Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a39303a3a2f34382d3438203d3e203135333533.roa
File:                     323630323a666131313a39303a3a2f34382d3438203d3e203135333533.roa (raw, json)
Hash identifier:          nrCxml7IGmRP8QGKeRHbkL1wh6c0DFqqPH7py/1Ipzs=
Subject key identifier:   84:C0:C7:0B:49:AC:17:08:D7:55:55:53:FA:4F:61:CC:BF:71:97:2D
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       130E453C05ECB2B624CD032916B97D143F98F16B
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a39303a3a2f34382d3438203d3e203135333533.roa
Signing time:             Sat 02 Mar 2024 02:26:09 +0000
ROA not before:           Sat 02 Mar 2024 02:21:09 +0000
ROA not after:            Sat 01 Mar 2025 02:26:09 +0000
asID:                     15353
IP address blocks:        2602:fa11:90::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0e:45:3c:05:ec:b2:b6:24:cd:03:29:16:b9:7d:14:3f:98:f1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Mar  2 02:21:09 2024 GMT
            Not After : Mar  1 02:26:09 2025 GMT
        Subject: CN=84C0C70B49AC1708D7555553FA4F61CCBF71972D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:ef:e7:d3:7e:15:e9:2d:de:f6:14:bb:56:
                    9e:24:08:9d:ad:ff:f4:00:36:1e:ea:af:a3:96:6a:
                    b6:87:14:b9:0a:d9:9c:0f:58:05:5c:b2:df:73:05:
                    dd:d4:81:c4:ac:6e:c2:f6:bd:b7:87:dc:45:3d:f9:
                    ee:a9:45:b6:61:6d:77:23:3e:14:96:9e:75:d4:77:
                    23:ae:59:43:0c:bf:33:d1:47:47:22:d7:6e:dd:ee:
                    51:a9:59:80:fe:5b:af:ee:f6:55:a7:2a:51:ae:8a:
                    74:fb:39:f4:39:15:67:8c:b0:73:30:0d:cb:78:9d:
                    30:66:05:c3:af:8f:d5:6c:45:b5:22:00:0d:68:03:
                    94:9d:72:d7:99:52:3d:f8:16:e6:22:e5:1b:21:a5:
                    a9:cd:a1:ce:c8:77:ff:6d:8d:e7:13:2b:6a:a1:a8:
                    a2:01:81:d3:83:02:da:17:c3:90:05:66:73:fb:67:
                    23:e7:5b:f7:a2:bb:e3:1c:dd:59:c7:26:48:5e:a6:
                    fc:82:76:6b:bc:f9:21:6b:1e:7a:ea:96:ae:b0:77:
                    d6:ac:bb:b4:0a:87:7e:21:8f:f4:f8:31:45:db:61:
                    2d:a5:8e:3e:4a:a9:b4:6e:41:d8:3c:b1:9d:b8:45:
                    3f:16:84:5f:08:f4:01:2e:78:f3:c1:1f:b2:02:ed:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C0:C7:0B:49:AC:17:08:D7:55:55:53:FA:4F:61:CC:BF:71:97:2D
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a39303a3a2f34382d3438203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:90::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:f0:18:dd:72:05:7a:d1:6a:2b:64:07:03:b1:8a:01:f5:48:
         07:3f:7a:83:42:c5:aa:85:bd:4a:81:04:2d:8a:99:41:96:71:
         e4:7b:a9:a3:bc:04:29:c6:71:36:38:c4:8d:49:17:99:28:7a:
         d6:dc:5b:2d:13:dd:3d:dc:b6:03:50:2b:5a:01:18:97:62:af:
         12:83:85:a8:f8:42:09:41:02:3f:ab:20:55:0e:11:14:59:86:
         79:d0:40:7d:50:2c:43:dc:7e:a7:72:2e:73:ce:2b:38:ac:d6:
         f2:e5:11:a5:75:a5:ac:74:f0:43:68:52:50:68:07:61:f0:03:
         0a:a0:d1:63:8c:81:62:d2:4b:29:f7:9f:df:67:2a:0e:a3:44:
         aa:a7:37:67:3e:6f:84:79:ff:17:37:0f:cd:85:4b:82:cf:b0:
         fa:0b:8b:86:0d:35:fb:3d:3a:e8:8e:27:12:55:e3:85:04:b9:
         4a:26:b2:8d:e1:7d:8c:66:3b:dd:46:4d:50:08:f7:f1:9d:05:
         96:42:de:fe:8a:36:2c:64:7f:a4:79:b8:3a:1f:cf:dd:b7:ae:
         8c:c0:f0:ba:a2:fc:61:27:67:19:f9:d4:8f:89:04:93:01:84:
         d6:a1:83:fa:5c:00:43:fb:ac:da:b1:7f:1d:b0:64:b2:6a:c5:
         17:bd:fa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----