Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/323630323a663931353a333a3a2f34382d3438203d3e20323135343336.roa
File:                     323630323a663931353a333a3a2f34382d3438203d3e20323135343336.roa (raw, json)
Hash identifier:          gmombQadxl+88nQmKd5yEkx7GBfxirOuFdT96l/mP6s=
Subject key identifier:   3D:9B:E9:16:6A:07:CC:80:CA:CD:5D:A2:EC:D1:00:84:F6:AD:52:CB
Certificate issuer:       /CN=2b75ca250f10a6d223fa5bcb5d706f1704f864c33e1c55ed51
Certificate serial:       62BE8877D2564E89433362E6A48B927ED57D24C7
Authority key identifier: A9:E6:44:E6:E2:C8:B2:4F:DE:A7:74:1E:75:40:08:6D:94:14:11:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250f10a6d223fa5bcb5d706f1704f864c33e1c55ed51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/323630323a663931353a333a3a2f34382d3438203d3e20323135343336.roa
Signing time:             Mon 22 Apr 2024 19:23:47 +0000
ROA not before:           Mon 22 Apr 2024 19:18:47 +0000
ROA not after:            Mon 21 Apr 2025 19:23:47 +0000
asID:                     215436
IP address blocks:        2602:f915:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:be:88:77:d2:56:4e:89:43:33:62:e6:a4:8b:92:7e:d5:7d:24:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b75ca250f10a6d223fa5bcb5d706f1704f864c33e1c55ed51
        Validity
            Not Before: Apr 22 19:18:47 2024 GMT
            Not After : Apr 21 19:23:47 2025 GMT
        Subject: CN=3D9BE9166A07CC80CACD5DA2ECD10084F6AD52CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:a7:c1:a6:21:59:ab:fc:8b:69:c5:f9:2e:
                    fc:95:31:29:29:e6:c6:f6:4b:46:55:a7:a7:6a:33:
                    dd:3f:72:51:75:99:41:68:99:2e:0b:4d:7e:bd:93:
                    4a:35:67:9f:1c:16:06:8b:69:ff:08:54:9b:5b:8d:
                    82:ac:0b:4e:8b:bf:8f:f6:4f:b0:51:67:9b:38:ad:
                    da:14:c7:87:dc:e2:7c:31:15:12:94:43:4a:67:7d:
                    10:f3:78:32:3e:54:78:f4:01:ad:fc:d0:ba:ef:ea:
                    f2:60:22:a1:be:27:e7:aa:a4:be:18:b6:3c:d1:ba:
                    6f:69:90:b7:08:23:ae:20:03:1b:53:39:66:3f:dc:
                    3d:b8:c7:4c:88:5b:e8:9b:64:d3:3e:f5:09:96:28:
                    2a:e2:9b:d8:2a:70:68:3b:cb:44:55:78:01:90:bc:
                    cd:ba:b9:92:64:4d:2f:20:73:a6:b3:ef:f2:85:83:
                    cc:71:14:f5:9f:89:42:1f:91:8f:cd:e9:34:8d:e8:
                    68:b1:0b:e9:6e:16:0a:d5:f3:a4:e3:09:82:12:53:
                    b8:99:23:27:65:76:a7:b9:a3:c5:cb:99:28:ac:17:
                    27:9d:08:25:b3:da:9e:b3:c8:05:1a:29:ec:0a:bd:
                    b2:68:d1:ff:72:e1:87:c9:fa:79:f1:45:97:19:e3:
                    10:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9B:E9:16:6A:07:CC:80:CA:CD:5D:A2:EC:D1:00:84:F6:AD:52:CB
            X509v3 Authority Key Identifier:
                keyid:A9:E6:44:E6:E2:C8:B2:4F:DE:A7:74:1E:75:40:08:6D:94:14:11:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/A9E644E6E2C8B24FDEA7741E7540086D941411B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250f10a6d223fa5bcb5d706f1704f864c33e1c55ed51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/323630323a663931353a333a3a2f34382d3438203d3e20323135343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f915:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:9b:bb:4a:79:52:fd:31:0b:1c:52:dd:49:04:a7:4b:86:7b:
         70:ea:9f:a2:8f:bd:e6:ee:ad:34:3d:f6:12:ba:3c:8e:86:22:
         26:d2:b5:4e:fc:b5:2d:4a:8d:15:f1:b3:0e:e1:05:6d:a2:ce:
         39:48:d3:2d:88:21:51:d3:a7:ea:8b:e9:b9:d4:f2:5c:45:c3:
         33:15:2b:8f:8b:5d:bf:54:3f:86:49:a4:97:02:19:39:cc:a1:
         75:16:82:39:fe:53:cf:2b:c2:e4:23:04:72:ed:32:c0:fa:9e:
         03:c6:6c:1e:da:23:ab:83:a4:67:96:47:10:ec:d0:a9:35:90:
         aa:de:0a:99:50:94:f1:bd:ab:70:a4:38:7c:58:c5:ba:67:54:
         18:93:81:b2:09:08:09:cf:3c:c7:21:bf:a4:38:70:fb:b6:ea:
         fd:8a:a1:38:3a:10:7d:ac:89:7c:c6:de:f4:f5:61:17:ba:b8:
         92:21:ee:8a:60:a2:d3:63:47:e2:b4:02:2d:6d:5a:23:c9:8f:
         46:02:c0:1b:20:d1:c8:51:92:e7:62:08:8b:36:a6:92:42:dd:
         38:e2:37:72:1a:57:e7:d0:51:a8:1b:29:c4:82:3b:4f:cf:48:
         6c:27:34:73:8f:f8:f8:94:34:51:4b:51:6d:5b:20:63:39:8d:
         e9:a2:70:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org