Route Origin Authorization

$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6631303a3a2f34382d3438203d3e20323133383836.roa
File:                     323630323a666161353a6631303a3a2f34382d3438203d3e20323133383836.roa (raw, json)
Hash identifier:          p3NGw1lON/HMoe9VAUqe5yZYVtwjwZ4s9PLICVI9ex8=
Subject key identifier:   C9:03:AA:4F:73:58:FF:31:2D:7B:7C:8B:38:48:9F:21:C2:97:FE:D3
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       34053CAB356376FB7AEC98240FED84A8016E7D4D
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6631303a3a2f34382d3438203d3e20323133383836.roa
Signing time:             Mon 20 Jan 2025 05:01:53 +0000
ROA not before:           Mon 20 Jan 2025 04:56:53 +0000
ROA not after:            Mon 19 Jan 2026 05:01:53 +0000
asID:                     213886
IP address blocks:        2602:faa5:f10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:05:3c:ab:35:63:76:fb:7a:ec:98:24:0f:ed:84:a8:01:6e:7d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Jan 20 04:56:53 2025 GMT
            Not After : Jan 19 05:01:53 2026 GMT
        Subject: CN=C903AA4F7358FF312D7B7C8B38489F21C297FED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:d6:c6:ac:d4:69:a4:94:e5:7b:db:db:8f:
                    14:8e:88:51:1d:06:aa:aa:39:ae:f1:01:2b:c5:d3:
                    12:f6:b1:39:36:0e:e4:5b:c3:b1:7d:1c:81:c3:c4:
                    a5:45:be:92:e3:65:b1:07:5c:a5:19:0d:a3:b9:0c:
                    a0:b5:df:eb:84:d1:f5:10:ca:b2:bb:72:b9:cb:fa:
                    84:e1:4d:e6:e5:ce:80:60:75:97:d3:9e:40:f8:e0:
                    99:37:20:ed:5a:2c:4d:53:ab:c5:97:a9:13:13:47:
                    9e:7f:69:e1:98:23:a4:f6:40:38:d7:83:3f:87:e8:
                    c9:e3:cb:06:ba:00:0f:f9:28:da:86:d6:4f:19:7c:
                    16:9b:4f:6a:b5:3f:0b:7f:36:18:11:21:1c:dd:33:
                    7e:0d:70:e6:6a:f6:4f:d0:a2:c0:4c:a0:d9:43:e6:
                    94:ba:39:6a:83:19:84:7e:13:a7:e5:b7:b8:9c:5e:
                    b8:9b:aa:1b:31:0a:d8:56:dd:c1:38:51:07:ae:80:
                    5d:16:04:6b:90:a0:72:ac:32:58:c7:47:68:2e:27:
                    a6:5e:19:60:b5:c8:53:34:7a:7a:50:8a:a7:3c:2d:
                    59:f3:34:02:02:4d:84:1e:c4:57:ee:cf:8c:bf:72:
                    ef:2e:1d:ff:a7:ed:6e:ec:31:be:23:f1:27:87:b4:
                    76:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:03:AA:4F:73:58:FF:31:2D:7B:7C:8B:38:48:9F:21:C2:97:FE:D3
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6631303a3a2f34382d3438203d3e20323133383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f10::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:b8:e1:36:6b:19:72:2c:1d:f2:20:cb:46:d0:f5:80:e7:4f:
         2c:cf:45:7f:88:99:a5:0e:6f:3c:24:93:27:c0:fb:a7:60:8e:
         73:90:6d:87:a4:6e:7b:eb:7a:fc:06:55:f6:9c:68:6b:8a:9e:
         8f:04:cf:ce:38:ab:bf:1f:cc:a7:cc:55:f7:b2:30:7e:88:b8:
         ec:9d:b3:7e:f8:9d:87:39:02:b2:90:1f:86:24:cf:8e:53:8a:
         83:53:b8:c1:c5:57:fa:d4:f3:9d:31:96:4d:5f:89:de:87:61:
         04:b7:bd:fa:46:1b:09:74:1c:01:ce:8c:fa:d9:ec:f5:de:96:
         dc:b5:92:7d:1d:a9:db:9a:ce:51:98:00:19:c7:45:b2:a9:3d:
         64:41:cf:cc:be:ca:2b:e5:d6:f1:c5:e7:d8:3d:7c:84:55:8e:
         c2:b0:18:ba:36:40:2e:d1:2f:14:18:80:0c:b3:2f:52:f8:e8:
         22:98:1f:2f:e5:94:fa:18:97:bb:ff:26:22:73:12:c0:c7:7a:
         3c:28:51:c1:56:00:7e:93:b4:ec:fe:84:d9:bd:aa:fa:bd:64:
         96:e6:b4:03:61:77:5d:7e:a8:15:26:01:51:03:a4:7f:4b:8e:
         e9:d5:b9:b7:19:c4:81:81:82:05:00:70:64:9a:b2:11:8e:8b:
         12:8f:8d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----