Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e20393439.roa
File:                     323630353a336134303a3a2f33322d3438203d3e20393439.roa (raw, json)
Hash identifier:          SEVo4qurVyv///w3Ae6kgUojZ3ggcHm/42bmlSwb+ws=
Subject key identifier:   F3:C0:C9:01:12:05:6E:2C:9E:F0:15:E4:29:85:F0:06:B4:20:C3:43
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       06EE0535CA0A3700C981C47C24B100CFEC1750B5
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e20393439.roa
Signing time:             Sat 14 Sep 2024 01:22:27 +0000
ROA not before:           Sat 14 Sep 2024 01:17:27 +0000
ROA not after:            Sat 13 Sep 2025 01:22:27 +0000
asID:                     949
IP address blocks:        2605:3a40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ee:05:35:ca:0a:37:00:c9:81:c4:7c:24:b1:00:cf:ec:17:50:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Sep 14 01:17:27 2024 GMT
            Not After : Sep 13 01:22:27 2025 GMT
        Subject: CN=F3C0C90112056E2C9EF015E42985F006B420C343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:b6:10:f3:fb:0c:66:31:0a:ac:17:b2:97:
                    9e:83:53:f1:48:d1:26:db:1a:98:c6:33:91:fc:b7:
                    8c:04:0f:1d:3c:7f:6d:dd:d6:02:60:fb:3d:ad:7b:
                    67:5d:db:93:4d:34:96:c0:9f:b4:4f:e1:ed:c7:c8:
                    41:4b:bf:89:7c:09:88:03:95:f4:10:46:f7:ff:9a:
                    19:88:e1:69:6c:42:62:a5:84:cd:26:ab:7e:de:1a:
                    6d:34:1e:8f:12:36:b1:f2:21:41:54:10:3c:3a:cf:
                    8c:90:83:e3:75:9c:a9:a2:62:45:aa:6a:ed:03:20:
                    bb:7b:7b:01:9d:ea:bb:ee:81:75:fe:c7:44:8d:5c:
                    13:84:25:34:0c:7f:8c:17:d8:67:93:58:52:bb:e0:
                    3a:1d:53:87:da:2e:db:d8:7c:35:a9:7c:bb:44:95:
                    73:19:f6:45:de:9f:70:e2:72:10:36:12:02:36:bb:
                    62:99:53:26:3b:80:20:30:be:64:e4:0f:9e:bc:f5:
                    14:d8:4b:b8:63:ec:46:86:1a:27:c6:ca:9a:f3:6d:
                    da:e6:82:93:34:94:8a:e6:31:1d:13:c1:7e:ae:0a:
                    17:56:03:2b:18:06:c7:de:eb:19:f2:81:4e:77:f2:
                    45:91:f3:9b:d9:a0:a3:65:47:31:de:6d:12:d8:97:
                    82:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C0:C9:01:12:05:6E:2C:9E:F0:15:E4:29:85:F0:06:B4:20:C3:43
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:f0:fc:38:16:3b:57:6a:1a:b9:26:ea:6a:f4:86:3b:59:f6:
         78:ee:a6:21:f2:33:26:1b:76:fa:df:6d:a7:b9:32:f9:23:79:
         60:3d:a3:76:32:45:e0:b9:f1:c3:3f:11:58:cb:51:57:29:66:
         05:7b:5a:ce:33:7a:6b:b4:fb:93:41:ca:38:bc:7c:39:59:21:
         37:03:3b:40:7d:0f:b6:95:da:c4:1d:e2:e1:62:b5:1c:af:33:
         0e:70:be:13:30:87:b3:3b:ef:42:11:2a:b6:77:25:e7:3d:88:
         26:b8:4d:29:5e:b4:cf:55:6b:58:fe:8a:dd:88:46:35:cc:b0:
         eb:7a:fd:a4:41:87:e1:1c:c5:d9:41:1f:ff:48:91:9c:62:07:
         0f:6e:02:ac:c1:86:57:57:c8:6a:39:02:4c:3c:6a:39:72:39:
         25:b0:bb:3a:8e:eb:5c:41:cc:1a:97:8c:43:26:0e:b0:92:e9:
         f4:dd:7b:d6:65:6b:4a:a7:38:5c:67:8a:fc:bb:08:70:0b:f6:
         41:44:12:e6:96:df:48:31:b6:0d:0e:ff:52:77:19:7b:02:f3:
         50:2d:cb:e0:4b:f2:7e:54:72:4b:80:02:a2:c4:34:34:f9:c0:
         64:2f:a8:35:b7:66:d2:95:6b:ee:d8:23:39:ea:af:6a:cc:4d:
         c5:43:a0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----