Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a33303a3a2f34382d3438203d3e203135333533.roa
File:                     323630323a666131313a33303a3a2f34382d3438203d3e203135333533.roa (raw, json)
Hash identifier:          DZJgEQMUwmg6N8/9yTyKw/vgRgm8+aBD3ovVAp7oF4c=
Subject key identifier:   C8:DD:57:69:FC:9A:63:67:91:72:56:51:A3:BA:D5:F8:0B:9F:EB:87
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       5CA9BCA8CCA02A25F37042D7E5BA3C120695DD4D
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a33303a3a2f34382d3438203d3e203135333533.roa
Signing time:             Mon 13 May 2024 18:43:08 +0000
ROA not before:           Mon 13 May 2024 18:38:08 +0000
ROA not after:            Mon 12 May 2025 18:43:08 +0000
asID:                     15353
IP address blocks:        2602:fa11:30::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a9:bc:a8:cc:a0:2a:25:f3:70:42:d7:e5:ba:3c:12:06:95:dd:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: May 13 18:38:08 2024 GMT
            Not After : May 12 18:43:08 2025 GMT
        Subject: CN=C8DD5769FC9A636791725651A3BAD5F80B9FEB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:5e:3a:45:9d:81:86:9a:76:66:23:f2:47:
                    3a:97:05:47:17:e8:54:ac:1c:cf:74:cc:71:66:26:
                    0d:95:4f:71:60:20:90:c5:f4:d9:76:20:b7:c7:c4:
                    63:39:ec:1d:33:7d:80:e8:95:c0:2b:b3:a2:cf:29:
                    ec:46:c7:d1:e3:12:27:06:91:6a:5c:e2:6c:91:7b:
                    6a:0e:bf:ec:31:64:f6:82:11:62:59:b5:e2:76:c4:
                    fd:36:46:ef:4b:80:fb:b1:18:e1:dd:0d:4e:f6:90:
                    b1:94:33:f7:fc:de:03:1f:ca:a9:e3:69:b9:7b:7a:
                    01:ad:35:c2:9e:08:62:bb:fe:e0:11:91:90:f7:8f:
                    3a:19:b2:e0:b4:ec:b9:9f:01:d7:d8:3d:cb:64:4a:
                    07:05:2e:eb:92:59:fe:ea:98:0a:e6:19:ae:c0:f8:
                    c8:ae:51:9e:2a:0b:48:e3:4d:44:2b:e5:9e:77:52:
                    d7:1e:2e:8f:6e:5a:93:92:27:76:2a:c4:a9:3b:cd:
                    c7:af:97:71:9d:fb:a2:fa:5e:78:68:03:56:04:0e:
                    05:42:59:ca:25:75:1f:d2:06:a1:e4:38:b7:93:df:
                    60:69:cd:be:71:d2:35:7c:fa:5f:57:96:0e:c2:a1:
                    b4:c1:4f:6a:ee:5c:57:3a:2b:76:9b:b3:a6:38:55:
                    8f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DD:57:69:FC:9A:63:67:91:72:56:51:A3:BA:D5:F8:0B:9F:EB:87
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a33303a3a2f34382d3438203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:4b:8e:01:db:38:b5:a0:ba:30:1a:6b:4a:c6:d9:06:89:15:
         ce:15:c1:de:a0:0e:2a:f2:63:b9:75:cd:0c:d2:d7:4e:8d:e4:
         6e:1f:16:85:d1:9f:d7:4d:6b:01:65:8d:2a:e8:0f:24:be:ab:
         48:10:a0:fa:8d:d1:0b:f9:94:ba:44:c8:c7:ea:89:91:9a:f7:
         af:eb:af:5e:86:71:2a:5d:9b:de:ec:d1:f0:77:e5:fa:df:32:
         f1:a4:6a:2b:44:1f:4b:ce:7c:d9:ba:72:3a:29:1e:0d:8e:17:
         fc:b7:4c:90:51:86:34:98:6d:08:92:60:80:2b:6f:28:3f:ad:
         3b:78:32:26:e4:b1:85:d8:1c:23:08:6d:bd:08:72:61:49:18:
         07:24:9c:59:3a:71:11:b9:df:89:5a:2f:41:3c:f1:14:49:a8:
         31:2e:11:94:96:6a:3c:62:bf:d1:be:6c:f9:74:80:13:da:c4:
         f3:7a:96:38:63:24:3e:c1:fb:c8:67:96:b2:c5:cf:ec:f6:99:
         97:52:13:2a:75:d3:83:6b:2e:f1:e5:cc:eb:a1:ad:f0:0c:ad:
         fe:65:ad:fd:9a:3f:86:4d:f4:28:91:62:47:6b:7f:c3:97:9b:
         49:7f:e0:28:38:ce:ed:9b:10:b6:01:2c:49:5d:4c:b0:bb:62:
         12:3b:59:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----