Route Origin Authorization

$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630373a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a666161353a6630373a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          gmyfoC4/gClP2a0dbNDwu7bsrI8VQXsWO6AQkaEv7Z4=
Subject key identifier:   B0:C7:13:68:7B:C2:E0:D0:9A:A1:53:D0:BC:84:FF:C5:8D:3E:8B:C2
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       64B6F91C0D03277BFF3A92427A8A31117AFF917E
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630373a3a2f34382d3438203d3e203630393030.roa
Signing time:             Mon 20 Jan 2025 05:01:52 +0000
ROA not before:           Mon 20 Jan 2025 04:56:52 +0000
ROA not after:            Mon 19 Jan 2026 05:01:52 +0000
asID:                     60900
IP address blocks:        2602:faa5:f07::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b6:f9:1c:0d:03:27:7b:ff:3a:92:42:7a:8a:31:11:7a:ff:91:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Jan 20 04:56:52 2025 GMT
            Not After : Jan 19 05:01:52 2026 GMT
        Subject: CN=B0C713687BC2E0D09AA153D0BC84FFC58D3E8BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:21:eb:ea:ec:26:05:12:e5:17:9a:9a:13:0e:
                    47:a6:ce:8c:ca:a4:da:72:eb:6d:0e:3e:01:7e:d4:
                    ed:5f:3c:c2:47:87:03:e7:4d:72:f9:7a:1b:eb:e9:
                    0a:8b:ab:dd:d1:2b:f2:14:c4:79:80:ab:1c:eb:9d:
                    ec:6c:f4:ff:37:5f:89:19:d8:a2:a4:65:88:5e:dc:
                    32:51:45:39:ab:32:3f:a4:c6:69:62:b5:1e:20:f5:
                    70:aa:b6:78:ee:67:9a:04:59:df:f6:d0:7a:1a:7f:
                    bd:96:69:0c:a6:01:a6:69:1e:e1:95:9a:ab:5f:55:
                    fa:0f:8a:42:16:af:b7:75:73:40:5c:67:6d:30:66:
                    a2:77:07:c9:dd:54:a0:d8:2c:76:83:7e:19:b3:fa:
                    46:b0:da:78:a2:3b:6d:56:21:b6:98:29:58:17:c9:
                    6e:b9:8e:f8:97:04:fd:b5:5f:d9:db:43:4a:f0:06:
                    7b:fb:72:4d:ae:b9:f1:a8:9b:1e:af:2c:5e:a0:21:
                    a8:f4:24:d9:53:6b:b6:04:58:32:3e:f5:cd:1b:5f:
                    81:19:5a:f5:ab:fc:20:77:ac:de:dc:e6:aa:a2:ca:
                    29:e9:25:3a:7f:78:f6:81:4a:0e:1c:20:3a:df:fa:
                    52:4e:c0:57:ae:48:4f:56:35:d6:20:bc:7c:f6:a9:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C7:13:68:7B:C2:E0:D0:9A:A1:53:D0:BC:84:FF:C5:8D:3E:8B:C2
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630373a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f07::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:db:e0:a8:7a:a8:da:fd:d8:d7:41:b1:2c:a8:1d:2e:45:4e:
         73:59:bf:82:d2:8f:34:93:26:b5:7c:c9:17:48:90:8b:b0:3a:
         9e:ed:b7:03:80:3d:db:58:af:b2:51:c2:16:e9:4d:77:0b:ce:
         c4:10:d9:26:10:f9:1b:17:19:b8:75:87:d8:d7:c6:04:52:ca:
         f8:f5:a3:e1:27:9c:c2:85:f5:8f:5e:ac:85:c6:86:c4:6d:af:
         7b:d0:9c:59:6f:d8:1e:83:85:c7:52:e6:42:e1:48:3f:c8:d4:
         ee:b6:45:4d:58:5b:ce:a6:a5:2d:48:70:57:ed:c4:0f:c6:f6:
         6c:89:e9:cb:a6:d1:6f:d9:7e:2b:c3:9e:f5:64:a3:05:5a:d8:
         e7:e9:b5:d0:94:73:b9:8e:7c:26:c3:a9:ad:d2:c0:b2:54:a7:
         c1:e8:07:1c:bc:d4:ca:f2:72:7d:52:1f:4e:d3:74:02:aa:80:
         f9:b5:74:79:33:bb:87:b3:50:77:d9:a4:e6:d0:ab:3e:de:5b:
         1a:07:f9:c8:71:bb:29:6a:4d:66:69:f6:0f:67:e1:88:a3:b5:
         29:71:57:03:a5:2d:ae:98:69:60:e5:42:8a:48:2c:aa:6f:86:
         23:2b:19:a3:3b:ab:8d:c7:da:43:70:7d:b9:9a:8d:77:4a:67:
         4c:27:53:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----