Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b711b513-e0f0-4a59-a188-036dda4ade5a.roa
File:                     b711b513-e0f0-4a59-a188-036dda4ade5a.roa (raw, json)
Hash identifier:          5KTorbFJV9/gm7vyRn210bEl2NsmsKWQTkLATSPfdqc=
Subject key identifier:   7F:8E:DF:74:D7:CD:1F:ED:B4:5A:D1:01:5C:14:44:5D:31:F9:D2:A9
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3EA2C726CD73B17D303EFF0A24E4821EF9A30C90
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b711b513-e0f0-4a59-a188-036dda4ade5a.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:ef00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a2:c7:26:cd:73:b1:7d:30:3e:ff:0a:24:e4:82:1e:f9:a3:0c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=8a68e722319cb155624703b2d771a460b07e7c3f252cf011214e60f951ae8c08, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:aa:ab:d9:c8:81:09:37:7e:96:26:a1:b6:
                    4a:0e:62:a3:e5:8e:75:88:9b:3e:54:68:22:b4:b4:
                    f7:f1:06:42:fa:c8:69:dd:91:35:47:f6:35:36:0d:
                    66:28:02:fc:9e:1c:56:eb:98:08:ce:6d:2a:d4:d0:
                    de:d1:ff:63:b6:11:5d:7d:5c:b7:d9:c1:bd:c2:79:
                    a7:fe:86:3a:f8:ed:4c:ab:0b:35:28:84:36:06:7d:
                    24:22:4c:8a:ac:72:e3:7d:1e:3b:47:6e:fe:54:a4:
                    72:a2:a9:69:a4:27:e3:72:79:5d:52:10:8e:85:a2:
                    ca:b8:b5:ee:7b:8d:d7:43:04:de:c7:70:f6:20:e7:
                    15:4b:72:03:1f:a3:66:1c:70:19:4a:12:aa:9e:00:
                    5a:d6:7e:c5:e9:c0:de:d6:13:2d:d1:1d:90:80:06:
                    84:f8:af:d5:af:df:4e:ff:5a:d4:5e:8c:e3:12:57:
                    8d:43:d1:72:54:8b:4a:73:2c:0a:74:4f:9e:83:b0:
                    96:01:06:1c:7d:66:78:62:04:08:d3:05:e9:3f:5a:
                    82:77:d1:39:6c:a3:87:ba:e6:21:1b:16:3b:b5:0e:
                    b4:ae:60:09:ca:1e:d8:8f:f3:11:7e:24:8d:b1:e0:
                    10:4d:bc:96:92:01:4b:71:67:a3:5f:ca:b2:1d:78:
                    73:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8E:DF:74:D7:CD:1F:ED:B4:5A:D1:01:5C:14:44:5D:31:F9:D2:A9
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b711b513-e0f0-4a59-a188-036dda4ade5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:ef00::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:4a:f2:97:25:fe:f7:ba:b1:a5:94:24:ae:83:d2:b4:1c:9e:
         b2:35:71:61:bd:95:89:d7:61:dd:9c:6a:4a:cd:4e:b2:50:60:
         4c:04:22:45:ff:ed:65:b1:c3:d1:43:43:9d:64:71:03:8c:62:
         f6:46:04:d1:e6:2d:fa:2c:c9:76:14:20:cc:a8:8d:05:02:b4:
         58:e3:da:5a:d4:65:d7:fe:21:65:ba:72:f6:26:b3:64:c1:28:
         94:e0:7e:3c:3a:32:d3:53:27:7c:59:61:52:dd:1e:1b:7f:2f:
         f0:5e:6b:75:85:30:74:79:1e:17:0c:9d:9c:8e:49:c8:6c:8d:
         46:4d:8a:73:eb:cf:ce:8f:00:b2:47:53:04:6a:9e:8d:9b:aa:
         9f:65:45:69:39:0e:20:1a:69:4a:04:06:b3:2d:9c:87:31:b6:
         95:00:3c:e6:2f:33:b2:74:c9:77:f6:40:6a:e9:ac:0a:15:b9:
         fe:a9:47:57:3d:a3:0e:64:49:a4:52:f5:64:32:18:c7:d5:9b:
         ae:ec:d6:ee:41:7e:88:b6:19:d0:ba:13:1d:10:df:43:cd:d0:
         02:0b:48:20:59:17:65:d0:5c:e2:c9:62:e2:ea:af:0d:13:81:
         8a:80:69:68:32:9b:19:26:65:a3:f5:ae:47:2f:27:48:3f:8b:
         7a:38:0a:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----