Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87fc20f7-0de9-48d8-850e-c430d88860e9.roa
File:                     87fc20f7-0de9-48d8-850e-c430d88860e9.roa (raw, json)
Hash identifier:          ocBi7BUw0KLNOcEl/JaRb2/s3/Wf7ZV9pjo2QD5wr5E=
Subject key identifier:   88:82:F2:EF:E5:FF:79:55:24:1D:85:D0:53:C9:11:96:25:34:04:3D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       418445FF3048373EBDD827F3F630C5F2FD40D3B8
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87fc20f7-0de9-48d8-850e-c430d88860e9.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:84:45:ff:30:48:37:3e:bd:d8:27:f3:f6:30:c5:f2:fd:40:d3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=74580d22da79baf0406c7706cf92d214459f0ccbd1ef6472e7a3fa501f079090, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:86:ef:cf:22:25:07:c2:aa:2a:19:9c:b3:
                    3f:37:4b:8d:f0:22:30:e6:5e:0e:75:23:51:78:73:
                    0c:1d:60:25:cb:88:ed:67:0f:3f:3d:6f:4f:48:74:
                    2c:a8:af:b4:8b:63:11:9b:79:11:22:4b:ab:6c:b9:
                    bc:f0:97:3d:95:e8:39:e0:7f:24:4d:8d:6c:d5:d6:
                    18:44:93:bd:e0:0e:20:84:33:1f:9d:6c:e8:97:d3:
                    11:da:32:9d:88:b1:62:79:87:ba:7b:b9:7d:c5:b3:
                    2a:a6:14:b5:90:fa:a3:0d:cb:4d:90:43:ea:42:a9:
                    87:ac:16:b6:2f:fa:26:40:4e:6e:64:13:96:4d:92:
                    82:15:ce:bc:45:fc:50:90:1c:3d:81:22:a1:bb:30:
                    24:47:f5:07:09:6a:29:b9:23:fd:da:43:9a:92:a7:
                    84:5d:d2:d0:9e:88:81:53:eb:2c:fb:06:6a:88:69:
                    06:4f:2f:ab:71:f3:62:55:8b:89:39:2a:63:81:74:
                    d5:38:6f:87:67:3a:fd:be:51:e7:46:1f:33:85:99:
                    75:79:a8:64:8a:ad:bd:4b:e6:c3:59:15:02:2d:00:
                    ea:40:8f:53:67:74:95:92:af:6d:8f:8d:85:0b:d2:
                    13:bb:3e:87:f1:98:6b:4d:a0:62:31:e0:b2:62:e7:
                    47:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:82:F2:EF:E5:FF:79:55:24:1D:85:D0:53:C9:11:96:25:34:04:3D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87fc20f7-0de9-48d8-850e-c430d88860e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:7b:67:09:02:a4:83:83:08:71:0c:94:32:df:fa:f2:fd:4d:
         aa:74:87:63:91:1a:42:22:3f:51:2e:ad:f0:18:5d:8e:d1:fe:
         3e:7d:2d:0d:d9:e8:09:e4:dd:50:1a:d6:6c:4d:f7:d6:60:70:
         54:77:09:ef:01:62:e8:1b:9f:25:8d:57:c8:ea:2c:80:1d:ce:
         58:ac:9c:6c:82:1f:73:ab:d2:3f:3e:25:cd:b8:76:e5:26:f3:
         f2:60:fd:31:24:26:a8:e6:d8:ab:22:ff:56:48:22:c2:f9:dc:
         ca:ee:75:f0:54:d4:3a:6b:98:da:f3:b8:83:5f:51:60:3e:28:
         00:78:35:1e:c9:ca:d2:41:cd:c1:bb:46:f2:9d:63:d8:0e:c9:
         82:d1:6c:1e:97:11:2d:97:a9:71:88:80:bf:4c:56:63:fb:df:
         49:9b:3b:a5:c9:f1:4e:b0:9c:7f:f3:82:f1:a6:8b:dc:ca:24:
         37:93:a8:37:f1:7c:56:60:27:34:c1:6b:b4:bf:ec:64:4a:be:
         4c:f6:a0:bd:41:c8:c8:1b:30:e3:f1:26:bc:00:3d:f1:2e:23:
         d9:a9:0c:78:81:e0:73:d7:47:34:cc:08:94:28:7c:aa:a9:9d:
         69:3b:16:71:3e:a6:fd:bd:7c:44:f7:c0:d2:09:83:d2:f1:12:
         ac:e4:bd:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----