Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af93e150-9469-47eb-8185-3ff03d87db06.roa
File:                     af93e150-9469-47eb-8185-3ff03d87db06.roa (raw, json)
Hash identifier:          ZbINGDMWAi86NDqn2sONzbTHNnuOkD4ftomKvt5W9cI=
Subject key identifier:   87:17:3E:FF:11:E3:3C:23:60:7F:6F:6A:94:59:F6:22:66:9D:BE:3D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       468C9D20A549F258E80A2D0AA219B2D3C59A348D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af93e150-9469-47eb-8185-3ff03d87db06.roa
Signing time:             Mon 20 Jan 2025 00:00:00 +0000
ROA not before:           Mon 20 Jan 2025 00:00:00 +0000
ROA not after:            Mon 24 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:f000::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8c:9d:20:a5:49:f2:58:e8:0a:2d:0a:a2:19:b2:d3:c5:9a:34:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan 20 00:00:00 2025 GMT
            Not After : Feb 24 23:59:59 2025 GMT
        Subject: serialNumber=f47aa25b8d37fd37f390cbcc94257e24637585e01dcf9fe8654ec746e4613c5f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:da:a4:94:dc:7f:59:c1:39:48:e3:18:39:8d:
                    86:4e:21:26:8f:75:bc:d8:69:dd:ab:2d:da:5f:a7:
                    19:80:89:c8:d4:38:c2:f3:af:db:68:d0:76:db:5d:
                    05:26:92:d9:e2:1c:f7:1b:1d:c3:49:0d:75:52:ee:
                    79:4d:6b:65:60:7e:cc:0a:5f:f7:58:9d:4b:37:1a:
                    9e:d0:ff:cd:4b:c3:97:33:c1:2e:ab:80:63:d6:dc:
                    09:0e:24:40:fb:4d:6a:30:b8:1e:0a:e4:60:7e:af:
                    25:35:51:fd:ad:8c:fe:78:58:72:4c:1f:e9:a6:37:
                    67:46:f8:66:05:18:9d:df:7c:fb:96:21:4e:ff:e3:
                    25:b0:d0:fc:98:75:d7:8c:ef:29:92:40:d4:ac:73:
                    dc:aa:96:0b:47:23:e6:d2:91:77:c1:11:db:3a:11:
                    58:a1:d8:33:6d:5c:d8:82:c8:e0:8f:4e:e8:00:4a:
                    64:20:45:6a:bc:f6:7b:57:3b:5f:eb:46:5f:d9:8a:
                    50:7f:9c:19:d6:1c:db:31:61:98:66:a0:70:90:4b:
                    df:44:da:31:97:d8:b5:e0:1d:e7:a9:11:5d:65:9b:
                    09:df:e2:12:a0:ab:4b:93:9a:e5:60:5b:d9:92:36:
                    5e:8f:b5:4e:2f:f1:43:50:93:7a:8d:d4:2f:94:de:
                    a4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:17:3E:FF:11:E3:3C:23:60:7F:6F:6A:94:59:F6:22:66:9D:BE:3D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af93e150-9469-47eb-8185-3ff03d87db06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f000::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:7e:7a:83:56:a2:eb:fb:ad:68:f6:f3:57:c9:62:bd:6d:3d:
         40:9e:36:6f:cd:95:67:53:b3:68:43:9a:73:48:cf:b6:de:e6:
         4b:87:49:6a:0b:91:dc:2f:db:d0:03:6b:a3:9d:13:67:ea:92:
         5a:9e:15:24:e3:5c:1b:ab:fc:89:ea:c4:d9:91:b4:13:1a:d1:
         a9:b7:2f:85:f0:f0:27:b9:79:15:f3:73:46:89:9c:4a:42:69:
         1e:81:d8:f8:eb:d8:ab:5f:8a:e1:bb:da:2b:27:a8:b4:70:f4:
         aa:d0:00:1f:a6:9d:0b:ed:65:bf:86:a2:71:24:3f:b6:2b:5d:
         a1:b3:42:ab:ee:ad:fb:8b:a7:d1:c7:c2:7b:82:f9:e8:ac:a0:
         99:e0:82:6d:66:57:da:96:b9:ae:ff:ff:b5:b7:e3:a5:96:db:
         e6:6d:fd:31:ad:94:a1:e4:5d:0b:fd:ef:e4:43:0e:b6:5e:92:
         c3:30:64:57:3e:ab:98:0d:84:66:ad:e5:23:64:b2:c3:8e:9d:
         ad:2c:44:de:20:6e:82:49:d8:98:7a:64:27:9a:38:74:17:a7:
         0a:40:31:03:6a:9c:1c:5a:6a:ef:6c:12:99:6b:ff:58:68:b4:
         81:07:fa:99:2e:8d:ec:47:95:89:9f:02:db:4d:f8:13:71:50:
         17:a1:8a:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----