Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3130303a3a2f34302d3438203d3e20323033333134.roa
File:                     323630323a3261333a3130303a3a2f34302d3438203d3e20323033333134.roa (raw, json)
Hash identifier:          aBHjJtoAqc+k3HPlPJG28gTRdcDhnb8MZRG1kGU5wkY=
Subject key identifier:   50:84:0F:F5:6F:A8:3F:01:FA:88:66:F7:67:5B:E2:6E:CE:A1:C5:F9
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       5F1447FC0948FBB961DE7B602B6F82A45AA3FC93
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3130303a3a2f34302d3438203d3e20323033333134.roa
Signing time:             Fri 20 Dec 2024 21:17:48 +0000
ROA not before:           Fri 20 Dec 2024 21:12:48 +0000
ROA not after:            Fri 19 Dec 2025 21:17:48 +0000
asID:                     203314
IP address blocks:        2602:2a3:100::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:14:47:fc:09:48:fb:b9:61:de:7b:60:2b:6f:82:a4:5a:a3:fc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 20 21:12:48 2024 GMT
            Not After : Dec 19 21:17:48 2025 GMT
        Subject: CN=50840FF56FA83F01FA8866F7675BE26ECEA1C5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8b:a9:0b:fd:6b:4f:bb:f0:8f:97:b3:8a:ce:
                    86:4f:e4:b8:f2:fd:6a:c5:e3:dc:1e:b6:06:33:19:
                    90:5b:91:3d:09:f0:f3:b7:45:84:1d:44:d6:22:20:
                    1f:a1:85:5a:9e:d3:f2:35:03:2b:ce:53:0d:0a:f7:
                    7b:75:da:ad:27:41:41:8a:a5:23:af:9f:8e:ac:06:
                    20:3e:dd:41:8e:f7:2d:8b:ef:68:a1:30:6c:17:57:
                    22:41:a7:42:b4:76:7a:a7:31:d2:0e:fd:53:b3:4f:
                    c2:b5:cc:17:c1:52:6c:ec:8d:9c:82:68:9b:24:05:
                    49:26:60:68:2e:24:40:f1:0e:9a:eb:a5:7d:21:7a:
                    40:7a:9c:80:66:04:7e:1f:10:5b:d7:b6:14:70:cd:
                    44:47:e8:11:12:c6:b9:b5:53:c7:47:f1:c5:0a:e3:
                    ae:3c:5d:ab:b7:58:7f:d9:5f:f2:cd:fa:9d:55:fb:
                    ed:94:c3:50:e6:10:5c:25:d6:a4:c8:d6:cc:63:fe:
                    3c:3f:37:3c:64:95:ca:e7:59:17:72:8a:ce:a7:5d:
                    65:70:88:a7:2c:2e:00:3f:66:a4:bc:41:43:6d:81:
                    4c:dd:46:91:b6:31:6a:39:e3:84:e2:ec:73:ae:2e:
                    07:a5:0c:ab:46:d3:5f:2c:4f:01:4b:a4:cf:ef:0b:
                    8d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:84:0F:F5:6F:A8:3F:01:FA:88:66:F7:67:5B:E2:6E:CE:A1:C5:F9
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3130303a3a2f34302d3438203d3e20323033333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:59:0e:ac:2d:75:66:37:9b:e1:66:aa:ef:1c:7c:9e:af:ef:
         31:15:83:82:bd:49:70:71:c1:ca:fd:c3:13:d6:80:14:db:cf:
         1d:a3:e3:e8:97:28:47:ae:b9:ff:a8:6b:0e:0e:84:c2:e6:90:
         e1:1e:cf:75:4c:93:66:5a:bc:1c:46:0d:86:67:ba:3d:0b:56:
         ec:d4:f1:ea:25:e3:55:14:c9:fd:a3:7f:8e:57:89:1c:15:57:
         ad:4b:e4:b0:56:84:48:2f:87:c2:c8:98:df:52:2b:4c:de:9e:
         6a:0a:83:98:8b:17:e1:90:e0:a9:e2:af:06:76:a3:c0:d1:bf:
         fa:93:af:3a:af:20:97:f7:26:ce:9e:9d:e2:7e:cf:89:a2:3b:
         17:92:4a:db:dd:b1:f4:83:2e:37:21:d4:de:1f:f3:d4:f4:9e:
         8d:40:5e:ef:8e:2a:7c:3f:5a:64:30:dc:20:80:f7:51:14:14:
         4b:46:ae:d7:3f:7a:31:44:79:04:34:c7:98:30:3b:f5:5c:ef:
         32:cb:c4:01:de:cd:fe:c0:c3:cc:f4:b4:5c:25:9f:95:9a:3f:
         9c:17:01:93:5e:d8:46:c1:7c:7a:f7:0a:87:86:9e:84:f6:d7:
         63:4f:93:ba:79:48:48:7d:d6:42:39:75:d8:ff:2b:e1:61:5d:
         67:43:e7:c6
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIUXxRH/AlI+7lh3ntgK2+CpFqj/JMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzIwM2RlOWE5M2E2MTM2MjRmZWJmOGNlZjg1ZWIxNzZm
ZWI1NDU0MDUxYmJmNjljM2UwHhcNMjQxMjIwMjExMjQ4WhcNMjUxMjE5MjExNzQ4
WjAzMTEwLwYDVQQDEyg1MDg0MEZGNTZGQTgzRjAxRkE4ODY2Rjc2NzVCRTI2RUNF
QTFDNUY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4upC/1rT7vw
j5ezis6GT+S48v1qxePcHrYGMxmQW5E9CfDzt0WEHUTWIiAfoYVantPyNQMrzlMN
Cvd7ddqtJ0FBiqUjr5+OrAYgPt1Bjvcti+9ooTBsF1ciQadCtHZ6pzHSDv1Ts0/C
tcwXwVJs7I2cgmibJAVJJmBoLiRA8Q6a66V9IXpAepyAZgR+HxBb17YUcM1ER+gR
Esa5tVPHR/HFCuOuPF2rt1h/2V/yzfqdVfvtlMNQ5hBcJdakyNbMY/48Pzc8ZJXK
51kXcorOp11lcIinLC4AP2akvEFDbYFM3UaRtjFqOeOE4uxzri4HpQyrRtNfLE8B
S6TP7wuNwwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFFCED/VvqD8B+ohm92db4m7O
ocX5MB8GA1UdIwQYMBaAFBeo6HBgiZvbhmqhD4exO4oEfKyZMA4GA1UdDwEB/wQE
AwIHgDBlBgNVHR8EXjBcMFqgWKBWhlRyc3luYzovL3Jwa2kuc3Vub2FraS5uZXQv
cmVwby9TVU5PQUtJLzAvMTdBOEU4NzA2MDg5OUJEQjg2NkFBMTBGODdCMTNCOEEw
NDdDQUM5OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03Jz
eW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRh
MjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00
YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q0MGU2Y2FiLWU2NmMtNGNhNy1hYjYxLTEy
NmIzY2ZjYmI4Ni83MjAzZGU5YTkzYTYxMzYyNGZlYmY4Y2VmODVlYjE3NmZlYjU0
NTQwNTFiYmY2OWMzZS5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpLnN1bm9ha2kubmV0L3JlcG8vU1VOT0FLSS8wLzMyMzYzMDMy
M2EzMjYxMzMzYTMxMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMzMz
MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGACYCAqMBMA0GCSqGSIb3DQEBCwUAA4IBAQBsWQ6sLXVm
N5vhZqrvHHyer+8xFYOCvUlwccHK/cMT1oAU288do+PolyhHrrn/qGsODoTC5pDh
Hs91TJNmWrwcRg2GZ7o9C1bs1PHqJeNVFMn9o3+OV4kcFVetS+SwVoRIL4fCyJjf
UitM3p5qCoOYixfhkOCp4q8GdqPA0b/6k686ryCX9ybOnp3ifs+JojsXkkrb3bH0
gy43IdTeH/PU9J6NQF7vjip8P1pkMNwggPdRFBRLRq7XP3oxRHkENMeYMDv1XO8y
y8QB3s3+wMPM9LRcJZ+Vmj+cFwGTXthGwXx69wqHhp6E9tdjT5O6eUhIfdZCOXXY
/yvhYV1nQ+fG
-----END CERTIFICATE-----