Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa
File:                     4d9dc189-6c00-4764-9c0c-c990d1727298.roa (raw, json)
Hash identifier:          qRwczZ1oGmeheO5q6IPqpyFLytBGyLuKHjWTqyIJ4YQ=
Subject key identifier:   52:0B:F3:D4:28:49:D3:A5:40:DD:90:43:6E:93:05:8B:3D:57:BC:99
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7080285B16E616E19F3236A55F7A27A022251CAE
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:600::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:80:28:5b:16:e6:16:e1:9f:32:36:a5:5f:7a:27:a0:22:25:1c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=a52b6a35dee7f64ed2b6e4860107bd035348ee73d55ae49c24d1fefe64b461ce, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:50:75:25:fb:0d:a3:cc:ec:77:10:ae:f1:
                    13:de:c0:b0:7c:15:c3:86:f3:b8:2d:45:db:7c:32:
                    73:fa:bd:1e:95:60:2f:af:ea:cc:2e:1e:13:8e:d1:
                    4f:fe:94:ab:d1:c3:17:30:5d:29:82:2b:d8:0d:f6:
                    13:c0:40:d8:81:8e:11:3b:e5:5d:ab:44:d8:4a:1e:
                    b8:d5:df:c8:58:71:56:ea:fa:56:24:ac:e2:04:e7:
                    66:e4:0d:3c:e0:18:c2:0c:2f:4e:a5:bc:68:88:9a:
                    88:44:a7:e1:70:2d:6d:f2:a7:6e:dc:fb:21:67:32:
                    6b:c0:2c:d4:ee:3a:8e:a3:31:91:34:bd:a4:90:67:
                    e3:aa:b0:2e:2b:1d:1d:5f:68:35:1d:c9:0a:b6:29:
                    5b:91:95:e9:d6:65:56:e8:54:74:de:60:83:b1:c4:
                    da:97:6f:76:f5:ba:32:e9:a4:03:37:df:e5:f5:60:
                    d7:6b:9f:a5:34:8c:2a:13:e8:ef:af:34:10:6a:29:
                    f8:d7:ea:4d:66:f3:98:25:70:49:23:1a:a9:29:0c:
                    31:1e:12:5f:73:8a:aa:18:6a:79:5a:68:c4:68:d3:
                    f8:f5:92:24:54:e8:0e:6d:63:37:7f:bd:79:ce:10:
                    19:a8:b3:58:ae:1d:27:59:3b:eb:47:80:cc:1c:2f:
                    93:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0B:F3:D4:28:49:D3:A5:40:DD:90:43:6E:93:05:8B:3D:57:BC:99
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:600::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:5a:28:11:9a:f8:d8:b0:09:c9:9d:df:d0:f4:36:b5:97:5b:
         8f:7c:68:0c:15:f8:9d:0a:e9:bc:ca:50:77:e9:ec:f8:88:55:
         db:3a:6c:9a:2d:c5:59:53:cf:50:e3:08:b6:9e:40:fc:f3:52:
         51:f9:ee:2c:c1:90:de:e8:bb:83:35:49:bc:72:e4:59:cf:65:
         de:20:c0:67:5e:20:4d:e6:cb:d9:4f:e0:03:75:58:60:8f:05:
         9d:6f:4d:65:1b:8c:a1:24:72:cc:ed:5e:cd:7e:60:36:65:04:
         05:97:ae:78:e8:2e:4e:a5:15:28:80:44:35:f1:d9:dd:73:29:
         0d:86:82:83:e3:f2:da:33:d2:9c:88:f1:bc:ac:b3:e5:6b:d1:
         e5:9f:fd:0f:bf:14:37:c7:d2:f2:87:da:8f:24:98:9d:a8:21:
         ab:82:85:44:fd:d1:7d:c4:3d:ad:4b:a4:a5:09:46:4e:10:72:
         12:62:c3:1b:7a:51:da:31:da:ad:cb:a1:f9:2e:2a:17:65:f0:
         e6:5a:dc:c6:39:de:48:2e:5c:f9:33:63:30:26:fb:aa:15:e3:
         ec:18:0a:82:5c:22:a2:44:ea:ed:64:a7:9b:f8:08:cc:5c:7c:
         92:75:ad:57:f4:73:64:bc:19:30:bb:82:2d:c2:c1:d6:01:11:
         1e:fc:39:8e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUcIAoWxbmFuGfMjalX3onoCIlHK4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNTJiNmEzNWRlZTdmNjRlZDJiNmU0ODYwMTA3YmQwMzUz
NDhlZTczZDU1YWU0OWMyNGQxZmVmZTY0YjQ2MWNlMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7flB1JfsNo8zsdxCu8RPewLB8FcOG87gtRdt8MnP6vR6V
YC+v6swuHhOO0U/+lKvRwxcwXSmCK9gN9hPAQNiBjhE75V2rRNhKHrjV38hYcVbq
+lYkrOIE52bkDTzgGMIML06lvGiImohEp+FwLW3yp27c+yFnMmvALNTuOo6jMZE0
vaSQZ+OqsC4rHR1faDUdyQq2KVuRlenWZVboVHTeYIOxxNqXb3b1ujLppAM33+X1
YNdrn6U0jCoT6O+vNBBqKfjX6k1m85glcEkjGqkpDDEeEl9ziqoYanlaaMRo0/j1
kiRU6A5tYzd/vXnOEBmos1iuHSdZO+tHgMwcL5ODAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUUgvz1ChJ06VA3ZBDbpMFiz1XvJkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzRkOWRjMTg5LTZjMDAtNDc2NC05YzBjLWM5OTBkMTcyNzI5OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwBgAwDQYJKoZIhvcNAQELBQADggEBABRaKBGa+NiwCcmd39D0NrWX
W498aAwV+J0K6bzKUHfp7PiIVds6bJotxVlTz1DjCLaeQPzzUlH57izBkN7ou4M1
Sbxy5FnPZd4gwGdeIE3my9lP4AN1WGCPBZ1vTWUbjKEkcsztXs1+YDZlBAWXrnjo
Lk6lFSiARDXx2d1zKQ2GgoPj8toz0pyI8byss+Vr0eWf/Q+/FDfH0vKH2o8kmJ2o
IauChUT90X3EPa1LpKUJRk4QchJiwxt6Udox2q3LofkuKhdl8OZa3MY53kguXPkz
YzAm+6oV4+wYCoJcIqJE6u1kp5v4CMxcfJJ1rVf0c2S8GTC7gi3CwdYBER78OY4=
-----END CERTIFICATE-----