Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a31303a3a2f34342d3438203d3e20313937383630.roa
File:                     323630323a3261333a31303a3a2f34342d3438203d3e20313937383630.roa (raw, json)
Hash identifier:          fG9NRl5a/KcfyLgp8I69t0FEI5NrHlz87xJtyksuok8=
Subject key identifier:   95:37:0B:E0:CD:09:26:DD:AF:BE:DC:82:0F:BB:3C:06:C5:CF:1A:8F
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       0E0358885C7F717D80CF6D9A40F8DB6C3E30E214
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a31303a3a2f34342d3438203d3e20313937383630.roa
Signing time:             Fri 20 Dec 2024 21:17:52 +0000
ROA not before:           Fri 20 Dec 2024 21:12:52 +0000
ROA not after:            Fri 19 Dec 2025 21:17:52 +0000
asID:                     197860
IP address blocks:        2602:2a3:10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:03:58:88:5c:7f:71:7d:80:cf:6d:9a:40:f8:db:6c:3e:30:e2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 20 21:12:52 2024 GMT
            Not After : Dec 19 21:17:52 2025 GMT
        Subject: CN=95370BE0CD0926DDAFBEDC820FBB3C06C5CF1A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:d3:df:0f:22:f4:0d:46:ea:a4:88:58:01:
                    40:69:cc:2d:41:24:7e:0b:8e:9e:e4:ef:6b:8d:66:
                    df:5f:01:5e:61:b7:66:6d:68:04:0b:19:8d:26:03:
                    08:ae:a5:72:53:c7:1e:06:72:56:26:0f:90:84:2d:
                    b4:27:8c:c4:e0:f6:63:6f:60:ac:fa:64:89:36:2d:
                    f5:5d:d2:20:45:e9:15:57:8f:a0:13:25:fe:1e:3d:
                    3d:08:e9:59:c1:58:9e:f9:a4:14:fe:3c:6d:fe:bc:
                    c2:43:14:f0:4d:8f:5d:40:ca:2c:5b:38:3e:92:1c:
                    9d:77:e8:c7:dd:3c:12:f8:58:e3:7c:91:dc:71:ef:
                    e6:8d:d3:35:f2:4a:a1:d5:a0:0d:62:59:1b:32:f4:
                    2b:82:2f:c5:ed:5c:5a:a4:e1:33:db:1c:c8:73:51:
                    7f:33:d3:5a:df:1b:3f:14:5f:35:69:17:98:8e:4a:
                    91:58:58:aa:38:6d:bc:e6:86:39:79:cc:91:7e:ef:
                    5b:ee:57:06:f4:7d:8d:f5:3e:6e:22:a4:73:c4:f1:
                    0e:68:85:d1:9e:9e:70:6d:1d:f8:bf:59:9c:e4:0b:
                    09:4f:b4:bb:2a:41:dd:b7:fc:e7:2f:85:3f:f7:5b:
                    c4:8d:e1:92:5a:4f:44:ce:89:c5:85:64:f7:42:14:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:37:0B:E0:CD:09:26:DD:AF:BE:DC:82:0F:BB:3C:06:C5:CF:1A:8F
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a31303a3a2f34342d3438203d3e20313937383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         7a:f5:b6:7f:a1:b2:70:45:87:03:7f:dc:c8:4f:50:dc:41:e6:
         2c:63:64:8e:a4:5d:f1:13:0f:e5:b6:70:dc:76:e5:04:d8:a8:
         2b:67:67:82:96:75:f4:79:1e:cb:51:fd:4d:41:84:7a:43:1f:
         c4:92:90:4c:a6:56:f4:18:9f:a9:c4:d7:ec:4f:17:b7:ca:66:
         0a:97:c6:79:b7:7d:94:24:21:a1:54:75:46:85:4d:63:64:c0:
         83:96:35:9f:07:bd:1c:ef:be:5c:6b:74:a7:99:8c:36:51:af:
         bd:cb:2a:8f:95:8e:58:e8:6d:44:e7:32:a2:89:84:ac:49:0b:
         e0:97:6d:5d:78:31:4f:c2:78:ec:1b:56:09:a3:01:61:6e:1e:
         b5:2f:1f:99:9b:53:78:69:28:f4:70:69:d4:27:d1:b8:dd:91:
         c2:8c:a6:73:b1:a6:92:fd:af:e3:95:f2:e4:e1:b9:65:9b:bf:
         cf:b4:7f:37:03:66:14:33:35:2a:f3:96:e9:20:4e:7d:47:ef:
         20:a4:89:78:dc:4d:23:af:42:7d:f3:58:c2:a4:54:c6:5c:6c:
         68:ca:15:53:80:87:aa:0b:54:68:ed:09:de:df:ce:a3:d5:0c:
         9f:d8:85:0c:fc:9c:0f:bb:24:04:c1:0d:62:6a:dd:4d:6a:d2:
         a5:42:e4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----