Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa
File:                     0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa (raw, json)
Hash identifier:          gF9K/PIPYwQROsHcYZFrNTYPWZ794jFpQ4ZHPqgWLQs=
Subject key identifier:   8B:6B:D0:76:52:79:44:D0:E4:33:92:1F:21:DA:D0:D8:0A:7F:1D:A1
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       2AC3AF41F91F3C28C5B6D699A1EEB7731D62F9FA
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     801
IP address blocks:        2606:8140::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c3:af:41:f9:1f:3c:28:c5:b6:d6:99:a1:ee:b7:73:1d:62:f9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=f609bc6ea3b6b63065ea722d38ed49c47e7e7eeadd5893fc95c5829c69240307, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:78:74:d8:c1:3b:81:73:80:5e:d0:0a:65:
                    09:94:fb:65:74:eb:cf:3d:5b:73:24:6b:3c:79:eb:
                    18:12:82:82:8b:b2:4f:a7:f3:1b:19:9f:d6:be:f2:
                    7b:fb:26:e7:05:36:c9:cf:e1:54:6b:95:8c:8c:50:
                    ee:18:d5:37:f1:f3:ce:93:01:28:c2:8b:c6:29:bd:
                    fe:27:9d:10:6a:d5:e6:ec:c3:58:19:7f:24:bb:3f:
                    7d:98:77:60:35:93:64:8b:9a:5b:4b:b9:6a:30:a7:
                    dc:ce:9f:a4:a1:7c:7a:dc:3d:10:05:be:45:ae:62:
                    af:d4:2e:ef:b6:08:ba:53:08:51:d6:6e:0f:87:f2:
                    29:e0:6d:4a:b1:25:5c:58:29:9a:c3:52:96:eb:9e:
                    e8:9d:41:6b:6c:8e:bf:84:01:13:d2:1c:91:a3:e0:
                    63:fd:75:2b:e4:29:43:5f:a7:10:9e:dd:a4:ba:69:
                    4f:ae:85:36:e7:d0:95:a3:64:65:50:91:2e:0f:e0:
                    ae:dd:3a:ba:fa:f3:0e:71:ed:35:d9:f6:31:c5:04:
                    b7:e0:85:fa:ec:ba:2b:92:92:df:96:71:b6:23:c5:
                    09:02:e2:6c:2e:b5:0a:2b:a6:02:48:d6:0e:90:a9:
                    28:04:f6:24:2f:c2:cd:87:52:a8:61:a7:04:b7:1f:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6B:D0:76:52:79:44:D0:E4:33:92:1F:21:DA:D0:D8:0A:7F:1D:A1
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8140::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:3e:37:87:2a:e0:18:ea:e0:35:d1:e2:21:fe:a0:70:50:ab:
         93:36:78:31:3d:85:dc:27:14:97:e7:b2:7f:07:31:6e:18:88:
         18:4b:41:76:af:1b:44:c6:77:a9:13:c6:5b:ff:20:98:e2:99:
         c5:df:24:6b:9f:52:5b:57:ca:b8:53:fd:d8:f8:ab:80:6e:96:
         61:a0:85:c9:80:c0:a6:35:85:80:de:31:67:03:b4:1b:4e:8c:
         d4:ab:a9:cd:8d:06:75:42:4e:14:f8:3f:8b:c1:c1:cf:88:2d:
         95:b2:06:af:09:38:6b:bb:91:6b:a0:a1:cc:c1:1b:aa:88:5f:
         2d:d3:ac:a8:27:ee:c5:6e:3e:2c:a3:2a:27:8e:2c:5d:95:09:
         0a:d9:79:b9:43:1a:02:66:74:a3:14:22:55:8e:33:7f:96:92:
         86:aa:63:ad:d7:45:0a:b6:76:67:1e:84:c3:e5:26:26:3e:8d:
         58:76:8d:36:4b:b7:b8:0d:82:f5:74:07:e9:27:13:18:70:c4:
         d5:8a:c2:db:ad:97:5c:97:32:4a:15:57:4d:32:e5:7c:b6:ce:
         f8:66:9f:1c:2a:b8:0b:81:63:2c:7e:c6:39:b9:f6:ff:e6:04:
         d4:d3:36:65:7e:c8:7a:b3:e6:4e:1a:6d:8b:5b:04:fa:95:bd:
         94:77:6b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----