Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa
File:                     f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa (raw, json)
Hash identifier:          O4wHRJWKnMZ+MDCGscIWkw6+eXRHd/aSHCR/Rm01AEw=
Subject key identifier:   97:7D:14:98:40:50:3D:2F:BC:D4:E7:79:16:28:DF:61:98:6C:3C:F5
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5CB0EEB84FFCDB8E79D03391039645DE3980D65C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e000::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b0:ee:b8:4f:fc:db:8e:79:d0:33:91:03:96:45:de:39:80:d6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=a6c3990342f74a310634683b5fd6886cf3b9f86c8c4150ecf5fe67c38b5d079f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:48:6a:5d:fc:b4:1f:e1:ca:7b:af:57:ed:
                    da:fc:ee:8e:fb:b4:01:55:8f:6e:2d:09:32:8e:d7:
                    d0:93:d3:17:2e:3e:bc:80:bb:5a:b3:11:aa:e2:d3:
                    31:ba:73:e1:7e:46:4d:65:94:ee:b7:94:9b:af:4f:
                    ca:69:47:64:50:cb:7b:2a:a5:29:0d:31:95:fe:35:
                    4f:2e:ab:c3:6c:3b:78:4c:76:41:9e:fb:dd:42:9f:
                    d1:f3:47:55:a8:65:46:19:67:22:ad:c8:11:3f:b7:
                    b3:fa:02:77:84:2e:a9:73:57:e8:fe:7b:4e:81:4e:
                    3d:74:df:ae:53:1f:0b:76:0c:a5:50:3a:a2:d5:17:
                    53:12:33:f7:0a:c0:28:e9:00:a6:74:c6:0e:e9:d5:
                    df:7b:0e:9e:11:c6:e5:34:63:a7:4e:52:fe:bd:32:
                    4f:97:6c:88:56:94:9b:c3:29:b4:8e:2b:e8:7d:d7:
                    aa:2b:49:0f:80:66:ae:9b:40:ad:fb:6f:63:2b:46:
                    33:7a:2c:5c:76:cc:fe:a2:af:bb:4a:d0:3a:01:25:
                    2b:ac:fe:5c:77:8a:fa:b5:fe:d6:af:41:68:bf:90:
                    e8:02:9a:51:19:8e:57:0a:a6:d4:1d:09:5d:07:e5:
                    95:85:f9:87:1b:00:b9:db:ca:f7:57:d0:13:fd:7a:
                    94:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7D:14:98:40:50:3D:2F:BC:D4:E7:79:16:28:DF:61:98:6C:3C:F5
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e000::/42

    Signature Algorithm: sha256WithRSAEncryption
         9a:95:f1:ef:16:a3:b0:06:8b:df:0b:99:71:05:ec:a9:28:a1:
         77:a5:43:55:c8:4c:df:fe:8b:4b:6d:18:36:e2:31:53:74:0c:
         16:27:05:53:76:ff:eb:b5:f8:a4:4b:d3:0d:83:29:83:ba:d4:
         70:8d:b8:55:6c:9e:ac:72:34:0e:64:d8:f1:dc:b3:78:12:eb:
         28:36:e1:46:e5:a7:c4:a8:f5:cd:73:f3:01:e2:7c:81:0d:66:
         79:e9:0b:7a:a3:ba:77:3b:16:f2:b8:54:07:82:78:25:b1:2a:
         42:25:b3:52:86:84:ec:89:db:4c:46:10:41:50:b7:1c:41:b8:
         09:46:c0:ac:2d:cb:0f:e3:9a:fb:0c:4e:93:2a:3a:2e:03:1e:
         83:c3:8d:32:b5:df:f6:6e:7f:79:1a:a4:68:f9:42:72:08:da:
         59:5d:19:03:7b:26:cb:03:7e:c1:3b:d9:88:ed:a5:6d:13:ea:
         a0:c2:0d:56:37:a1:fe:a5:ed:b6:b7:2f:1f:54:f0:18:7b:13:
         2c:a1:e8:5d:87:e2:f3:44:88:2b:1e:73:41:fa:f0:a9:62:40:
         c1:34:e0:87:61:ac:54:8a:b2:b0:c0:05:0e:a3:68:31:4a:c3:
         86:78:3e:86:6b:bf:ee:9b:cd:81:d6:c8:7b:c1:75:1c:54:0f:
         e3:6f:b2:47
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUXLDuuE/824550DORA5ZF3jmA1lwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNmMzOTkwMzQyZjc0YTMxMDYzNDY4M2I1ZmQ2ODg2Y2Yz
YjlmODZjOGM0MTUwZWNmNWZlNjdjMzhiNWQwNzlmMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAv0hqXfy0H+HKe69X7dr87o77tAFVj24tCTKO19CT0xcu
PryAu1qzEari0zG6c+F+Rk1llO63lJuvT8ppR2RQy3sqpSkNMZX+NU8uq8NsO3hM
dkGe+91Cn9HzR1WoZUYZZyKtyBE/t7P6AneELqlzV+j+e06BTj10365THwt2DKVQ
OqLVF1MSM/cKwCjpAKZ0xg7p1d97Dp4RxuU0Y6dOUv69Mk+XbIhWlJvDKbSOK+h9
16orSQ+AZq6bQK37b2MrRjN6LFx2zP6ir7tK0DoBJSus/lx3ivq1/tavQWi/kOgC
mlEZjlcKptQdCV0H5ZWF+YcbALnbyvdX0BP9epRvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUl30UmEBQPS+81Od5FijfYZhsPPUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2Y1ZDE3MjdhLWViMmYtNGFlMC04ODFlLWM4ZmRjMzQ0Yjk1Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAPD74AAwDQYJKoZIhvcNAQELBQADggEBAJqV8e8Wo7AGi98LmXEF7Kko
oXelQ1XITN/+i0ttGDbiMVN0DBYnBVN2/+u1+KRL0w2DKYO61HCNuFVsnqxyNA5k
2PHcs3gS6yg24Ublp8So9c1z8wHifIENZnnpC3qjunc7FvK4VAeCeCWxKkIls1KG
hOyJ20xGEEFQtxxBuAlGwKwtyw/jmvsMTpMqOi4DHoPDjTK13/Zuf3kapGj5QnII
2lldGQN7JssDfsE72YjtpW0T6qDCDVY3of6l7ba3Lx9U8Bh7Eyyh6F2H4vNEiCse
c0H68KliQME04IdhrFSKsrDABQ6jaDFKw4Z4PoZrv+6bzYHWyHvBdRxUD+Nvskc=
-----END CERTIFICATE-----