Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630383a3a2f34382d3438203d3e20313938393234.roa
File:                     323630323a666161353a6630383a3a2f34382d3438203d3e20313938393234.roa (raw, json)
Hash identifier:          08P+0bvci06H+BmfxPGlF1dptw3rGOolOjVwyvXCsPc=
Subject key identifier:   73:42:23:3F:EE:0D:01:7F:3C:18:D1:0A:C9:36:8D:84:1F:20:8E:BD
Certificate issuer:       /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial:       18465A3DCA0144201C36EFA02402C99A8CE15FC6
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630383a3a2f34382d3438203d3e20313938393234.roa
Signing time:             Wed 31 Jan 2024 15:09:45 +0000
ROA not before:           Wed 31 Jan 2024 15:04:45 +0000
ROA not after:            Wed 29 Jan 2025 15:09:45 +0000
asID:                     198924
IP address blocks:        2602:faa5:f08::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:46:5a:3d:ca:01:44:20:1c:36:ef:a0:24:02:c9:9a:8c:e1:5f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
        Validity
            Not Before: Jan 31 15:04:45 2024 GMT
            Not After : Jan 29 15:09:45 2025 GMT
        Subject: CN=7342233FEE0D017F3C18D10AC9368D841F208EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:1e:1f:b7:fd:2a:95:c2:14:32:de:a0:33:
                    fb:c3:91:ac:7f:92:5a:cf:40:1f:b8:59:61:67:32:
                    e4:f8:62:0f:03:86:b8:b4:3f:90:b8:00:54:8d:54:
                    cd:f4:12:22:d8:ce:21:17:88:ee:86:bf:bd:83:59:
                    4d:09:ff:88:d0:c0:37:ea:f4:3a:bf:3f:5e:18:4b:
                    e7:94:0a:9f:39:18:dc:82:09:5a:ba:e7:d8:23:52:
                    f0:ae:ee:b9:ea:15:1a:10:5e:61:e6:4a:26:45:37:
                    c7:08:5b:38:7e:61:cf:ab:1c:43:c5:79:d5:83:30:
                    20:8f:2d:c7:c1:64:6a:50:36:63:aa:6c:ad:0b:4e:
                    86:87:db:e7:5b:2f:8b:81:11:bf:ea:be:0d:41:56:
                    06:ec:43:ee:3c:b8:a7:ea:75:0e:43:32:f6:c3:c6:
                    a1:75:18:81:0f:e0:6c:4c:eb:c4:20:69:43:7e:bb:
                    b3:fd:c7:2e:4b:15:24:69:3a:ed:5e:60:4e:75:b2:
                    57:f3:a5:43:8a:8b:f0:74:4e:11:e0:65:d9:73:fa:
                    ab:3a:ff:6d:fa:01:a8:2f:c0:05:cb:a5:0f:8c:af:
                    b0:42:57:2b:f1:ae:1c:ef:c5:c1:9a:74:b2:e1:35:
                    bf:1a:1c:b2:8a:60:6d:fd:a0:d3:02:27:b8:cb:e3:
                    90:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:42:23:3F:EE:0D:01:7F:3C:18:D1:0A:C9:36:8D:84:1F:20:8E:BD
            X509v3 Authority Key Identifier:
                keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630383a3a2f34382d3438203d3e20313938393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f08::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:e6:4f:a6:15:1f:e9:51:ee:ca:2a:e8:ca:65:cd:19:c1:87:
         1b:46:c6:4f:2d:7f:33:7c:26:1e:61:64:0e:bd:fb:0c:f9:ff:
         52:20:1a:8e:28:d0:09:a2:4e:d9:fc:72:f3:1a:d3:d1:ec:26:
         dd:90:64:df:56:d4:67:de:fa:75:88:79:fe:46:3d:8d:21:e8:
         17:37:12:e6:a4:71:5b:f7:40:97:54:95:d9:30:be:d4:09:70:
         c7:30:14:21:1f:07:b7:ca:25:79:67:ab:cc:2a:f6:8b:cb:64:
         29:91:83:bf:69:da:e0:14:e1:d6:a1:96:38:8d:ce:37:3e:d2:
         d6:bb:88:8c:0b:09:cd:2d:46:aa:b9:89:f4:15:f8:6b:ba:40:
         07:af:de:3e:3f:e4:d3:cb:6e:ca:6e:dd:40:f8:36:da:89:7e:
         6b:cb:f6:3d:c9:60:2d:5a:07:d6:4e:ac:1d:1b:a4:99:fa:f7:
         13:85:c7:05:9d:19:21:e8:3e:82:bb:5a:4a:3c:a3:75:0e:32:
         f7:9f:47:84:20:76:ce:8e:f8:bf:9f:b2:ca:43:68:de:0c:82:
         1b:06:fe:6c:49:35:75:18:8c:93:81:13:e9:e4:2e:9f:04:fb:
         cc:71:ac:c3:4a:d7:62:86:4a:28:d6:b3:4a:0a:7c:5d:23:96:
         e3:d0:6b:7d
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUGEZaPcoBRCAcNu+gJALJmozhX8YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDEyODZkNTQxMTI2OGY1ZjU3ZTkzYzU0ZGY3ODk0Y2Nl
NzY4YmJiNzY3MzBhNjIxMTEwHhcNMjQwMTMxMTUwNDQ1WhcNMjUwMTI5MTUwOTQ1
WjAzMTEwLwYDVQQDEyg3MzQyMjMzRkVFMEQwMTdGM0MxOEQxMEFDOTM2OEQ4NDFG
MjA4RUJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcMeH7f9KpXC
FDLeoDP7w5Gsf5Jaz0AfuFlhZzLk+GIPA4a4tD+QuABUjVTN9BIi2M4hF4juhr+9
g1lNCf+I0MA36vQ6vz9eGEvnlAqfORjcgglauufYI1Lwru656hUaEF5h5komRTfH
CFs4fmHPqxxDxXnVgzAgjy3HwWRqUDZjqmytC06Gh9vnWy+LgRG/6r4NQVYG7EPu
PLin6nUOQzL2w8ahdRiBD+BsTOvEIGlDfruz/ccuSxUkaTrtXmBOdbJX86VDiovw
dE4R4GXZc/qrOv9t+gGoL8AFy6UPjK+wQlcr8a4c78XBmnSy4TW/GhyyimBt/aDT
Aie4y+OQgwIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFHNCIz/uDQF/PBjRCsk2jYQf
II69MB8GA1UdIwQYMBaAFHSPAlxqJIcngFWZHMFpXiz+Rq5ZMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzAyMjliYzExLWRjMGMtNGVlNS04Mzhk
LTA3NzY5NjIyM2U3NC8xLzc0OEYwMjVDNkEyNDg3Mjc4MDU1OTkxQ0MxNjk1RTJD
RkU0NkFFNTkuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNmNlNDA4ZC01NTgxLTQ4M2QtOTBiMy01
MTE5ZmM4MzAwNjQvMDEyODZkNTQxMTI2OGY1ZjU3ZTkzYzU0ZGY3ODk0Y2NlNzY4
YmJiNzY3MzBhNjIxMTEuY2VyMIG1BggrBgEFBQcBCwSBqDCBpTCBogYIKwYBBQUH
MAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzAyMjliYzExLWRjMGMtNGVlNS04MzhkLTA3NzY5NjIyM2U3NC8xLzMyMzYzMDMy
M2E2NjYxNjEzNTNhNjYzMDM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzOTM4
MzkzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAJgL6pQ8IMA0GCSqGSIb3DQEBCwUAA4IBAQAw5k+m
FR/pUe7KKujKZc0ZwYcbRsZPLX8zfCYeYWQOvfsM+f9SIBqOKNAJok7Z/HLzGtPR
7CbdkGTfVtRn3vp1iHn+Rj2NIegXNxLmpHFb90CXVJXZML7UCXDHMBQhHwe3yiV5
Z6vMKvaLy2QpkYO/adrgFOHWoZY4jc43PtLWu4iMCwnNLUaquYn0FfhrukAHr94+
P+TTy27Kbt1A+DbaiX5ry/Y9yWAtWgfWTqwdG6SZ+vcThccFnRkh6D6Cu1pKPKN1
DjL3n0eEIHbOjvi/n7LKQ2jeDIIbBv5sSTV1GIyTgRPp5C6fBPvMcazDStdihkoo
1rNKCnxdI5bj0Gt9
-----END CERTIFICATE-----