Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/sky/1/323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          kx1gZoIgH4I1oLRI3WhvatcEvcpjbf/W1ebIEKh2zWk=
Subject key identifier:   98:E8:8C:DA:B5:40:FE:AE:20:DC:E3:92:3B:4C:68:F6:09:A1:68:9C
Certificate issuer:       /CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
Certificate serial:       65D125F13C1DBA0D29CCD68E3305F9FB12E5CBED
Authority key identifier: 0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
Subject info access:      rsync://rpki.co/repo/sky/1/323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Mon 04 Dec 2023 19:54:52 +0000
ROA not before:           Mon 04 Dec 2023 19:49:52 +0000
ROA not after:            Mon 02 Dec 2024 19:54:52 +0000
asID:                     10103
IP address blocks:        2607:74c0:120::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d1:25:f1:3c:1d:ba:0d:29:cc:d6:8e:33:05:f9:fb:12:e5:cb:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
        Validity
            Not Before: Dec  4 19:49:52 2023 GMT
            Not After : Dec  2 19:54:52 2024 GMT
        Subject: CN=98E88CDAB540FEAE20DCE3923B4C68F609A1689C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:5c:4b:ab:0e:08:d0:35:e1:7e:40:5b:e6:
                    02:5b:f2:82:16:2d:9c:30:25:b9:01:cf:bd:d8:c5:
                    97:8a:cc:d1:55:c8:0b:d0:7d:d6:3a:86:54:26:da:
                    1f:75:03:b7:37:ae:a4:ee:61:d6:82:0c:ce:09:2f:
                    f2:de:2f:93:9f:21:09:0c:f1:2f:a6:f7:69:e5:0c:
                    99:6c:dd:77:ef:a0:73:66:f3:53:62:85:b0:84:78:
                    31:96:11:d3:4e:a0:9d:80:23:97:99:e8:d4:30:46:
                    a3:6e:2e:48:15:03:35:bb:0f:f2:8f:8e:d6:f3:09:
                    c2:b3:27:a9:67:1a:e6:71:f7:24:6a:78:5a:85:9a:
                    a1:c3:ba:c5:ba:71:a4:25:67:1b:2b:80:f0:a1:9a:
                    ca:82:2e:ed:b0:a8:0b:91:14:83:0e:75:c9:57:5c:
                    bd:eb:c6:2b:aa:f9:d4:cb:93:88:d0:15:ff:1b:75:
                    80:df:8d:4e:b4:f8:3b:67:cf:92:c1:b8:87:ac:55:
                    fb:37:50:f9:b1:4e:51:e6:e4:61:f0:12:ec:0f:a2:
                    8f:1f:93:0d:af:6e:3e:0a:3d:79:a1:e2:02:90:05:
                    64:26:91:75:8d:e7:fe:97:2d:6e:4e:e4:26:ef:61:
                    05:eb:9c:4e:23:1a:21:71:fc:cf:0b:f7:02:b0:8f:
                    32:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E8:8C:DA:B5:40:FE:AE:20:DC:E3:92:3B:4C:68:F6:09:A1:68:9C
            X509v3 Authority Key Identifier:
                keyid:0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/sky/1/323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:8f:35:c9:e3:95:54:62:66:b5:7d:96:1a:d4:f3:70:4b:7d:
         2c:c7:8d:73:cb:77:0e:9d:ab:b5:6c:19:c6:5f:d7:91:a4:fd:
         c3:a2:1e:01:b2:c4:62:71:fc:74:53:9f:6c:b5:e0:35:36:c5:
         d5:cd:2c:d9:81:f0:84:fe:56:fd:55:27:5a:f7:73:f7:4f:30:
         c8:5c:20:fd:32:55:b5:e6:14:18:2e:b3:4e:bf:dc:9e:b2:8a:
         1a:1e:3e:02:63:fb:20:84:c5:f7:69:ee:86:ec:fd:55:12:f0:
         76:13:7e:dc:96:66:7a:a5:3d:fa:86:60:a5:43:24:be:62:7b:
         4d:12:6c:7a:3f:f2:d8:f5:eb:e3:f0:fc:e3:cc:0c:45:18:b6:
         5f:6c:9c:ee:3b:51:c7:f0:00:5b:2a:e0:e2:d3:0b:24:9e:f7:
         e6:d6:1e:13:51:79:33:b9:03:2b:c6:4a:76:da:35:3d:58:39:
         67:8a:f6:ca:b0:6e:8e:de:7d:f4:cd:b4:e9:08:c1:42:f8:c5:
         8f:9e:0b:09:f0:75:c8:bc:90:ec:57:65:24:31:8d:1c:3b:31:
         45:c0:72:0c:23:dc:98:35:a4:f9:58:8f:dc:30:0b:13:97:86:
         58:4f:3a:6f:6b:00:67:fd:34:c9:7e:a4:c5:b5:d3:3b:8f:a0:
         ae:33:bb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----