Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a313a3a2f34382d3438203d3e203330353831.roa
File:                     323630323a3261333a313a3a2f34382d3438203d3e203330353831.roa (raw, json)
Hash identifier:          hKHTYvLKNCoeHellfFQJ38eAynTXfQAn+MoVCj5YI1s=
Subject key identifier:   58:91:05:34:A2:D2:82:59:3E:7E:F9:74:DD:A0:A7:B5:41:54:A5:91
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       1BAD527C5D9D3980BE9B095B6259B9706F45E1BC
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a313a3a2f34382d3438203d3e203330353831.roa
Signing time:             Fri 20 Dec 2024 21:17:51 +0000
ROA not before:           Fri 20 Dec 2024 21:12:51 +0000
ROA not after:            Fri 19 Dec 2025 21:17:51 +0000
asID:                     30581
IP address blocks:        2602:2a3:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ad:52:7c:5d:9d:39:80:be:9b:09:5b:62:59:b9:70:6f:45:e1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 20 21:12:51 2024 GMT
            Not After : Dec 19 21:17:51 2025 GMT
        Subject: CN=58910534A2D282593E7EF974DDA0A7B54154A591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:47:28:97:1a:63:5f:74:c3:ee:df:05:6a:
                    22:50:f5:b1:21:ef:a7:9c:0c:ff:7d:89:5b:c0:58:
                    2f:8f:61:74:a4:0e:f6:67:3b:ef:00:7f:cc:96:15:
                    28:7a:85:bc:3b:16:2d:16:bf:48:9e:70:6e:83:8f:
                    6e:fd:28:2c:fd:3a:db:92:42:49:5b:08:db:62:a6:
                    a6:03:a9:45:aa:e3:97:22:eb:9c:66:36:2f:c0:8e:
                    28:d3:d3:b6:19:3e:ca:e0:7b:2d:2e:3f:cb:2b:31:
                    5c:1f:f3:b0:c4:ff:16:6f:57:5d:b7:b1:d1:a3:f2:
                    87:48:ca:c5:7e:83:c8:e3:5e:ae:0a:40:e6:e5:f6:
                    9c:56:4c:ed:bf:59:e1:0e:1d:45:2b:87:93:c4:25:
                    4a:a0:00:e3:6a:de:0b:02:70:f9:ef:36:7e:cc:97:
                    a8:bb:aa:c9:cf:8a:ee:64:21:05:0c:32:1e:5d:c9:
                    7b:c2:d6:dd:55:b2:0d:28:6b:a8:3e:71:9b:4f:74:
                    1f:92:42:97:f7:ad:cb:f4:f9:37:52:d4:98:e4:4d:
                    f8:0b:ef:f5:74:5e:b3:2f:a5:9b:a3:84:65:bc:dd:
                    a8:1e:3b:27:c0:fb:13:ff:dd:39:d7:f9:60:ef:e0:
                    10:5b:ed:58:50:cb:2e:59:46:65:03:01:92:b6:58:
                    ec:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:91:05:34:A2:D2:82:59:3E:7E:F9:74:DD:A0:A7:B5:41:54:A5:91
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a313a3a2f34382d3438203d3e203330353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:af:da:44:33:26:a9:ce:f6:53:7e:75:76:82:13:01:7e:6d:
         b8:28:6b:6f:a7:b7:1b:ec:1c:6b:79:8a:4b:9f:65:f6:75:73:
         33:a1:df:2d:5b:e2:28:fd:b3:6f:d3:ac:d8:72:eb:1b:be:dd:
         88:d9:80:28:a1:17:0b:ed:78:f4:0c:b2:e8:d0:99:9f:f6:56:
         be:9f:26:c9:91:ab:82:e5:aa:00:26:27:69:c3:83:97:7a:0c:
         67:52:9e:18:d2:57:16:25:4b:8e:f0:ff:fc:d1:40:a2:26:58:
         cd:b2:8c:7c:cf:77:ea:49:28:21:b9:86:12:ea:da:dc:eb:f8:
         32:66:48:46:5a:5c:8d:bc:82:b9:bd:da:fa:a5:e7:9d:09:a8:
         2b:64:34:63:fe:83:21:2a:6a:e6:d4:e2:ad:33:82:f9:2c:64:
         41:f9:c9:90:e2:30:77:3a:85:bb:68:93:8b:f2:ec:25:69:f0:
         2c:38:ab:25:31:4c:80:fa:a6:f3:8c:60:c4:82:8c:5f:70:61:
         55:6f:14:36:49:0d:8f:67:1b:44:84:f3:e2:e4:9b:da:87:d7:
         82:8d:0d:03:98:7f:fa:f8:f2:a4:21:fa:9b:64:07:b1:89:e7:
         8f:f0:83:e9:24:2a:90:d6:cb:a7:db:b5:6e:a7:7d:1a:c4:9d:
         e3:a2:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----