Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a3431623a3a2f34382d3438203d3e20323135393334.roa
File:                     323630323a666161383a3431623a3a2f34382d3438203d3e20323135393334.roa (raw, json)
Hash identifier:          wyVRUE77wN36jA/fwyasqoNnpanjT1dM0hM6UBr95ko=
Subject key identifier:   47:BC:9D:F6:30:41:09:65:99:4C:A5:05:3B:A4:D9:DD:C0:DA:71:C5
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       75D97C4683012D4D576663E2C0A3E3F110EE111E
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/323630323a666161383a3431623a3a2f34382d3438203d3e20323135393334.roa
Signing time:             Tue 23 Jul 2024 10:16:20 +0000
ROA not before:           Tue 23 Jul 2024 10:11:20 +0000
ROA not after:            Tue 22 Jul 2025 10:16:20 +0000
asID:                     215934
IP address blocks:        2602:faa8:41b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d9:7c:46:83:01:2d:4d:57:66:63:e2:c0:a3:e3:f1:10:ee:11:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Jul 23 10:11:20 2024 GMT
            Not After : Jul 22 10:16:20 2025 GMT
        Subject: CN=47BC9DF630410965994CA5053BA4D9DDC0DA71C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:93:28:8e:f3:14:90:9c:32:21:6b:8c:6e:
                    ee:ef:38:37:c7:a3:97:d4:5d:cb:35:3f:90:69:52:
                    fa:81:36:52:7a:d7:7e:0a:11:e9:96:15:8b:21:57:
                    ca:dc:45:a5:cc:10:4f:c0:83:c6:ab:3b:f0:34:b7:
                    c6:6e:a1:10:47:0e:96:20:94:88:c3:00:40:24:eb:
                    c5:b3:30:b0:75:43:82:26:08:76:0f:20:ff:27:94:
                    d2:d1:e6:13:41:fc:7f:ff:6a:96:88:d1:3a:36:82:
                    a2:52:42:50:84:d9:99:3c:af:65:f0:54:96:cf:1f:
                    c5:eb:15:6e:2d:1c:17:ec:15:0c:26:6e:25:bc:76:
                    3e:4b:18:0a:2c:d0:9c:f6:73:1b:fc:f7:ce:db:f0:
                    5b:6c:dd:87:6d:aa:06:41:e3:04:05:14:19:09:0e:
                    5a:19:5f:06:ae:ce:30:39:8e:9b:b5:16:07:47:68:
                    1a:b6:78:3f:4f:51:69:a9:ab:37:d9:47:86:54:d6:
                    2c:9b:b1:d0:0b:f3:3f:99:5c:c1:9a:39:d0:b0:fd:
                    97:64:de:51:11:32:76:3f:26:8b:2c:d8:19:dd:35:
                    cd:0b:69:1f:01:f7:e4:e2:fe:7b:34:46:34:84:12:
                    2d:55:08:53:a9:55:9b:c4:ed:32:ac:db:c5:0d:68:
                    85:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BC:9D:F6:30:41:09:65:99:4C:A5:05:3B:A4:D9:DD:C0:DA:71:C5
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a3431623a3a2f34382d3438203d3e20323135393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:41b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:cf:dd:8c:ee:ba:33:86:50:1c:6c:6a:89:e1:14:20:a3:99:
         39:36:af:64:39:d2:1b:b0:6f:b3:fc:ef:17:5a:b2:cf:37:1f:
         1f:6c:ff:74:f7:61:d8:68:24:ab:53:0f:9a:6c:02:2d:6c:81:
         26:10:55:4d:b5:ba:36:dc:53:73:13:3f:e8:35:c2:5e:ab:25:
         8e:81:1b:f0:bf:92:6a:b9:79:d4:e3:95:e4:5c:6f:bd:55:03:
         fb:e1:4b:98:02:dc:06:c3:b6:3b:a7:1e:52:01:f1:fd:10:12:
         1b:6f:1c:37:0c:ba:54:32:ca:35:43:f2:57:ca:b3:14:5d:99:
         cb:ae:b5:87:b7:2a:9a:1b:c9:32:ba:56:fc:08:16:4b:27:1c:
         1c:5d:bb:75:69:e7:1a:03:71:17:dc:88:37:df:52:7a:c6:d9:
         1c:6d:0f:24:14:4f:74:08:9e:99:ff:01:66:17:7f:26:03:20:
         d0:02:aa:58:22:c1:67:12:f4:e0:a2:99:17:97:67:5c:85:20:
         5b:fb:3e:e3:e8:3c:78:82:a0:09:6d:5f:c0:1e:05:6e:e9:79:
         fe:2b:7b:c2:ac:5b:3e:e8:8d:79:59:13:23:c7:fd:97:13:bb:
         db:54:6c:57:66:ef:0f:d3:62:d2:5f:a0:49:e0:5d:44:9f:ba:
         d4:59:a2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----