Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa
File:                     1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa (raw, json)
Hash identifier:          O0dGU/x8vAsEc199huzfB63vyZofvZrmbqhZYBEzXCY=
Subject key identifier:   82:3F:97:CC:29:86:A5:AC:F8:F6:87:44:30:4F:D6:72:C0:37:3C:E5
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7A559B883C8D8CE0F5747BA2208CE2AAC42E89DC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa
Signing time:             Sat 18 Jan 2025 00:00:00 +0000
ROA not before:           Sat 18 Jan 2025 00:00:00 +0000
ROA not after:            Sat 22 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f1:8800::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:55:9b:88:3c:8d:8c:e0:f5:74:7b:a2:20:8c:e2:aa:c4:2e:89:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan 18 00:00:00 2025 GMT
            Not After : Feb 22 23:59:59 2025 GMT
        Subject: serialNumber=77fa11af9f07e48b846879210c8bf2fea7fdd2d06905b89d643e2d3de3bab16d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:40:aa:92:f8:73:67:7d:48:b5:64:f8:75:31:
                    8a:14:2e:66:e1:7d:fb:92:0f:cc:44:74:b2:34:21:
                    e2:b1:f6:86:94:dd:64:23:e4:ac:c9:41:b9:12:81:
                    66:02:f9:9d:b8:f4:70:11:11:dc:96:45:49:01:4f:
                    bf:37:19:52:2d:ca:93:83:8a:a8:2d:0b:35:24:a4:
                    d5:c4:8d:b0:13:bf:27:f2:aa:b3:fe:ff:b7:0e:7c:
                    25:64:71:52:f7:ff:07:bc:87:c6:75:bf:35:ad:5f:
                    30:ac:c8:ec:aa:b2:ad:c4:dd:6d:c8:e5:cd:51:2b:
                    f2:3e:6f:aa:7a:de:6d:01:a1:dd:dc:42:69:9f:05:
                    05:38:ad:d2:15:86:02:c1:70:db:0a:68:37:c0:7e:
                    24:c1:dc:83:8b:4f:e7:df:4a:3a:00:5f:1d:ca:57:
                    24:4f:d8:9c:f2:61:ba:9e:01:b4:bb:79:b2:82:68:
                    09:b7:a9:9a:bd:7c:48:0c:0b:ef:7e:82:9a:90:6a:
                    73:ec:06:2a:ee:bd:67:52:13:50:ea:5d:d0:9d:fb:
                    88:a9:9e:62:3e:49:1f:60:66:fe:f5:d7:65:2e:20:
                    78:03:e2:33:7b:ea:a2:be:02:6b:6b:90:5a:75:1e:
                    19:21:d8:68:7e:b6:94:8e:e0:4a:95:e7:6f:c3:6f:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3F:97:CC:29:86:A5:AC:F8:F6:87:44:30:4F:D6:72:C0:37:3C:E5
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:01:8d:2f:41:f3:06:21:25:1b:d4:49:30:ef:6c:61:b3:ca:
         60:b8:b3:a0:55:30:fc:2f:87:c3:8a:ad:e9:b5:8a:8c:4c:b9:
         5b:1f:5b:7c:4f:89:22:ef:b4:bc:82:dd:33:9c:fc:a4:b0:e8:
         95:55:2f:cf:23:27:bc:18:90:3e:de:a4:f6:c3:ec:5f:f5:ff:
         89:d5:dd:77:00:44:91:ce:b3:aa:1b:f1:8e:dd:27:7d:f1:9d:
         19:08:60:9c:c4:01:34:47:f5:43:c6:41:60:4a:4f:37:a8:f2:
         71:88:20:7c:d7:d3:db:8c:6b:97:04:12:80:0d:6b:d0:16:97:
         6b:46:16:fd:5b:15:ee:d8:77:82:3a:85:5d:bf:c3:8e:bd:70:
         18:b6:bd:0a:72:89:73:42:84:1f:95:be:75:5a:58:e6:4b:3d:
         96:91:79:86:23:f8:2c:f5:a7:47:a9:36:3f:a0:bd:89:4e:37:
         58:da:e2:15:4d:73:43:21:5b:20:48:ea:3c:ee:bb:cb:07:90:
         54:4f:ca:11:0d:c8:3c:ef:20:a0:6d:f9:49:bd:d3:b5:62:0b:
         6e:d6:88:36:29:10:e2:dd:d2:44:8f:41:1a:9a:c3:d9:55:b9:
         d1:47:da:8b:06:b5:93:40:23:f5:3e:62:ba:7a:d2:b8:a2:b9:
         e6:6a:1c:98
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----