Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a86c8ffa-34ab-4a01-8f63-86207fe44159.roa
File:                     a86c8ffa-34ab-4a01-8f63-86207fe44159.roa (raw, json)
Hash identifier:          YWlOE+/RU5STZyTsmOe/jQlEA5foPNtjDHsrI6Ok8So=
Subject key identifier:   49:0A:AB:35:4B:1C:63:7E:4C:6C:AC:07:FD:52:44:BE:5F:09:E3:BE
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       23F3C575CC4B69A89DD4189F03C181846EDA0E8F
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a86c8ffa-34ab-4a01-8f63-86207fe44159.roa
Signing time:             Fri 31 Jan 2025 00:00:00 +0000
ROA not before:           Fri 31 Jan 2025 00:00:00 +0000
ROA not after:            Fri 07 Mar 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2606:f40::/39 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f3:c5:75:cc:4b:69:a8:9d:d4:18:9f:03:c1:81:84:6e:da:0e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Jan 31 00:00:00 2025 GMT
            Not After : Mar  7 23:59:59 2025 GMT
        Subject: serialNumber=0d50d9fe6c200cbdc9018fca41d9da464b639fb55fa4cfd10bfa9178c189d3b0, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:36:c8:32:dc:47:9d:fb:26:35:ac:ab:f7:
                    fd:08:98:58:8d:91:2d:e2:df:a2:31:f4:f2:96:21:
                    44:d9:e9:a9:9e:00:39:94:73:d0:91:b1:76:9a:09:
                    d7:f2:90:1a:97:78:0b:c6:25:4c:1d:2f:ee:d7:c6:
                    d3:d1:9e:33:28:cf:36:5f:c7:2d:fd:f8:6c:6d:1e:
                    87:10:74:4d:6b:8e:93:73:c8:31:f5:36:36:95:29:
                    52:26:f2:40:63:9e:aa:ae:0c:36:f7:82:34:d3:68:
                    3f:fd:44:f6:7c:be:52:a0:a7:1a:8d:77:d4:4e:64:
                    fc:25:48:d7:50:b9:06:d0:45:2b:b8:b3:50:ce:f3:
                    b4:63:de:ab:af:f3:f2:c7:13:c2:e1:15:24:6e:de:
                    39:bb:03:de:bb:ca:2a:e6:94:bd:0f:0a:35:c1:52:
                    3e:4c:e4:ee:95:da:f5:71:b8:be:2d:81:da:fc:2f:
                    d1:e2:dc:5d:46:8d:76:6b:16:c6:92:2b:67:db:ce:
                    bc:81:0a:f0:27:e4:59:bf:8c:9a:9d:96:ec:92:9c:
                    8d:cd:3b:18:09:05:d7:f6:38:9d:48:ff:50:9c:b4:
                    e9:04:29:6e:30:d9:c7:ad:ab:0d:60:9d:ec:0f:03:
                    34:fa:6b:8c:9f:77:04:bf:8e:68:4f:61:01:87:80:
                    2e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0A:AB:35:4B:1C:63:7E:4C:6C:AC:07:FD:52:44:BE:5F:09:E3:BE
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a86c8ffa-34ab-4a01-8f63-86207fe44159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/39

    Signature Algorithm: sha256WithRSAEncryption
         85:af:0a:70:50:43:df:6d:52:6f:7f:9b:5e:12:42:bb:ef:37:
         18:99:de:09:e5:52:17:7c:06:78:18:d2:92:70:ac:13:e3:d3:
         75:cf:4c:3e:29:d8:ac:73:03:68:87:ff:47:2b:5c:53:72:6a:
         8d:4a:43:94:37:5a:76:81:b9:e7:f3:be:3f:c5:b7:74:71:df:
         26:b0:11:e0:fc:1e:88:0a:5d:f4:76:39:46:d3:8b:79:13:be:
         50:cb:e8:cd:85:13:a0:2c:54:d6:8b:22:2f:0a:f7:42:2a:5f:
         2d:b0:a4:1b:e5:95:26:0b:8f:a5:b9:c2:92:fe:f8:16:fe:8a:
         dd:1d:31:a8:02:eb:d5:bd:54:79:f9:bf:bc:4e:a2:63:f4:2a:
         4a:67:53:ae:7a:89:9d:21:f2:31:4e:51:8c:ea:d7:a2:53:3a:
         c6:c6:11:ec:ec:17:0b:c7:a2:6e:d6:55:9d:41:b6:f5:e3:f8:
         1a:8b:81:9c:66:77:c6:17:4c:6d:8a:3b:9f:44:da:ea:6e:86:
         27:13:cd:b1:25:13:3a:3b:bd:22:8f:64:6b:96:fa:5e:7a:da:
         a6:9c:33:51:95:a1:eb:a9:16:a9:1a:33:c0:d3:10:5e:90:34:
         89:82:ba:5d:dc:72:7b:ce:84:9e:c1:92:df:34:f0:23:69:c6:
         64:38:85:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----