Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/323630323a663732653a34303a3a2f34322d3432203d3e20343031363236.roa
File:                     323630323a663732653a34303a3a2f34322d3432203d3e20343031363236.roa (raw, json)
Hash identifier:          tQZD7f7jEqbmAUIAkRVzDRGYDbReJZXlbEJRESfJSVs=
Subject key identifier:   11:90:58:73:32:AD:5E:CB:80:2D:05:DC:4B:3D:1E:D9:2B:09:6C:D1
Certificate issuer:       /CN=369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12
Certificate serial:       2767C0B7DB5883A2F28AB8CE201719DEF30B54D6
Authority key identifier: EB:4B:C0:6D:40:65:7A:9B:F4:3E:CE:83:09:AD:AD:76:DF:24:A6:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/323630323a663732653a34303a3a2f34322d3432203d3e20343031363236.roa
Signing time:             Mon 31 Mar 2025 14:18:50 +0000
ROA not before:           Mon 31 Mar 2025 14:13:50 +0000
ROA not after:            Mon 30 Mar 2026 14:18:50 +0000
asID:                     401626
IP address blocks:        2602:f72e:40::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:67:c0:b7:db:58:83:a2:f2:8a:b8:ce:20:17:19:de:f3:0b:54:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12
        Validity
            Not Before: Mar 31 14:13:50 2025 GMT
            Not After : Mar 30 14:18:50 2026 GMT
        Subject: CN=1190587332AD5ECB802D05DC4B3D1ED92B096CD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:03:75:4b:3f:52:de:f0:c1:e4:57:97:a3:
                    21:af:88:1e:6a:20:c2:5d:92:36:1b:99:8f:8b:18:
                    be:8f:4c:07:9e:62:f3:03:19:00:13:80:4f:9e:13:
                    ff:fa:c8:81:15:14:72:14:3f:77:ba:cd:e6:ac:cf:
                    9f:33:22:54:c5:8b:c5:b5:cf:46:26:0b:b1:55:6b:
                    92:d7:2e:7f:fc:42:e6:b3:1c:58:fb:e6:ba:68:44:
                    70:2e:7d:33:f9:46:34:8b:4d:31:91:b9:a6:5f:e9:
                    5a:46:d7:da:79:24:6a:41:f3:42:48:c9:9b:c6:de:
                    91:4d:4b:30:dd:51:2e:ac:a8:68:17:52:3d:b7:61:
                    29:c4:69:08:3d:ce:4a:61:b3:2a:e2:59:17:06:27:
                    e7:ce:fe:a9:6e:d6:40:9e:c7:a5:1f:1f:29:6a:9d:
                    0c:28:fe:12:e2:e3:8d:93:a7:05:0b:99:32:55:75:
                    57:18:ff:a2:df:bf:b9:1f:bb:a1:52:4e:9e:a8:4c:
                    99:e2:b3:02:0f:7b:83:43:a8:05:99:39:3d:ac:fb:
                    45:a0:98:80:60:83:7f:1c:91:0e:66:6b:8e:58:73:
                    c0:f8:ef:70:a0:90:23:37:80:dc:dc:0d:80:d8:64:
                    16:f5:03:8e:fc:5a:aa:25:05:11:9f:3e:c6:b9:ef:
                    d2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:90:58:73:32:AD:5E:CB:80:2D:05:DC:4B:3D:1E:D9:2B:09:6C:D1
            X509v3 Authority Key Identifier:
                keyid:EB:4B:C0:6D:40:65:7A:9B:F4:3E:CE:83:09:AD:AD:76:DF:24:A6:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/EB4BC06D40657A9BF43ECE8309ADAD76DF24A63B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec136eca64fd2a4969f15c99306c2d11e368f5e1c12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/1/323630323a663732653a34303a3a2f34322d3432203d3e20343031363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         78:28:47:60:e3:ad:ef:60:98:fb:43:cc:0c:6e:a2:f8:b2:9e:
         e7:d1:9f:95:b4:8b:9d:80:94:ef:3e:26:18:16:7d:e7:21:fe:
         6d:48:a5:c4:ba:85:4c:e5:9b:7c:98:42:c9:ce:4f:bc:70:f3:
         85:c1:73:f6:ef:5c:e4:7c:28:17:98:ab:a0:13:ac:95:af:5f:
         ec:b8:f9:cf:a9:b2:72:fc:56:39:29:70:a6:22:9e:b5:bd:94:
         31:32:83:b4:09:fa:3d:0d:e5:1e:0b:c2:57:eb:c8:01:2f:18:
         1b:e6:93:9d:d8:7c:1d:78:58:0d:69:65:eb:c2:41:75:42:76:
         40:e0:8a:ec:0b:59:24:c1:01:3d:49:0b:38:9e:7b:38:ba:f6:
         c8:0f:01:46:cb:8b:c5:ce:53:57:bf:4a:31:06:94:82:f8:b0:
         aa:f6:44:7b:58:b5:dd:5b:fe:20:2e:61:68:55:1d:fe:7a:a5:
         33:4a:6e:16:14:77:b3:ca:25:ab:94:ea:51:2b:b7:a2:cc:c0:
         11:e5:6d:22:ef:7d:1b:29:b8:3f:38:b0:69:0f:e6:ee:36:18:
         d1:ed:a6:67:3b:2f:ee:7b:84:08:cf:0b:57:a9:97:b9:f6:94:
         70:f2:1f:c0:eb:19:da:ef:98:42:c2:ca:50:d6:c2:7a:bf:1b:
         c1:9a:01:ca
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUJ2fAt9tYg6LyirjOIBcZ3vMLVNYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzY5ZGJjMmVjMTM2ZWNhNjRmZDJhNDk2OWYxNWM5OTMw
NmMyZDExZTM2OGY1ZTFjMTIwHhcNMjUwMzMxMTQxMzUwWhcNMjYwMzMwMTQxODUw
WjAzMTEwLwYDVQQDEygxMTkwNTg3MzMyQUQ1RUNCODAyRDA1REM0QjNEMUVEOTJC
MDk2Q0QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5cDdUs/Ut7w
weRXl6Mhr4geaiDCXZI2G5mPixi+j0wHnmLzAxkAE4BPnhP/+siBFRRyFD93us3m
rM+fMyJUxYvFtc9GJguxVWuS1y5//ELmsxxY++a6aERwLn0z+UY0i00xkbmmX+la
RtfaeSRqQfNCSMmbxt6RTUsw3VEurKhoF1I9t2EpxGkIPc5KYbMq4lkXBifnzv6p
btZAnselHx8pap0MKP4S4uONk6cFC5kyVXVXGP+i37+5H7uhUk6eqEyZ4rMCD3uD
Q6gFmTk9rPtFoJiAYIN/HJEOZmuOWHPA+O9woJAjN4Dc3A2A2GQW9QOO/FqqJQUR
nz7Gue/STQIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFBGQWHMyrV7LgC0F3Es9Htkr
CWzRMB8GA1UdIwQYMBaAFOtLwG1AZXqb9D7OgwmtrXbfJKY7MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2U5MmViYzgzLWQ3NmMtNGFlMi04NGVi
LWU2YmZmM2QzNDJiMS8xL0VCNEJDMDZENDA2NTdBOUJGNDNFQ0U4MzA5QURBRDc2
REYyNEE2M0IuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmIt
NGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNTc2NjMzZi0zNDNkLTRhYzMtYTkzNi05
ODk1OGU1NjMwZTYvMzY5ZGJjMmVjMTM2ZWNhNjRmZDJhNDk2OWYxNWM5OTMwNmMy
ZDExZTM2OGY1ZTFjMTIuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH
MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2U5MmViYzgzLWQ3NmMtNGFlMi04NGViLWU2YmZmM2QzNDJiMS8xLzMyMzYzMDMy
M2E2NjM3MzI2NTNhMzQzMDNhM2EyZjM0MzIyZDM0MzIyMDNkM2UyMDM0MzAzMTM2
MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHBiYC9y4AQDANBgkqhkiG9w0BAQsFAAOCAQEAeChHYOOt
72CY+0PMDG6i+LKe59GflbSLnYCU7z4mGBZ95yH+bUilxLqFTOWbfJhCyc5PvHDz
hcFz9u9c5HwoF5iroBOsla9f7Lj5z6mycvxWOSlwpiKetb2UMTKDtAn6PQ3lHgvC
V+vIAS8YG+aTndh8HXhYDWll68JBdUJ2QOCK7AtZJMEBPUkLOJ57OLr2yA8BRsuL
xc5TV79KMQaUgviwqvZEe1i13Vv+IC5haFUd/nqlM0puFhR3s8olq5TqUSu3oszA
EeVtIu99Gym4PziwaQ/m7jYY0e2mZzsv7nuECM8LV6mXufaUcPIfwOsZ2u+YQsLK
UNbCer8bwZoByg==
-----END CERTIFICATE-----