Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/77071dba-3d71-409d-bec3-e6ee4d8fc9dc.roa
File:                     77071dba-3d71-409d-bec3-e6ee4d8fc9dc.roa (raw, json)
Hash identifier:          NQ0sB8V00ETj48tv6EflUqPtyVBJLuw95m+lPLFO954=
Subject key identifier:   CB:DF:23:32:B2:4C:E0:5F:BC:33:5B:8C:77:8F:6E:3E:DF:F6:4B:7B
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       36DEE29CF105AB29E51B856C6A3CCA68E82A2857
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/77071dba-3d71-409d-bec3-e6ee4d8fc9dc.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e800::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:de:e2:9c:f1:05:ab:29:e5:1b:85:6c:6a:3c:ca:68:e8:2a:28:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=938107811436595f17dbf6ac374a7dc83b4a2db4476918409deed4d6e9d0fe42, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:ae:e5:68:e2:54:3c:c9:de:b4:60:f7:75:
                    b7:e3:61:1d:3e:60:58:12:9f:de:83:53:de:8b:3c:
                    8a:55:7e:be:05:86:02:1e:00:74:db:e7:fc:cc:23:
                    20:e7:a4:c9:8b:bf:7c:95:ec:eb:25:ba:43:51:7d:
                    47:44:26:92:74:6c:ae:f4:97:a4:a8:24:37:88:7b:
                    cb:33:9b:77:7b:de:22:3a:89:b5:70:82:fe:e5:74:
                    55:1c:21:b0:d2:8d:63:9e:71:89:bd:47:fb:96:63:
                    ca:da:d3:23:36:7e:bb:05:b3:99:b2:1f:f3:6d:0a:
                    75:31:72:b0:6e:42:ec:a2:e3:94:a3:01:9a:e3:47:
                    b5:2a:b0:b8:60:81:53:f1:39:c9:1d:4e:c2:98:16:
                    0e:45:5b:e5:9a:30:aa:d4:1b:09:f2:e3:06:e1:4b:
                    ee:37:8d:cc:3e:75:6e:ac:99:0d:e8:90:96:40:ac:
                    05:df:97:25:48:52:00:f6:e3:2d:9f:34:77:7c:15:
                    fd:01:db:8e:b0:53:9a:9c:47:69:19:88:4a:e7:0a:
                    30:42:3d:ea:d5:f1:09:09:ae:1e:16:9b:7f:bd:b0:
                    57:ac:5a:6a:e7:b4:24:48:c6:72:d5:3c:2c:03:a2:
                    fe:60:d8:6f:ad:fe:2b:9a:25:d2:d7:ec:8c:4b:5a:
                    c9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DF:23:32:B2:4C:E0:5F:BC:33:5B:8C:77:8F:6E:3E:DF:F6:4B:7B
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/77071dba-3d71-409d-bec3-e6ee4d8fc9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e800::/42

    Signature Algorithm: sha256WithRSAEncryption
         55:89:6e:eb:41:a1:16:9d:75:2e:81:3e:ec:41:86:53:5d:fb:
         e8:c0:c6:f6:61:ca:0c:c1:f7:87:83:95:c5:6b:67:a1:df:e5:
         03:8d:8e:64:ae:3d:f6:42:d5:fd:c1:fd:7a:7e:c9:1a:39:d0:
         5c:15:b7:c0:ed:d8:58:9c:a8:7b:4d:c1:71:8b:35:53:28:26:
         02:01:cb:30:a2:c5:95:d8:af:ee:93:23:50:5a:07:fc:50:0c:
         33:ef:cf:86:db:1e:1d:76:74:b2:8d:b9:d3:d6:95:b4:3c:80:
         ff:a9:ae:9d:7f:3d:70:b4:12:b3:fd:60:fa:60:fb:e0:23:dd:
         c6:85:50:89:8a:ce:af:f6:c7:fa:57:e3:a5:1d:29:9a:d4:2b:
         fb:6b:a9:da:72:f0:0c:01:c2:78:6a:12:27:12:28:6b:43:6a:
         7a:62:9a:2a:e6:b4:6f:a8:39:fd:a8:da:3c:dd:bd:02:c4:83:
         ca:0e:c3:6c:d1:fb:d5:64:a3:6e:34:19:be:72:e6:b4:fd:32:
         c8:e4:70:6c:40:43:6d:f7:b7:38:10:38:4b:8b:f3:56:ca:08:
         65:08:82:52:bd:be:d3:95:65:25:2b:74:ce:31:17:1a:88:e7:
         8f:91:0b:05:cf:0d:e5:b9:2c:43:99:e8:07:3c:69:a3:55:86:
         c6:ba:2f:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----