Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d914165-a3e7-48af-b624-8691c64e5360.roa
File:                     8d914165-a3e7-48af-b624-8691c64e5360.roa (raw, json)
Hash identifier:          NuZZIXP0JNHshXNTHbEnnbzFflgLH1O2kybdEikjMjo=
Subject key identifier:   A5:D4:4B:7B:93:CB:0A:75:B6:B0:93:87:18:53:CC:49:BB:F8:14:28
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       43A983E5C3F6F8CCDBF9D83C58BEB473E204CC21
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d914165-a3e7-48af-b624-8691c64e5360.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f000::/28 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a9:83:e5:c3:f6:f8:cc:db:f9:d8:3c:58:be:b4:73:e2:04:cc:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=ae0c994ed3ad86509d69fc0d59d7ce7b1286881d0efec9065cb5453196b7c627, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:46:f4:f9:75:28:dc:f6:fe:f5:44:a7:86:c8:
                    9b:58:dc:6a:14:22:d5:dc:d8:6c:2b:2c:f5:06:d1:
                    fe:31:ea:b7:fd:f8:4c:38:48:95:5d:db:34:8e:91:
                    a9:62:d6:f0:86:6a:0b:eb:34:b1:06:47:a9:50:39:
                    b2:0a:e3:bb:e7:85:28:69:56:3f:26:7c:f6:63:ab:
                    16:7c:92:cd:42:a3:80:03:4c:c5:2a:f2:11:97:26:
                    d1:e5:80:57:78:fc:e2:f5:45:92:86:44:74:5b:90:
                    47:d4:7a:8c:49:55:6d:3f:77:14:76:55:63:a1:5d:
                    2a:3b:2a:a3:96:3f:ac:46:a4:30:ac:d4:0c:4f:58:
                    5f:ed:e9:8e:79:75:c5:b2:47:f1:b2:b6:c4:95:9c:
                    60:39:78:66:c8:32:e2:d9:7a:f6:38:af:f3:fb:06:
                    b5:c0:25:c2:24:c8:89:2b:38:89:c3:51:a1:5d:cb:
                    95:2e:bb:9b:1e:af:7b:61:ac:82:62:72:6c:b4:7b:
                    78:fc:d4:b9:97:de:9f:0f:ee:9c:e8:c4:58:8d:7a:
                    c1:7f:07:b7:a8:65:8a:4b:39:3a:d7:14:06:95:5d:
                    07:a5:3d:60:5e:e4:8f:60:c0:b5:42:e4:bc:c8:2a:
                    ef:e2:5b:d1:8a:5f:c8:1b:c7:64:e8:d7:1f:d9:2b:
                    ab:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D4:4B:7B:93:CB:0A:75:B6:B0:93:87:18:53:CC:49:BB:F8:14:28
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d914165-a3e7-48af-b624-8691c64e5360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f000::/28

    Signature Algorithm: sha256WithRSAEncryption
         46:37:f4:0b:39:37:1b:71:75:f3:2f:46:69:56:c2:fc:04:cb:
         c6:1a:42:4a:eb:11:5e:ce:ab:bc:5a:fa:08:d0:aa:0d:79:84:
         44:e8:87:75:db:c5:64:ba:49:b6:67:0a:ca:0a:42:b7:e8:11:
         05:73:cd:fe:7b:4d:bf:55:44:90:1a:f1:a7:bb:aa:c8:38:91:
         6b:6d:3c:ba:21:fd:ea:b3:ec:1d:26:a8:de:58:7b:a8:1b:5f:
         52:93:94:93:32:a0:3e:ef:16:81:2d:40:a3:e9:96:5b:07:41:
         21:f3:fd:43:c2:6e:c3:cd:37:8a:1f:8f:e8:05:43:40:2d:42:
         e2:e8:23:c6:c0:ab:a7:f7:ed:64:bf:c9:45:ed:58:44:00:be:
         b9:80:4a:0f:e0:ad:b8:15:57:dd:ed:af:3e:54:fa:44:d4:25:
         81:28:6a:8d:15:2f:f3:72:2a:d7:af:39:b3:b5:d2:27:66:9c:
         d4:f9:da:c3:3c:b6:ef:fa:6a:f0:e4:0a:27:3c:dc:a4:df:d7:
         f8:01:b7:fb:f4:86:c0:53:45:c9:1b:0c:8e:1d:ca:eb:35:fd:
         2a:73:12:37:d5:39:b2:d6:04:b4:ee:09:5e:6f:88:2d:89:c9:
         35:b2:ab:d0:7a:19:75:2f:32:c5:2d:ea:9e:24:39:d1:38:39:
         f2:15:86:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----