Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8979840e-82a9-441b-924a-93b9c7ea006b.roa
File:                     8979840e-82a9-441b-924a-93b9c7ea006b.roa (raw, json)
Hash identifier:          D3ViChY1pnu+WbTCD44JQbh5z/eeJrxbJTyQZA0PteY=
Subject key identifier:   98:7A:4D:FF:58:CF:C3:B7:4A:E3:5C:2E:85:D0:30:F8:52:59:41:C3
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       759E3DB3F78380837D46E4348E3F7A67BA38A548
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8979840e-82a9-441b-924a-93b9c7ea006b.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9e:3d:b3:f7:83:80:83:7d:46:e4:34:8e:3f:7a:67:ba:38:a5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=8a8ee20b4cbafc78e0628886d97c5dc011c237deed04e3ea0b0950890a69defa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:e3:0f:33:2c:5e:66:e8:f0:7a:34:d5:6d:
                    cc:53:11:89:89:3d:4b:11:f8:8e:b8:a2:62:12:25:
                    bf:b1:03:0a:c3:e7:c5:b9:7a:5e:98:63:18:da:4d:
                    06:4e:3a:63:e3:e2:cb:1b:4a:8b:1f:0e:e7:9a:d2:
                    20:03:03:8c:5a:de:7e:27:cf:4c:7b:bd:65:02:bd:
                    5b:47:82:60:d9:6f:49:50:d9:8a:b7:be:5a:9b:05:
                    64:4b:71:ad:b0:ad:50:86:ef:1b:b1:82:d3:26:02:
                    0b:49:7d:7a:54:a2:eb:28:6c:d3:15:19:a9:25:84:
                    ef:a4:23:7b:0a:3b:89:67:a9:5d:99:6b:48:5c:d7:
                    1d:3c:63:28:be:04:92:b0:fb:0a:1b:dc:b2:84:3d:
                    af:e5:f6:c2:dc:fd:b9:2f:a6:20:ed:5e:72:b3:61:
                    c5:a8:5d:59:77:0b:0d:b7:f3:ea:8d:b4:7f:64:e4:
                    22:db:35:ae:2e:89:d7:81:05:e3:af:12:4e:23:b3:
                    bb:8e:5e:e6:3b:c7:a7:83:46:ed:39:7e:27:e0:1d:
                    0e:f0:e3:18:7b:3d:ad:59:86:80:79:71:2f:ec:0b:
                    b0:16:7e:34:a2:f1:27:3a:fb:de:5f:65:e1:cb:ff:
                    8c:95:ce:01:f3:a7:df:e1:50:86:88:03:d4:7c:b2:
                    fc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7A:4D:FF:58:CF:C3:B7:4A:E3:5C:2E:85:D0:30:F8:52:59:41:C3
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8979840e-82a9-441b-924a-93b9c7ea006b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:2f:bd:e7:97:2b:c1:13:4d:40:37:4b:30:32:d9:f3:d7:b6:
         17:28:0f:54:cd:6b:74:91:f1:4f:59:7b:02:2b:4e:76:e8:11:
         25:84:f1:2a:69:bf:dd:05:87:1d:89:80:72:8b:9d:73:37:97:
         f9:f7:77:80:59:3c:ab:be:1a:53:72:7a:88:60:e4:90:6b:b1:
         ef:8c:5c:39:1c:18:66:92:ba:ff:24:c6:ca:a5:b7:f1:d5:17:
         3e:29:5b:3e:4d:a2:da:6a:2c:60:28:8c:61:5a:d5:3a:41:68:
         78:63:9a:33:59:83:7c:19:66:68:5e:cd:b2:1b:73:88:00:f1:
         1a:d5:db:8c:35:55:96:49:50:f6:17:65:4c:3b:86:65:a3:9a:
         ce:b6:a8:e7:af:4e:2d:a2:a8:b4:8a:46:e4:15:61:3c:96:06:
         71:d9:0d:78:3a:84:26:2a:a1:fa:24:27:f2:61:52:22:bd:e5:
         12:67:52:7f:1b:af:6a:ba:93:59:86:d0:b0:0b:96:53:25:d6:
         05:0c:92:d5:89:0d:d7:95:e8:b2:84:28:27:cd:8e:20:d8:79:
         3e:3c:12:08:a2:ba:2d:6c:8f:92:b3:7f:5a:7d:71:53:f6:3e:
         41:f0:66:9e:a1:fa:e2:63:c9:88:95:87:79:a8:bc:aa:88:7b:
         8c:f4:66:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----