Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a31303a3a2f34342d3434203d3e203133383532.roa
File:                     323630323a663766663a31303a3a2f34342d3434203d3e203133383532.roa (raw, json)
Hash identifier:          qVVSiSIdf3JARqfKMypInRkZ0SJ7s9R+RmB0x0L/zRQ=
Subject key identifier:   C3:AF:21:62:26:C6:0A:BF:D1:6E:11:0F:8C:83:3E:69:69:D0:AB:F5
Certificate issuer:       /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Certificate serial:       33610D0F04453C5308991231A651CC7DFF87B1A8
Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a31303a3a2f34342d3434203d3e203133383532.roa
Signing time:             Fri 20 Sep 2024 08:15:14 +0000
ROA not before:           Fri 20 Sep 2024 08:10:14 +0000
ROA not after:            Fri 19 Sep 2025 08:15:14 +0000
asID:                     13852
IP address blocks:        2602:f7ff:10::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:61:0d:0f:04:45:3c:53:08:99:12:31:a6:51:cc:7d:ff:87:b1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
        Validity
            Not Before: Sep 20 08:10:14 2024 GMT
            Not After : Sep 19 08:15:14 2025 GMT
        Subject: CN=C3AF216226C60ABFD16E110F8C833E6969D0ABF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:44:0d:d6:cd:5d:4c:a9:cb:92:1c:a1:37:f1:
                    3a:c2:55:c4:8d:44:6b:cc:8f:59:8c:7b:74:d9:79:
                    10:22:63:b7:71:f6:37:a5:f0:13:77:b4:11:cf:3e:
                    d5:c4:6f:57:b7:c2:54:df:2e:56:dc:46:bc:d2:b9:
                    e4:8d:1b:34:d5:d1:43:97:f2:52:f2:c6:0a:04:be:
                    71:29:53:9f:dd:21:42:7d:2c:b4:25:3e:c4:51:5e:
                    91:1d:c6:80:a9:c0:d8:1e:47:7c:7a:88:51:56:16:
                    63:ca:b5:c0:a5:aa:80:c0:64:6a:22:dc:b1:22:58:
                    3e:c8:c1:43:82:b1:8f:00:b4:47:0f:06:e2:6d:a3:
                    01:07:12:ac:c3:8e:98:18:a5:b2:ac:92:e6:dd:12:
                    8f:97:19:a8:bb:55:cb:84:cb:15:cc:86:89:8f:f5:
                    31:07:14:6f:37:4b:a4:99:60:75:16:b5:21:c7:35:
                    72:52:b9:e9:bc:65:21:55:2f:2d:0f:02:41:92:97:
                    16:5d:e8:b4:d2:84:1f:9d:ff:bb:e5:c3:50:06:71:
                    90:a0:a5:b6:86:2b:9f:99:cd:2a:cb:83:1a:0e:b8:
                    e2:f6:84:25:43:5e:b7:40:f5:aa:0e:1e:60:af:00:
                    54:85:dc:1e:79:e4:4d:aa:9c:fe:9a:26:23:8f:04:
                    aa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AF:21:62:26:C6:0A:BF:D1:6E:11:0F:8C:83:3E:69:69:D0:AB:F5
            X509v3 Authority Key Identifier:
                keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a31303a3a2f34342d3434203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ff:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         54:e0:93:ff:e8:d9:43:9e:53:a0:60:0e:72:af:b5:dc:ed:7c:
         65:4d:39:9e:62:51:6e:6d:f6:08:96:fa:35:50:4c:fa:1c:81:
         46:98:94:01:53:19:7f:61:62:94:91:0e:42:8d:d6:cd:27:b3:
         a9:33:90:b5:f1:db:69:47:e1:16:01:23:eb:0f:fe:e9:40:77:
         fa:19:a6:27:57:63:60:58:92:20:66:d6:23:9b:19:b9:f7:ff:
         10:e2:cd:dc:27:4b:35:a2:da:d0:3e:78:cf:58:2a:d2:3c:9c:
         a4:4a:fa:2f:1b:23:25:44:6a:26:81:93:65:2c:e0:c0:78:6f:
         5a:b8:59:11:e5:18:3a:12:3b:3d:0c:e0:9d:a5:7c:82:37:1e:
         41:f7:e9:cb:f6:45:ff:3c:7e:c3:34:01:7c:84:e0:9a:61:5d:
         ca:12:66:b5:17:f6:cd:30:18:58:c4:8a:8b:4f:9b:21:ac:dc:
         9c:b3:ee:30:2e:f4:48:42:4e:08:6f:ae:82:56:d8:2c:12:28:
         c7:24:e0:08:35:f4:24:93:b1:a7:80:a9:9b:74:58:92:a0:92:
         a7:a7:58:12:43:72:c5:1b:e3:6f:26:a4:20:f2:61:03:e2:55:
         a4:a2:cc:07:ac:66:be:76:c9:02:77:ee:8b:92:70:57:38:bb:
         7b:dc:3c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----