Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/323630323a663965383a3a2f34302d3438203d3e203539393933.roa
File:                     323630323a663965383a3a2f34302d3438203d3e203539393933.roa (raw, json)
Hash identifier:          Gzn+xzZ9wSPyljt5/9UBXPs8i1HllRwsiRhCR/erURU=
Subject key identifier:   50:A6:DD:C9:13:87:FE:D4:0F:FC:F6:30:25:2B:5B:7F:53:78:14:5F
Certificate issuer:       /CN=d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992
Certificate serial:       3FA75FF2AFD51D12C4F2A6B1BD0AE8BB9BC15591
Authority key identifier: C4:7A:79:9B:0B:26:9F:88:E8:38:1E:AD:F1:AA:22:E9:36:05:4D:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/323630323a663965383a3a2f34302d3438203d3e203539393933.roa
Signing time:             Wed 27 Nov 2024 14:34:24 +0000
ROA not before:           Wed 27 Nov 2024 14:29:24 +0000
ROA not after:            Wed 26 Nov 2025 14:34:24 +0000
asID:                     59993
IP address blocks:        2602:f9e8::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a7:5f:f2:af:d5:1d:12:c4:f2:a6:b1:bd:0a:e8:bb:9b:c1:55:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992
        Validity
            Not Before: Nov 27 14:29:24 2024 GMT
            Not After : Nov 26 14:34:24 2025 GMT
        Subject: CN=50A6DDC91387FED40FFCF630252B5B7F5378145F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:9c:de:6b:bf:20:cf:98:16:20:88:05:87:
                    cc:10:98:c5:e9:b0:03:eb:f7:8d:a3:8a:99:91:96:
                    97:8f:00:09:0d:16:7f:e6:de:d0:e0:9d:e4:93:36:
                    c5:a5:93:68:16:27:57:a6:ef:17:19:eb:4a:a4:63:
                    88:16:f9:f7:99:ed:b0:d0:60:80:9e:cf:68:d7:3a:
                    17:ac:a2:13:f2:f9:ce:de:96:75:e8:59:04:47:08:
                    e3:bb:c5:b7:36:49:d7:9b:46:28:e3:3f:06:af:78:
                    bf:59:cb:a8:a7:bc:88:fc:a8:08:d3:a8:c4:27:34:
                    68:ec:a0:c3:fc:52:a8:20:86:df:80:a3:9b:71:c3:
                    85:2b:21:ec:52:ab:15:9c:04:8e:99:6e:c5:95:f4:
                    4c:f2:1a:3b:1d:91:75:7c:9b:81:52:84:56:87:f3:
                    a5:e2:d9:65:91:da:cb:82:36:93:49:24:e1:27:ee:
                    b1:48:b0:91:e3:9a:ac:06:19:f3:7e:98:4a:3e:ce:
                    2c:14:72:62:51:e3:e9:19:9d:3f:0b:69:a8:09:3e:
                    6a:a9:8f:e5:04:d0:17:44:ed:69:5c:1c:82:c3:0c:
                    c8:da:81:ca:97:a4:59:63:14:8c:f7:de:a8:4f:09:
                    76:99:38:f1:06:12:42:7e:4d:5a:c6:28:73:bb:3e:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A6:DD:C9:13:87:FE:D4:0F:FC:F6:30:25:2B:5B:7F:53:78:14:5F
            X509v3 Authority Key Identifier:
                keyid:C4:7A:79:9B:0B:26:9F:88:E8:38:1E:AD:F1:AA:22:E9:36:05:4D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/C47A799B0B269F88E8381EADF1AA22E936054DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/323630323a663965383a3a2f34302d3438203d3e203539393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e8::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:82:6c:9f:91:75:a0:ec:a0:ff:58:6f:07:32:09:6f:b9:d3:
         d5:10:44:b5:02:c4:6c:1c:d9:70:c8:69:d4:ca:5b:4b:e5:f6:
         c4:71:9f:9b:6f:16:d8:39:f8:fc:60:1d:14:60:83:90:d0:4f:
         71:04:ca:8a:d6:2d:c7:af:74:b4:2b:90:19:f3:e1:9d:e2:e5:
         13:3d:8d:91:18:13:8b:21:00:12:8c:9f:b4:16:4e:80:4b:bd:
         2c:cf:b1:e3:6d:7a:cf:03:6a:4a:a8:9b:ef:2f:5b:ab:b4:95:
         d0:d6:f3:93:5e:43:a9:69:20:fd:87:f3:4d:bf:b2:25:12:96:
         f8:64:50:1e:42:c1:c6:16:ed:eb:0d:41:6b:31:be:bb:37:c5:
         d9:36:59:8f:6e:8e:80:ef:e2:b6:51:e4:f5:eb:db:04:3e:c9:
         d2:fe:96:05:cf:94:f1:28:19:2f:df:10:7d:a0:95:b6:4b:08:
         5e:19:b0:24:28:bc:da:29:93:c6:3e:18:0a:58:05:41:76:8a:
         c4:64:5d:6b:34:b0:53:21:f7:30:5e:74:7e:69:d3:98:7a:4f:
         fb:f7:8d:16:e8:96:f4:30:ca:99:8a:c3:86:a9:8a:00:48:f6:
         87:3a:e4:7d:ce:3c:b4:ae:d0:e9:d4:ee:6f:44:29:96:e6:72:
         38:0a:7b:3e
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgIUP6df8q/VHRLE8qaxvQrou5vBVZEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDczNjU2Y2VkODhiZTJkZjI2ZThmZWRlYTc4ZDkwM2Zh
MjRkNjk0YjM2YmY5ZjE5OTIwHhcNMjQxMTI3MTQyOTI0WhcNMjUxMTI2MTQzNDI0
WjAzMTEwLwYDVQQDEyg1MEE2RERDOTEzODdGRUQ0MEZGQ0Y2MzAyNTJCNUI3RjUz
NzgxNDVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvKc3mu/IM+Y
FiCIBYfMEJjF6bAD6/eNo4qZkZaXjwAJDRZ/5t7Q4J3kkzbFpZNoFidXpu8XGetK
pGOIFvn3me2w0GCAns9o1zoXrKIT8vnO3pZ16FkERwjju8W3NknXm0Yo4z8Gr3i/
Wcuop7yI/KgI06jEJzRo7KDD/FKoIIbfgKObccOFKyHsUqsVnASOmW7FlfRM8ho7
HZF1fJuBUoRWh/Ol4tllkdrLgjaTSSThJ+6xSLCR45qsBhnzfphKPs4sFHJiUePp
GZ0/C2moCT5qqY/lBNAXRO1pXByCwwzI2oHKl6RZYxSM996oTwl2mTjxBhJCfk1a
xihzuz7EGwIDAQABo4IC0DCCAswwHQYDVR0OBBYEFFCm3ckTh/7UD/z2MCUrW39T
eBRfMB8GA1UdIwQYMBaAFMR6eZsLJp+I6DgerfGqIuk2BU35MA4GA1UdDwEB/wQE
AwIHgDCBlwYDVR0fBIGPMIGMMIGJoIGGoIGDhoGAcnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0wOGJhLTRjZGUtODk3
OS00ZmFlYTRiMWJjMTIvMTcvQzQ3QTc5OUIwQjI2OUY4OEU4MzgxRUFERjFBQTIy
RTkzNjA1NERGOS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB
03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkz
YS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzYyZGZlMDZhLWQxNzgtNGI2NC1iMTll
LWRjNmQxZmJmNTJiMi9kNzM2NTZjZWQ4OGJlMmRmMjZlOGZlZGVhNzhkOTAzZmEy
NGQ2OTRiMzZiZjlmMTk5Mi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEF
BQcwC4aBjHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzE3LzMyMzYz
MDMyM2E2NjM5NjUzODNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDM1MzkzOTM5MzMu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MA4EAgACMAgDBgAmAvnoADANBgkqhkiG9w0BAQsFAAOCAQEAaIJsn5F1oOyg/1hv
BzIJb7nT1RBEtQLEbBzZcMhp1MpbS+X2xHGfm28W2Dn4/GAdFGCDkNBPcQTKitYt
x690tCuQGfPhneLlEz2NkRgTiyEAEoyftBZOgEu9LM+x4216zwNqSqib7y9bq7SV
0Nbzk15DqWkg/YfzTb+yJRKW+GRQHkLBxhbt6w1BazG+uzfF2TZZj26OgO/itlHk
9evbBD7J0v6WBc+U8SgZL98QfaCVtksIXhmwJCi82imTxj4YClgFQXaKxGRdazSw
UyH3MF50fmnTmHpP+/eNFuiW9DDKmYrDhqmKAEj2hzrkfc48tK7Q6dTub0QpluZy
OAp7Pg==
-----END CERTIFICATE-----