2d:6b:38:32:14:43:ba:f6:82:
         1c:47:48:71:9f:00:b6:33:4d:c1:10:c7:10:c3:10:72:06:71:
         4c:96:bb:4b:b4:c1:69:a2:40:f8:59:bb:ce:7b:d0:56:bd:ba:
         1b:90:3a:4d:3c:c8:d1:2d:8b:2b:cf:7f:79:f0:bd:42:c2:c5:
         f9:e6:ac:72:c4:2c:87:78:bc:08:ed:da:69:ae:28:65:65:43:
         2d:ba:06:30:e8:29:b6:d2:a0:12:ce:4d:36:21:b1:58:c5:e8:
         88:6a:f7:c1:e5:d6:47:a8:ea:47:72:bb:dc:3c:02:05:e0:59:
         58:21:ae:fd:bf:ed:39:65:7d:45:24:16:71:fa:e3:1d:26:a7:
         e0:82:9a:74:e8:2a:60:fa:36:c3:ec:e7:cd:9e:43:51:19:f4:
         4b:d5:7b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----