Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3a2f34382d3438203d3e203330353831.roa
File:                     323630323a3261333a3a2f34382d3438203d3e203330353831.roa (raw, json)
Hash identifier:          Nw71Kwxe/Bl0Im+e4HpADJRL/KJiz2z5b7vrMaDbiSs=
Subject key identifier:   E7:A8:85:F5:95:5A:5B:9D:8A:E5:4A:74:FC:35:53:3D:C8:58:68:00
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       62B1051261D3CD1B21B98BBD103C80C4D6E5E722
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3a2f34382d3438203d3e203330353831.roa
Signing time:             Fri 20 Dec 2024 21:17:50 +0000
ROA not before:           Fri 20 Dec 2024 21:12:50 +0000
ROA not after:            Fri 19 Dec 2025 21:17:50 +0000
asID:                     30581
IP address blocks:        2602:2a3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b1:05:12:61:d3:cd:1b:21:b9:8b:bd:10:3c:80:c4:d6:e5:e7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 20 21:12:50 2024 GMT
            Not After : Dec 19 21:17:50 2025 GMT
        Subject: CN=E7A885F5955A5B9D8AE54A74FC35533DC8586800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:96:07:4d:de:2a:1c:72:cf:62:71:61:f0:fc:
                    2b:12:4b:ec:18:a3:37:62:8e:ab:91:36:c8:7c:2c:
                    ac:23:16:4e:57:3b:b6:d4:71:1a:fe:a4:7c:be:29:
                    17:a7:30:ed:70:d6:49:f3:cf:90:2b:88:bb:9e:29:
                    c2:9b:3c:db:28:92:e6:c8:c9:8b:ae:24:24:2d:db:
                    ed:99:d6:04:1f:13:6a:29:ac:02:b9:b8:5b:4d:22:
                    b8:50:b4:4f:ff:c2:09:4a:ac:70:00:67:48:8f:eb:
                    b4:c2:c6:65:c5:d3:24:68:d6:cf:1b:5c:71:c6:ab:
                    60:63:10:0f:de:e9:6b:2c:46:3e:5f:d1:4b:9c:a8:
                    89:14:40:51:e4:8f:b9:68:bb:39:8d:cb:da:92:51:
                    24:cd:ad:00:e7:70:22:2d:96:26:5a:8f:52:88:62:
                    8e:f4:e5:63:fe:45:4b:bb:8f:da:e7:2f:b4:47:6b:
                    8e:9e:18:66:82:bb:c1:16:0b:ab:c4:5c:94:ab:8f:
                    06:a8:bf:cc:e0:8e:b0:9b:84:33:24:c8:3b:ec:78:
                    2a:8f:72:13:39:20:ac:79:32:62:a9:79:70:2f:07:
                    67:8d:2e:a6:52:15:9d:e2:29:6f:03:e8:98:52:2f:
                    64:55:ab:f7:ab:3d:13:80:01:1d:8c:d4:8d:69:40:
                    ca:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A8:85:F5:95:5A:5B:9D:8A:E5:4A:74:FC:35:53:3D:C8:58:68:00
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3a2f34382d3438203d3e203330353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:b4:cd:22:f1:cb:1b:ab:35:14:65:51:b7:2c:6b:6a:e7:60:
         ad:93:42:1a:2f:64:a7:ce:1a:82:fa:2c:d4:48:de:0c:65:59:
         ae:d5:31:79:c6:0a:ab:37:71:5e:23:73:e4:77:31:7b:be:2e:
         0a:26:2e:5f:63:2b:b0:a8:e9:73:49:e9:ca:45:78:6c:95:77:
         20:a1:50:2d:f1:b0:1a:42:b9:70:78:c1:87:de:ca:7e:86:dc:
         6a:ab:51:e9:cd:f7:61:a1:45:74:c6:5c:ef:77:45:6d:e2:43:
         cd:4e:f9:35:37:0d:c9:59:77:a1:25:e5:05:76:f7:96:2a:14:
         31:88:d7:3f:43:15:b5:05:fc:73:0c:a0:20:c0:25:fd:0f:0a:
         70:0e:be:65:bb:77:2e:07:cf:29:7a:20:1f:73:53:d6:bc:91:
         85:c6:94:43:02:50:62:82:96:59:b6:6e:22:53:85:47:72:34:
         9f:03:48:59:69:3b:b9:a7:60:71:82:40:18:da:f0:30:8a:0c:
         ef:fb:ac:8e:82:15:5b:00:6e:58:85:7c:a2:8a:13:22:34:00:
         4c:c3:d3:69:e5:65:a7:2a:14:a5:37:dd:c8:41:f3:59:3e:39:
         41:33:16:f6:1f:71:66:c1:49:fe:60:90:f1:50:67:24:69:60:
         0c:85:65:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----