Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a373a3a2f34382d3438203d3e203437373738.roa
File:                     323630323a3261333a373a3a2f34382d3438203d3e203437373738.roa (raw, json)
Hash identifier:          79ECAhFLDdZMq4MMxLGGrxM1kNRHQKUHK0Dti1b2rMM=
Subject key identifier:   41:D7:26:E3:A4:ED:29:B2:E1:9C:45:31:CE:DB:1B:03:2D:B5:A3:DD
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       67001CFC866A86604129DF75D7B06A1248EC53BC
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a373a3a2f34382d3438203d3e203437373738.roa
Signing time:             Sat 18 Jan 2025 13:59:35 +0000
ROA not before:           Sat 18 Jan 2025 13:54:35 +0000
ROA not after:            Sat 17 Jan 2026 13:59:35 +0000
asID:                     47778
IP address blocks:        2602:2a3:7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:00:1c:fc:86:6a:86:60:41:29:df:75:d7:b0:6a:12:48:ec:53:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Jan 18 13:54:35 2025 GMT
            Not After : Jan 17 13:59:35 2026 GMT
        Subject: CN=41D726E3A4ED29B2E19C4531CEDB1B032DB5A3DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:01:ad:be:8f:3b:a9:da:77:8e:f0:a9:eb:
                    2d:74:84:6c:65:b4:24:40:e8:2a:a7:2f:d7:a5:95:
                    c6:0b:64:da:99:e0:46:eb:70:28:66:07:43:ed:c0:
                    3d:18:eb:bf:c0:11:e9:cd:67:1a:5d:c7:b8:e5:e2:
                    bc:4e:e0:db:c0:83:b2:d5:b7:24:46:0f:81:69:e6:
                    08:bb:f5:0b:da:c8:98:54:9b:5d:e7:b3:93:da:fc:
                    36:7d:65:f7:fb:f4:18:90:7b:ca:21:2a:e9:f7:4a:
                    c7:94:2d:9b:b1:ce:c1:9a:a1:ee:b0:0b:37:3e:6c:
                    02:2f:7d:0c:47:1f:65:5f:04:82:cb:59:f8:25:f1:
                    70:ed:d4:25:4c:99:7e:c0:63:aa:b9:30:b5:ae:ca:
                    f6:76:9b:48:6b:04:4e:de:95:61:6c:6d:4d:9e:2e:
                    d4:dd:89:2a:02:d0:5a:d8:da:d3:0c:b6:25:81:14:
                    f2:f6:36:11:33:0d:78:d9:d1:ff:05:f4:0d:a7:29:
                    6c:ce:0f:af:ef:08:b0:49:ba:ae:20:78:52:b5:75:
                    06:28:52:41:ae:e8:5a:6f:b8:7d:ca:ca:2d:d9:cf:
                    99:bd:7d:2f:b0:cd:9c:76:75:53:68:8c:96:db:fa:
                    9b:9c:8a:58:9d:ee:44:4f:0b:80:1c:1e:37:ec:33:
                    79:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D7:26:E3:A4:ED:29:B2:E1:9C:45:31:CE:DB:1B:03:2D:B5:A3:DD
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a373a3a2f34382d3438203d3e203437373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:34:ec:ab:27:32:13:b6:c0:36:29:48:37:54:6c:dd:80:73:
         85:18:80:ae:3b:58:c7:f6:e8:8d:ed:de:c8:6b:57:75:48:d0:
         3f:d6:c2:a4:f6:62:3c:c3:fe:17:38:69:6a:b2:d7:a3:38:bd:
         3f:d1:d0:a2:95:c2:29:42:44:aa:8d:ea:8a:7f:8d:32:97:c0:
         15:15:30:2b:43:f2:fa:3d:b1:d4:01:f3:f1:3b:ba:0b:92:b9:
         98:b0:d6:0d:44:fd:55:3e:da:ff:81:ab:16:98:2b:6d:2e:bc:
         5a:2d:e3:97:e6:16:84:43:68:a0:22:4f:68:e1:9d:95:1a:58:
         63:30:63:e7:ec:bb:2f:91:72:19:e6:65:ba:86:9b:67:23:08:
         de:41:a1:93:39:61:89:a5:0e:68:8f:af:73:49:e5:d3:80:22:
         17:b4:5e:3e:d6:cc:b2:c0:27:f4:00:86:e4:79:93:2e:a4:c2:
         17:d4:d2:49:41:9f:17:68:2c:77:33:54:f2:a4:0f:2a:28:c9:
         13:72:91:d5:28:60:24:c5:f8:dd:5c:10:03:33:1d:f3:ab:66:
         fe:59:37:ee:90:94:f2:f5:7e:23:ba:aa:31:06:71:29:0f:9b:
         5b:d3:cc:a3:63:8e:fe:ae:ca:1b:f9:05:9e:5f:42:03:19:a2:
         6f:9e:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----