Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/529e132d-0c8c-4ca3-bafc-0927932483fd.roa
File:                     529e132d-0c8c-4ca3-bafc-0927932483fd.roa (raw, json)
Hash identifier:          VTUycgO35FPCF7VH1/sNP4j6x7/5ff/y/XOsSpUmwuI=
Subject key identifier:   DA:79:81:0D:48:76:F8:5E:BB:96:10:47:20:A3:5F:07:2D:E3:C3:36
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       079DDE3B59A968A22A72B5AAEF7F7FD34FD4D08E
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/529e132d-0c8c-4ca3-bafc-0927932483fd.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9d:de:3b:59:a9:68:a2:2a:72:b5:aa:ef:7f:7f:d3:4f:d4:d0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=1851eb491948a0e400ad35e7f7643bf18f775355247ca3888f43cb5933df1155, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:93:f6:b4:6c:c2:14:9d:f5:25:92:ac:30:
                    fc:11:6d:b9:19:d9:0e:90:c3:7e:e8:bb:bc:10:53:
                    3b:8c:7d:87:2f:9c:c0:60:51:2d:b3:c9:36:2a:0b:
                    2b:4a:25:ab:5c:a4:1a:0b:8c:00:88:3f:0f:86:45:
                    2b:48:9f:67:78:54:a8:67:0f:7e:61:71:fd:c7:bf:
                    3b:93:ef:e5:7a:29:24:3b:45:e3:3d:82:77:f7:9e:
                    6a:dd:d8:1d:81:a0:9b:d2:d3:2b:a8:23:93:de:80:
                    06:76:1e:39:50:1a:9d:b2:25:c7:a9:99:c7:26:d6:
                    bc:f3:67:20:cf:22:7e:01:47:66:e0:84:7b:2d:37:
                    8f:0a:be:bc:5d:b9:f2:28:2f:e2:83:7d:bd:dc:ba:
                    f6:ae:4f:e6:dc:30:e4:69:55:01:3e:80:51:38:ec:
                    09:b5:68:96:d0:91:07:22:4b:0c:81:7a:6a:72:bd:
                    ab:0e:ad:50:51:fb:73:56:e3:fc:ec:06:26:1c:93:
                    7f:b0:96:0f:0b:4a:96:68:0f:b2:8a:39:6b:39:44:
                    b9:f4:82:a2:bd:59:d0:86:37:9a:d6:9b:ce:be:f0:
                    92:d6:3a:43:fc:1a:df:c0:09:77:34:d2:bd:fc:9b:
                    9d:50:64:ac:03:93:70:78:39:19:da:74:ac:92:d7:
                    99:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:79:81:0D:48:76:F8:5E:BB:96:10:47:20:A3:5F:07:2D:E3:C3:36
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/529e132d-0c8c-4ca3-bafc-0927932483fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:20:95:31:2b:1f:bd:c1:44:18:2a:6b:a4:22:03:13:ce:34:
         18:9d:b5:60:dd:72:29:36:b3:eb:f6:da:aa:7f:9c:4a:e2:32:
         da:62:d1:81:a1:18:fb:e5:6c:ea:5c:98:fb:bc:a3:52:ed:67:
         cc:00:25:85:fd:40:1f:21:b7:46:4b:3e:23:4c:af:31:41:d8:
         d9:35:56:f3:0d:6a:1f:07:67:ee:22:3e:21:9e:cd:24:3f:64:
         8a:a9:9c:b6:e3:da:41:8d:36:8f:d4:b7:de:0b:f5:da:60:1b:
         21:9d:df:e0:11:4c:1b:20:48:b7:c7:fe:6a:26:24:f9:33:b0:
         57:63:51:58:80:bd:74:d5:c3:c2:6a:88:8f:0f:cc:a5:b6:0c:
         da:fb:32:25:a2:d6:1a:97:17:9f:48:bf:3f:d6:13:9a:56:26:
         15:a3:d8:0c:1b:e7:be:f1:c1:f6:6d:5b:41:fa:78:74:5a:eb:
         2f:df:85:73:be:4c:88:ec:a6:5b:9c:b9:58:78:70:c6:e8:33:
         b7:71:0f:80:26:ec:41:72:f3:01:7b:ab:54:01:fe:c7:35:e7:
         ff:81:19:92:da:ff:fc:1f:1b:4b:71:a7:f5:9e:88:b0:96:82:
         41:d1:12:b3:2d:df:16:a9:d2:b3:aa:d0:45:d6:cd:42:50:86:
         13:34:52:24
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUB53eO1mpaKIqcrWq739/00/U0I4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AxODUxZWI0OTE5NDhhMGU0MDBhZDM1ZTdmNzY0M2JmMThm
Nzc1MzU1MjQ3Y2EzODg4ZjQzY2I1OTMzZGYxMTU1MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDB/JP2tGzCFJ31JZKsMPwRbbkZ2Q6Qw37ou7wQUzuMfYcv
nMBgUS2zyTYqCytKJatcpBoLjACIPw+GRStIn2d4VKhnD35hcf3HvzuT7+V6KSQ7
ReM9gnf3nmrd2B2BoJvS0yuoI5PegAZ2HjlQGp2yJcepmccm1rzzZyDPIn4BR2bg
hHstN48KvrxdufIoL+KDfb3cuvauT+bcMORpVQE+gFE47Am1aJbQkQciSwyBempy
vasOrVBR+3NW4/zsBiYck3+wlg8LSpZoD7KKOWs5RLn0gqK9WdCGN5rWm86+8JLW
OkP8Gt/ACXc00r38m51QZKwDk3B4ORnadKyS15kdAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU2nmBDUh2+F67lhBHIKNfBy3jwzYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzUyOWUxMzJkLTBjOGMtNGNhMy1iYWZjLTA5Mjc5MzI0ODNmZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAPD74DANBgkqhkiG9w0BAQsFAAOCAQEAWyCVMSsfvcFEGCprpCIDE840
GJ21YN1yKTaz6/baqn+cSuIy2mLRgaEY++Vs6lyY+7yjUu1nzAAlhf1AHyG3Rks+
I0yvMUHY2TVW8w1qHwdn7iI+IZ7NJD9kiqmctuPaQY02j9S33gv12mAbIZ3f4BFM
GyBIt8f+aiYk+TOwV2NRWIC9dNXDwmqIjw/MpbYM2vsyJaLWGpcXn0i/P9YTmlYm
FaPYDBvnvvHB9m1bQfp4dFrrL9+Fc75MiOymW5y5WHhwxugzt3EPgCbsQXLzAXur
VAH+xzXn/4EZktr//B8bS3Gn9Z6IsJaCQdESsy3fFqnSs6rQRdbNQlCGEzRSJA==
-----END CERTIFICATE-----