Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a62303a3a2f34342d3438203d3e20343031313037.roa
File:                     323630323a663939323a62303a3a2f34342d3438203d3e20343031313037.roa (raw, json)
Hash identifier:          IZrxMk6OV/92rpAnPcsFE+Xu3xGUpjdqBdAs//cVWUA=
Subject key identifier:   30:5F:C4:6A:40:6E:9D:53:C4:24:2A:5B:B7:7C:7D:AD:C1:EB:61:6A
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       4A77AC714CE8C7CA714BF0C02AA5339CE59ED2AD
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a62303a3a2f34342d3438203d3e20343031313037.roa
Signing time:             Thu 30 May 2024 04:13:30 +0000
ROA not before:           Thu 30 May 2024 04:08:30 +0000
ROA not after:            Thu 29 May 2025 04:13:30 +0000
asID:                     401107
IP address blocks:        2602:f992:b0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:77:ac:71:4c:e8:c7:ca:71:4b:f0:c0:2a:a5:33:9c:e5:9e:d2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: May 30 04:08:30 2024 GMT
            Not After : May 29 04:13:30 2025 GMT
        Subject: CN=305FC46A406E9D53C4242A5BB77C7DADC1EB616A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:aa:c5:e3:ba:12:17:59:0a:49:ac:a4:fc:1f:
                    19:67:a0:89:5a:29:c4:d0:d5:46:3c:e6:71:66:83:
                    f4:9e:6a:e0:fe:10:51:4b:b5:16:ca:aa:2a:a9:cc:
                    30:4f:eb:5e:6b:a7:ed:72:c9:c0:f4:7d:bd:a2:eb:
                    9a:18:39:a8:37:c0:54:55:9e:49:f5:1b:8a:c4:ae:
                    12:65:e8:b0:f0:4d:9d:fe:d0:96:5b:9d:4b:99:44:
                    db:dd:f7:ae:a0:25:26:d9:5d:44:0b:0c:91:85:40:
                    73:2d:5b:49:63:0c:18:96:41:65:16:49:31:7d:30:
                    53:74:7b:e4:ff:21:1d:7c:bd:b6:08:43:29:c8:cb:
                    bb:d2:d2:d5:28:3e:69:8a:01:38:89:3d:33:92:d0:
                    66:59:84:81:1b:d3:1b:f1:00:f7:d5:33:f7:97:f8:
                    d1:60:d6:96:90:4d:61:8d:e4:03:6e:f3:5f:d5:0c:
                    a2:ad:5a:e9:f0:72:f4:29:e3:17:7c:46:ab:4f:a5:
                    d5:c5:ca:a3:8d:9e:e6:fc:e3:41:a5:f9:5b:ea:4f:
                    df:e0:09:a4:05:c0:78:4a:d8:c2:ee:3f:4d:4f:a3:
                    17:fe:10:45:0d:19:c6:91:0a:4f:1b:35:89:86:3b:
                    7d:bb:88:6b:c5:43:7a:0a:8f:6e:8f:a3:c7:80:13:
                    b0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5F:C4:6A:40:6E:9D:53:C4:24:2A:5B:B7:7C:7D:AD:C1:EB:61:6A
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a62303a3a2f34342d3438203d3e20343031313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         55:0a:74:61:04:58:49:a1:47:29:41:05:c9:c0:fd:51:d7:0a:
         68:32:76:12:fa:9f:70:d8:ac:d3:53:c4:87:f7:e1:20:d5:43:
         0f:6c:1a:3d:35:d0:bc:64:5d:65:1f:67:c5:a7:e4:fe:fb:b9:
         7a:51:63:bc:cb:be:76:9f:30:21:6c:57:ea:0d:2c:d6:51:31:
         54:f7:14:f3:c9:2e:24:95:4f:ba:a8:30:1c:b4:8b:8d:e1:8b:
         98:e0:61:cf:84:8b:f0:74:94:d9:a0:b3:79:56:f9:55:a5:c0:
         32:76:0e:09:82:96:38:96:59:e6:0a:b3:d2:74:6a:37:66:84:
         d7:1a:fb:51:1a:df:12:83:b9:d0:64:bb:fb:84:39:a2:8b:40:
         26:eb:0c:cb:9e:01:e7:f3:f5:74:98:91:6a:cd:12:8c:9b:75:
         9d:97:9a:86:37:81:a7:74:82:ca:b0:f5:74:89:b4:5f:d5:ea:
         16:29:97:04:3e:87:c2:40:4b:58:54:4c:ea:16:4a:9e:af:66:
         1f:15:d6:a1:4b:cb:41:d7:d8:fb:2f:27:52:15:4b:66:d2:8f:
         d4:e9:9e:6c:3b:a8:dc:7b:24:76:74:24:b1:8f:9d:aa:6c:9f:
         f1:8c:0e:90:be:e8:90:d0:11:dc:92:2f:cd:78:11:9b:a6:87:
         1e:2d:a3:1c
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUSnescUzox8pxS/DAKqUznOWe0q0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi
ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjQwNTMwMDQwODMwWhcNMjUwNTI5MDQxMzMw
WjAzMTEwLwYDVQQDEygzMDVGQzQ2QTQwNkU5RDUzQzQyNDJBNUJCNzdDN0RBREMx
RUI2MTZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKrF47oSF1kK
Sayk/B8ZZ6CJWinE0NVGPOZxZoP0nmrg/hBRS7UWyqoqqcwwT+tea6ftcsnA9H29
ouuaGDmoN8BUVZ5J9RuKxK4SZeiw8E2d/tCWW51LmUTb3feuoCUm2V1ECwyRhUBz
LVtJYwwYlkFlFkkxfTBTdHvk/yEdfL22CEMpyMu70tLVKD5pigE4iT0zktBmWYSB
G9Mb8QD31TP3l/jRYNaWkE1hjeQDbvNf1QyirVrp8HL0KeMXfEarT6XVxcqjjZ7m
/ONBpflb6k/f4AmkBcB4StjC7j9NT6MX/hBFDRnGkQpPGzWJhjt9u4hrxUN6Co9u
j6PHgBOw7QIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFDBfxGpAbp1TxCQqW7d8fa3B
62FqMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5
LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD
MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00
OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4
MTc2ZmE0MzEwYjYzNTUuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH
MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy
M2E2NjM5MzkzMjNhNjIzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDM0MzAzMTMx
MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHBCYC+ZIAsDANBgkqhkiG9w0BAQsFAAOCAQEAVQp0YQRY
SaFHKUEFycD9UdcKaDJ2EvqfcNis01PEh/fhINVDD2waPTXQvGRdZR9nxafk/vu5
elFjvMu+dp8wIWxX6g0s1lExVPcU88kuJJVPuqgwHLSLjeGLmOBhz4SL8HSU2aCz
eVb5VaXAMnYOCYKWOJZZ5gqz0nRqN2aE1xr7URrfEoO50GS7+4Q5ootAJusMy54B
5/P1dJiRas0SjJt1nZeahjeBp3SCyrD1dIm0X9XqFimXBD6HwkBLWFRM6hZKnq9m
HxXWoUvLQdfY+y8nUhVLZtKP1OmebDuo3HskdnQksY+dqmyf8YwOkL7okNAR3JIv
zXgRm6aHHi2jHA==
-----END CERTIFICATE-----