Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a383a3a2f34382d3438203d3e20333937393538.roa
File:                     323630323a3261333a383a3a2f34382d3438203d3e20333937393538.roa (raw, json)
Hash identifier:          +jKmKrOKzvqh0kTo6661RN8plFyWA1QhbJfLHY8y19I=
Subject key identifier:   5B:30:48:08:41:35:76:73:BD:5B:53:A1:08:C8:7A:7E:4B:85:08:91
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       5572733A8BBD9DFF7ED06A1D8591B9AE811985F6
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a383a3a2f34382d3438203d3e20333937393538.roa
Signing time:             Mon 17 Mar 2025 16:14:31 +0000
ROA not before:           Mon 17 Mar 2025 16:09:31 +0000
ROA not after:            Mon 16 Mar 2026 16:14:31 +0000
asID:                     397958
IP address blocks:        2602:2a3:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:72:73:3a:8b:bd:9d:ff:7e:d0:6a:1d:85:91:b9:ae:81:19:85:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Mar 17 16:09:31 2025 GMT
            Not After : Mar 16 16:14:31 2026 GMT
        Subject: CN=5B30480841357673BD5B53A108C87A7E4B850891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:df:57:fe:cd:d2:30:36:87:c8:8d:63:8b:
                    b9:72:70:ee:c1:f0:ca:5b:22:f6:bd:cc:a7:ba:0d:
                    c2:5d:65:3c:63:9d:0b:66:da:fd:67:c2:0f:84:54:
                    24:e0:ca:75:4e:e8:37:79:73:6c:97:99:00:b4:1c:
                    f6:55:80:8f:5a:98:97:d9:9d:af:c9:f7:13:9a:6e:
                    b4:89:5f:d6:65:c0:50:48:6a:30:44:6c:46:95:3f:
                    0c:17:9c:fd:b3:e5:41:94:d5:cc:c0:ca:71:f3:4b:
                    fa:e2:5f:20:04:aa:be:1d:74:0a:92:de:fa:c1:70:
                    0c:95:ef:01:d8:d4:3e:44:b3:ad:c1:a7:be:31:4a:
                    df:0a:59:ec:c6:62:d5:2c:11:70:5e:a4:e3:b8:2d:
                    7c:4a:1d:45:6d:ed:e6:8e:4e:0d:a4:d8:a2:6a:88:
                    39:3a:4e:d3:ca:d5:47:f4:32:fa:37:f8:24:3f:6b:
                    7c:c1:95:e7:a6:45:61:9d:69:f4:2d:a7:cd:f1:01:
                    d7:f7:29:6a:28:53:de:d1:11:ef:43:e5:26:67:76:
                    3d:93:f8:43:1a:c7:82:05:c4:48:f4:57:e2:c5:c3:
                    fc:c9:0f:b0:6e:c0:0d:70:d7:e0:b1:94:c4:5f:56:
                    14:8d:37:68:92:ce:16:3d:b4:ed:4e:b8:0d:75:fa:
                    0c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:30:48:08:41:35:76:73:BD:5B:53:A1:08:C8:7A:7E:4B:85:08:91
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a383a3a2f34382d3438203d3e20333937393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:ca:fc:f2:b0:53:76:06:48:0b:b3:40:cf:db:af:be:74:95:
         69:55:72:d6:49:47:52:51:5f:cd:24:a7:e0:91:06:05:35:98:
         71:8b:d7:b0:6c:3f:49:9f:97:0a:a7:2a:b1:2e:8a:c8:a2:1b:
         19:53:33:44:25:cb:93:6a:68:db:88:c7:4c:82:3f:f5:05:a0:
         2e:8c:b9:ec:cb:c2:49:a3:46:de:01:ec:6a:34:a7:51:94:df:
         fd:0f:c0:d5:66:4a:ff:84:9b:89:15:67:8a:f9:9a:7f:2d:58:
         69:ac:5b:90:c7:04:e1:f8:6c:60:7e:c5:66:f0:74:c5:73:c8:
         6f:3c:ac:04:12:42:6c:d5:8b:1b:d0:4f:7c:d8:b4:e6:25:2d:
         e0:aa:7e:01:bd:7a:c7:43:02:24:ad:d6:45:a5:3c:9a:35:ef:
         2f:66:3e:ea:c1:df:09:3f:b6:f9:95:1e:46:fb:7a:3a:74:10:
         cc:d0:1a:cd:e0:1c:c8:bf:65:75:3a:3d:0f:74:e3:3d:94:ef:
         3a:be:d3:3c:fd:9e:68:d6:dc:25:e3:7d:d7:22:20:8d:b9:72:
         14:5c:f8:96:aa:ba:15:4e:fe:bc:d5:d7:b5:40:33:11:86:08:
         f6:3b:63:3d:82:1a:fd:c9:1b:48:99:7f:ee:f5:cd:7f:64:61:
         f2:be:be:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----