Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a623a3a2f34382d3438203d3e203133383532.roa
File:                     323630323a663766663a623a3a2f34382d3438203d3e203133383532.roa (raw, json)
Hash identifier:          P0e96u9n2kfllVLKLgVE+UNoj2PaZ6HDSPCTePHnYNE=
Subject key identifier:   E3:B1:9D:05:51:CD:8D:7D:E0:11:8C:4D:65:14:90:ED:73:0B:4D:F3
Certificate issuer:       /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Certificate serial:       161C0644DED1F53E4FC7A488F9D98945F8986DF8
Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a623a3a2f34382d3438203d3e203133383532.roa
Signing time:             Tue 19 Nov 2024 17:28:36 +0000
ROA not before:           Tue 19 Nov 2024 17:23:36 +0000
ROA not after:            Tue 18 Nov 2025 17:28:36 +0000
asID:                     13852
IP address blocks:        2602:f7ff:b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1c:06:44:de:d1:f5:3e:4f:c7:a4:88:f9:d9:89:45:f8:98:6d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
        Validity
            Not Before: Nov 19 17:23:36 2024 GMT
            Not After : Nov 18 17:28:36 2025 GMT
        Subject: CN=E3B19D0551CD8D7DE0118C4D651490ED730B4DF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8c:3e:58:18:25:63:13:88:72:b0:a0:be:1e:
                    8a:73:94:86:c7:49:3f:7c:a1:56:c4:82:6a:f9:00:
                    d9:eb:f9:47:5a:62:98:11:f2:fc:bd:43:75:d1:52:
                    61:f2:ca:1d:9f:0c:f1:dc:6f:47:f5:b8:a0:b6:82:
                    6e:bd:c7:94:db:ed:2d:60:e6:a4:66:24:86:44:1d:
                    da:a2:00:f6:6d:fc:a5:cc:84:76:37:52:4c:11:5a:
                    5e:61:fe:64:c9:d7:6f:95:4f:7b:74:ff:ca:01:73:
                    c9:83:43:94:92:8c:55:93:7f:7b:79:18:cb:a9:81:
                    ae:1f:5d:70:dd:ca:09:0c:67:65:de:51:35:8b:1d:
                    99:7a:c5:a1:b3:b1:fa:60:82:a2:19:78:10:2f:07:
                    78:db:d2:4e:f5:4a:f3:93:bb:93:cc:81:75:43:57:
                    68:a0:0a:99:98:bd:ba:b0:92:c4:c2:a0:ce:d4:b9:
                    27:af:2c:b6:6b:84:92:bc:92:79:26:2b:d9:6e:4f:
                    41:36:fa:4f:4b:49:8f:af:e6:a8:53:c8:2c:5a:51:
                    8f:a2:eb:f2:20:30:9a:64:2b:a0:e0:e1:1b:ce:32:
                    5b:00:5f:b9:9c:00:17:96:e1:05:3c:53:fb:0e:64:
                    83:88:24:4a:a3:db:20:ba:21:ab:1a:74:67:9a:63:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B1:9D:05:51:CD:8D:7D:E0:11:8C:4D:65:14:90:ED:73:0B:4D:F3
            X509v3 Authority Key Identifier:
                keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a623a3a2f34382d3438203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ff:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:1c:5b:c3:ab:ec:73:7b:ed:9e:8d:20:63:25:a0:aa:48:86:
         19:ff:72:6a:d9:3f:6a:d7:62:bc:14:95:c0:06:90:30:be:83:
         99:3f:ef:0e:6d:b5:c1:01:38:69:09:87:48:68:e5:80:5d:7c:
         31:fe:ad:46:ce:55:6e:1b:4f:c5:95:48:d1:6f:a2:bf:1f:eb:
         d3:b3:ac:eb:27:47:ec:62:3e:33:ad:66:bc:ca:ca:f9:f5:dd:
         0a:7a:de:0d:f4:33:1b:bb:1f:58:bd:d3:ef:a9:b9:d2:b6:50:
         56:cf:b5:16:00:d0:32:a3:93:3a:09:5b:5a:4f:3d:35:68:0f:
         ba:9e:02:35:2f:ae:91:cb:ff:af:62:69:ff:c8:7f:73:59:06:
         5d:2b:b9:ce:1d:ba:68:da:18:34:07:6a:69:b3:a2:a0:d3:e1:
         91:c9:7d:18:90:94:55:61:dc:72:37:bc:7f:50:a8:b9:0a:27:
         04:1a:a5:99:67:68:17:7f:28:f5:23:95:cb:e3:ca:88:3b:bc:
         4b:19:a2:f4:e0:1a:08:e6:b5:b6:2c:ca:05:39:c3:20:4a:83:
         78:97:98:39:a5:38:10:fd:49:93:9f:5a:53:9c:eb:0e:6e:0c:
         05:fe:ba:ad:e9:58:23:4f:d9:f3:b2:83:22:87:67:b2:f2:89:
         ad:a0:81:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----