Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa
File:                     bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa (raw, json)
Hash identifier:          d9m9sSdMyebRalMkfwbqL4X+ddusGZfwVLLxP4sZDfU=
Subject key identifier:   26:CF:2F:2A:1A:07:5E:A1:55:6D:73:8A:4F:55:8D:6A:02:72:24:EC
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       558A7E388F74BE069ADDE6AF2F9F97A0BCA37731
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:5519::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8a:7e:38:8f:74:be:06:9a:dd:e6:af:2f:9f:97:a0:bc:a3:77:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=6e938fe0d554315dfb39b5bd8df470f5adcc52fd3772d2a78f259cddd2827399, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:9a:80:6e:a9:e5:16:9b:96:bc:fb:9e:c9:
                    10:69:6c:82:2f:5f:dd:c8:b7:74:2c:c9:fe:93:21:
                    b7:18:0c:52:78:e3:9a:4d:e7:ef:3b:a8:96:5b:9b:
                    f6:5b:ad:9c:e3:d5:89:4f:8e:38:d5:79:ac:fb:63:
                    80:8a:ff:21:05:de:29:e2:a9:f4:aa:84:04:af:d6:
                    63:14:9c:08:cf:19:ed:f5:88:d2:09:57:cb:dc:0d:
                    dd:f9:ab:9c:8d:db:3f:89:a1:7e:a1:15:3b:a9:85:
                    52:bc:39:4d:f3:44:c3:d4:1a:78:16:4c:2d:f1:c5:
                    65:f4:b2:11:6e:55:e2:5a:7f:78:ef:7c:3a:fb:ec:
                    be:a0:16:42:8b:0b:34:06:03:55:f8:8f:b8:31:9d:
                    1c:ea:38:16:b7:df:86:96:8b:74:d8:c9:ff:b2:57:
                    f0:93:da:ea:b6:a4:ef:83:13:36:59:3d:8d:24:c9:
                    86:bf:77:11:03:e8:70:5d:26:4b:56:95:eb:9c:3f:
                    f7:75:8f:ea:7a:ed:ba:88:37:9f:f5:fe:5c:98:8b:
                    09:70:f7:43:f4:99:8c:ca:d3:78:82:3f:6c:48:04:
                    7a:ea:fc:2e:9d:5a:82:10:68:e8:ec:4a:6e:f0:29:
                    e2:d9:f9:9d:90:d0:ab:4a:0d:ed:e9:fd:a0:da:b2:
                    6b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CF:2F:2A:1A:07:5E:A1:55:6D:73:8A:4F:55:8D:6A:02:72:24:EC
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5519::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:a6:af:10:6e:2b:16:61:88:5c:8f:47:09:44:83:e7:1a:e0:
         18:37:d4:11:c3:d2:b2:03:6f:48:5c:89:70:96:d4:dd:bb:54:
         cd:3f:97:7b:81:31:4b:92:a3:57:34:50:11:1a:e8:71:27:66:
         1d:8c:49:a8:b5:5f:32:8e:9f:9e:3b:58:55:83:88:91:81:3c:
         c3:fe:95:ab:d9:83:3a:da:eb:b7:d9:d1:5e:f0:0c:18:94:8f:
         6b:87:82:5b:64:64:8c:84:91:45:d1:d1:a4:62:1b:c3:9e:3f:
         3c:6a:56:ac:d2:ba:76:24:07:cb:7c:4d:ba:84:32:02:15:c3:
         99:a7:03:95:25:ad:7c:97:e8:3b:4d:de:c4:20:b4:c5:9d:a7:
         1f:f9:31:57:2f:14:7b:f6:b8:dd:d4:4b:40:9b:4d:7d:73:69:
         7b:46:c0:29:dd:5c:e6:6a:f9:5e:ba:ce:b0:d4:47:06:b5:dd:
         d9:08:e4:34:d1:c4:c4:c9:33:ee:64:3b:4a:f7:e0:9e:4c:eb:
         a1:c3:5f:84:ab:37:28:22:e2:b3:41:88:4f:b2:1a:50:98:76:
         0d:3e:c2:4e:ad:57:a5:f0:56:04:77:73:98:e1:89:12:ec:1e:
         2a:77:62:b8:34:82:f4:76:01:4d:8e:b3:53:83:ce:24:55:dd:
         fe:e4:da:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----