Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa
File:                     c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa (raw, json)
Hash identifier:          m5iFn4i5JyQf8qNzwEYpMxloEYEryneIOEivt5g1MNc=
Subject key identifier:   C7:66:8E:CB:A0:83:2C:14:9C:E5:8D:6C:99:37:BC:09:75:0F:20:B9
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       4E20131E622C22DA68D8B43EA1F95D898C49814E
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa
Signing time:             Sat 18 Jan 2025 00:00:00 +0000
ROA not before:           Sat 18 Jan 2025 00:00:00 +0000
ROA not after:            Sat 22 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f1:8801::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:20:13:1e:62:2c:22:da:68:d8:b4:3e:a1:f9:5d:89:8c:49:81:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan 18 00:00:00 2025 GMT
            Not After : Feb 22 23:59:59 2025 GMT
        Subject: serialNumber=c61578cf79f2e859fc70dbb2de98a000960ac75b0b1f26dc6a6d50a9660d0c44, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:6c:f8:90:d3:eb:66:35:25:db:99:5d:a8:
                    86:bb:47:4d:6c:17:d1:39:1f:32:20:92:05:99:6c:
                    cd:22:cc:1a:40:58:3e:99:ff:f9:ba:72:b7:36:38:
                    7c:3e:dc:04:cc:72:94:b6:92:85:fe:dc:bb:89:de:
                    6a:66:f9:9c:7a:3a:b4:a5:dd:33:13:e5:98:7c:0a:
                    61:77:7d:a2:8d:a7:af:1b:f5:53:25:53:45:86:03:
                    41:d1:ec:a7:4d:d0:bb:38:fe:47:07:3f:ff:67:f3:
                    98:02:8b:2d:e0:62:6c:e9:a8:05:25:f4:3d:0c:48:
                    07:30:c4:ca:ec:09:df:d6:f7:71:e3:ba:a8:d9:40:
                    86:3f:57:55:83:e2:9d:b4:08:34:a2:8f:29:93:51:
                    a4:34:07:68:14:0a:ce:51:fc:00:60:07:29:96:75:
                    49:34:bc:d2:cf:01:e5:5e:31:5e:e0:c2:f9:84:79:
                    f3:7d:32:ea:ca:f3:4a:93:0b:24:ec:e4:bb:78:4d:
                    43:df:2b:c4:2b:da:4f:16:7a:0a:13:ac:1a:4b:e1:
                    a7:ed:77:8c:42:2f:8d:d9:1d:db:bb:93:78:52:1c:
                    3b:5e:cd:b7:70:9c:13:e9:10:5b:64:f1:63:f6:22:
                    d9:61:d7:0f:88:fd:70:c6:a5:61:1f:05:19:36:f8:
                    bd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:66:8E:CB:A0:83:2C:14:9C:E5:8D:6C:99:37:BC:09:75:0F:20:B9
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:8801::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:bf:e1:3c:b6:b4:35:a1:14:92:14:4d:ab:57:91:46:9e:68:
         72:60:ff:87:f5:a5:c4:ff:d7:50:f5:26:93:8d:b8:67:62:9a:
         5f:92:1a:82:46:64:fe:5c:15:d8:39:bb:ea:69:f5:4d:a7:d5:
         93:ca:04:79:df:ab:46:8c:45:5f:3a:0a:44:a8:56:03:ea:32:
         8e:99:18:64:fe:3b:83:95:7f:05:78:7b:8f:fd:87:f3:1e:79:
         62:31:f9:7d:5f:ba:c2:4b:95:f0:60:cd:ac:05:c5:f0:c5:97:
         7e:db:23:b1:b3:9d:87:9f:41:fa:5f:2a:31:0c:9e:9a:13:6a:
         c8:7c:16:d8:1f:d3:16:e9:a4:03:d7:e5:32:42:17:dc:ae:b4:
         cb:d4:41:0c:e9:a0:28:ea:df:df:27:32:d8:66:6c:f5:0f:3e:
         70:3c:9b:cf:57:ea:38:2b:d7:0f:b3:33:82:d9:ae:c2:83:1f:
         3d:b3:2f:e7:6b:17:70:99:d0:a1:f6:0f:65:9e:b2:aa:18:fd:
         0c:44:62:57:f3:f4:59:ae:f6:d9:3f:3d:24:1e:7c:9c:38:eb:
         8d:e8:d6:f9:70:1d:7b:a0:37:95:3d:7a:81:c9:62:e9:71:29:
         58:15:97:7d:bd:83:25:24:df:97:d3:3f:76:76:a5:b8:92:77:
         d6:de:70:cd
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUTiATHmIsItpo2LQ+ofldiYxJgU4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMTE4MDAwMDAwWhcNMjUwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNjE1NzhjZjc5ZjJlODU5ZmM3MGRiYjJkZTk4YTAwMDk2
MGFjNzViMGIxZjI2ZGM2YTZkNTBhOTY2MGQwYzQ0MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCr9mz4kNPrZjUl25ldqIa7R01sF9E5HzIgkgWZbM0izBpA
WD6Z//m6crc2OHw+3ATMcpS2koX+3LuJ3mpm+Zx6OrSl3TMT5Zh8CmF3faKNp68b
9VMlU0WGA0HR7KdN0Ls4/kcHP/9n85gCiy3gYmzpqAUl9D0MSAcwxMrsCd/W93Hj
uqjZQIY/V1WD4p20CDSijymTUaQ0B2gUCs5R/ABgBymWdUk0vNLPAeVeMV7gwvmE
efN9MurK80qTCyTs5Lt4TUPfK8Qr2k8WegoTrBpL4aftd4xCL43ZHdu7k3hSHDte
zbdwnBPpEFtk8WP2Itlh1w+I/XDGpWEfBRk2+L0rAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUx2aOy6CDLBSc5Y1smTe8CXUPILkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2M0OTc0OWM1LTQyNjMtNDQzZi1hNWQxLWYwZmMxYTI3ZWRjMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDxiAEwDQYJKoZIhvcNAQELBQADggEBAFm/4Ty2tDWhFJIUTatXkUae
aHJg/4f1pcT/11D1JpONuGdiml+SGoJGZP5cFdg5u+pp9U2n1ZPKBHnfq0aMRV86
CkSoVgPqMo6ZGGT+O4OVfwV4e4/9h/MeeWIx+X1fusJLlfBgzawFxfDFl37bI7Gz
nYefQfpfKjEMnpoTash8Ftgf0xbppAPX5TJCF9yutMvUQQzpoCjq398nMthmbPUP
PnA8m89X6jgr1w+zM4LZrsKDHz2zL+drF3CZ0KH2D2WesqoY/QxEYlfz9Fmu9tk/
PSQefJw4643o1vlwHXugN5U9eoHJYulxKVgVl329gyUk35fTP3Z2pbiSd9becM0=
-----END CERTIFICATE-----