Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3830303a3a2f33372d3438203d3e20323033333134.roa
File:                     323630323a3261333a3830303a3a2f33372d3438203d3e20323033333134.roa (raw, json)
Hash identifier:          CC7tOcejmaHj1vxjzOrpeYJLllFa5iQaj/nBUTML5aE=
Subject key identifier:   4E:E9:D9:B2:61:B7:41:44:CB:5B:1D:6C:56:72:24:AE:D5:D4:98:2A
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       2EA5E42F5556AEC06C1E5BF8A24E5E76F77E7F23
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3830303a3a2f33372d3438203d3e20323033333134.roa
Signing time:             Fri 20 Dec 2024 21:17:51 +0000
ROA not before:           Fri 20 Dec 2024 21:12:51 +0000
ROA not after:            Fri 19 Dec 2025 21:17:51 +0000
asID:                     203314
IP address blocks:        2602:2a3:800::/37 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a5:e4:2f:55:56:ae:c0:6c:1e:5b:f8:a2:4e:5e:76:f7:7e:7f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 20 21:12:51 2024 GMT
            Not After : Dec 19 21:17:51 2025 GMT
        Subject: CN=4EE9D9B261B74144CB5B1D6C567224AED5D4982A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d9:20:2a:da:6a:da:ab:42:2a:d3:71:f8:f5:
                    57:d1:39:50:ee:41:f4:f9:7e:80:3c:e6:3a:72:38:
                    e1:7b:37:3a:67:c2:9d:c8:49:59:cb:9d:38:b2:0a:
                    20:12:6b:91:6a:e9:47:3b:6b:35:77:ac:28:38:3e:
                    30:64:05:9c:6f:43:36:d9:1e:70:d6:d0:ee:e2:fa:
                    7c:17:34:52:4b:6d:43:54:7b:86:78:96:fa:31:7d:
                    76:d0:70:ae:60:18:a5:78:a3:85:82:24:ae:31:67:
                    9d:90:b6:1b:ba:04:8e:00:7c:7a:d3:1e:09:21:d3:
                    a2:8b:76:c2:2e:a0:03:bc:ae:96:3d:c6:82:ff:ce:
                    af:8f:07:a1:e8:d9:63:a4:f8:00:12:61:8e:17:8a:
                    97:a6:a2:89:c4:88:6a:71:bd:cf:86:6f:01:42:e2:
                    c0:ab:a8:5d:9f:a9:79:43:dc:ac:b7:eb:64:2e:24:
                    0c:21:0a:68:9c:0d:9f:f6:21:a9:3d:60:5b:4c:99:
                    47:58:dd:1e:56:7b:ff:24:e8:36:32:29:03:81:98:
                    9b:3a:81:06:3c:43:b3:dd:f2:ea:0b:95:8a:b9:41:
                    82:79:38:57:b6:6b:35:ef:01:ac:4e:de:16:be:dd:
                    bd:6d:40:94:20:a2:a6:bd:c2:34:ab:31:65:d6:09:
                    7a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E9:D9:B2:61:B7:41:44:CB:5B:1D:6C:56:72:24:AE:D5:D4:98:2A
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3830303a3a2f33372d3438203d3e20323033333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         73:d7:9d:15:87:ae:19:94:17:44:7f:ff:9e:76:2a:c1:8e:0a:
         57:38:48:a1:73:72:74:24:be:d1:18:81:30:7e:b9:20:65:c4:
         d1:50:50:69:6c:f8:9a:0a:49:a5:d0:7a:c1:e5:ff:99:ed:fe:
         c0:bb:0f:58:da:83:33:0c:45:35:8e:63:9a:0b:66:ad:50:9f:
         d5:fa:96:52:40:fc:b6:fa:92:2c:d5:46:f9:0b:7e:38:a1:99:
         7c:7f:25:d8:ea:75:0c:06:16:00:16:98:30:d6:71:d2:68:41:
         fb:6c:88:62:a7:54:c6:04:da:3d:49:1b:5c:4e:6d:d4:bc:95:
         15:ee:15:18:4d:03:fa:e6:ce:49:55:c5:00:ec:55:a8:2a:56:
         a2:98:f9:79:58:53:90:1c:af:a5:56:43:77:6b:31:7a:ec:68:
         35:b7:c4:7e:0c:25:9e:5e:1f:8b:8e:f5:06:1f:07:39:56:c3:
         11:28:29:c1:66:ad:de:da:e3:bc:b8:c1:20:ea:4b:35:a6:86:
         77:27:b5:15:1c:35:af:cd:26:21:9e:3e:f1:50:46:2f:2b:94:
         ed:57:08:fb:63:63:d1:08:c3:93:31:6f:50:e1:c4:20:5f:e5:
         9d:4c:b1:54:bc:6f:29:41:5d:34:f8:4c:35:88:44:78:c2:fb:
         6b:35:73:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----