Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6b7f5748-fe07-4267-b267-53e1b59b3caf.roa
File:                     6b7f5748-fe07-4267-b267-53e1b59b3caf.roa (raw, json)
Hash identifier:          JZpKdFu8xzLj8SD5iM+Arb5Pd/MsJb2kzoCFGMKPVrw=
Subject key identifier:   19:4E:47:A5:75:0A:32:67:3B:E7:E1:7C:5E:B3:F9:1F:D1:AB:A4:2F
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       3E8C3BF1F835729A3BFE497716C1166C921D9C08
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6b7f5748-fe07-4267-b267-53e1b59b3caf.roa
Signing time:             Tue 10 Dec 2024 00:00:00 +0000
ROA not before:           Tue 10 Dec 2024 00:00:00 +0000
ROA not after:            Tue 14 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:f40:a200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8c:3b:f1:f8:35:72:9a:3b:fe:49:77:16:c1:16:6c:92:1d:9c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Dec 10 00:00:00 2024 GMT
            Not After : Jan 14 23:59:59 2025 GMT
        Subject: serialNumber=8fb8f6f31cb1312ee9f5c5c93ce5de256f1da38417cc50052c6e451058e8d19b, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ff:71:2c:c5:2d:49:ee:d6:95:49:fd:5c:80:
                    d1:ca:a2:43:a7:60:0b:99:8a:77:19:7b:ef:7f:b8:
                    d0:91:c7:3a:ed:62:67:1c:38:1a:cc:5c:85:2c:67:
                    d1:35:fe:8d:ef:a6:77:fe:f9:5d:68:28:14:6e:a7:
                    9f:2e:52:03:69:ec:cb:ea:4f:82:15:ab:15:2f:d5:
                    01:dc:64:d5:a5:71:24:1c:99:8d:30:79:39:d2:fe:
                    00:de:33:71:87:66:19:3a:07:6b:e8:c8:6d:b5:ec:
                    d8:6e:62:f2:67:40:23:1e:8f:82:f7:03:65:d8:f7:
                    1a:ef:13:63:1f:c3:39:f9:ef:41:0a:14:d9:33:41:
                    29:80:7f:7a:14:77:b9:ab:99:71:74:b9:bd:9d:03:
                    59:fd:ac:07:35:98:6f:52:f2:36:98:f1:f5:80:b3:
                    34:30:9e:7c:eb:27:ed:ba:04:81:9a:19:c1:a8:01:
                    57:c6:a0:6c:74:0f:89:8b:b7:c5:41:11:c8:6f:61:
                    77:32:4a:cf:50:a5:7b:ba:6e:4c:59:42:69:64:b1:
                    fe:b8:8a:be:24:f3:86:8c:0f:b4:50:85:67:e5:14:
                    e2:17:ea:39:6c:ef:2e:b5:25:41:80:40:d2:a3:4c:
                    62:ed:4c:b9:e9:e8:d1:e6:56:bb:7e:f0:1b:0a:70:
                    da:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4E:47:A5:75:0A:32:67:3B:E7:E1:7C:5E:B3:F9:1F:D1:AB:A4:2F
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6b7f5748-fe07-4267-b267-53e1b59b3caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:a200::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:81:1f:24:8d:bd:fd:69:4c:eb:3a:54:b4:16:12:27:7b:d2:
         d4:16:d2:6f:f3:1f:d0:9c:6b:23:b1:10:55:58:8c:59:ec:19:
         d9:79:8b:9a:f0:df:49:8f:a8:a4:44:61:ab:db:94:92:48:3d:
         18:4e:4d:bf:b1:33:25:66:17:cb:f2:69:51:6f:eb:03:c4:af:
         b7:0c:0c:82:00:ba:3c:92:16:a7:ba:9c:7d:00:5d:6a:d8:a7:
         98:16:9a:ef:d8:5e:df:64:74:38:72:dc:90:ab:bf:81:45:0b:
         62:fb:70:72:00:2a:f4:64:34:fc:6b:a4:a2:28:6b:57:f0:bc:
         cd:30:e0:ce:ba:d7:de:2a:56:c3:1a:5b:ff:12:0a:23:f9:58:
         33:45:e7:70:b7:f6:1d:24:47:28:70:95:ac:7d:de:c1:e2:c4:
         bc:b5:8e:c7:6e:47:00:ea:13:15:f0:ba:5a:bd:d5:dd:8c:68:
         d6:76:95:dd:78:12:b3:f4:12:99:6a:19:a6:45:6a:56:3e:35:
         6d:f5:46:48:5f:43:4a:25:04:e5:f6:52:6a:04:c1:1d:45:1d:
         c3:3f:86:0b:8d:2c:7e:41:3f:c4:91:b6:67:84:bf:4f:3e:be:
         61:9b:99:53:98:3c:21:b7:11:75:87:9a:df:a7:39:0e:a1:b9:
         39:f7:7a:fe
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUPow78fg1cpo7/kl3FsEWbJIdnAgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4
NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjQxMjEwMDAwMDAwWhcNMjUwMTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZmI4ZjZmMzFjYjEzMTJlZTlmNWM1YzkzY2U1ZGUyNTZm
MWRhMzg0MTdjYzUwMDUyYzZlNDUxMDU4ZThkMTliMS0wKwYDVQQDEyQ4Zjk1ZTRk
MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDN/3EsxS1J7taVSf1cgNHKokOnYAuZincZe+9/uNCRxzrt
YmccOBrMXIUsZ9E1/o3vpnf++V1oKBRup58uUgNp7MvqT4IVqxUv1QHcZNWlcSQc
mY0weTnS/gDeM3GHZhk6B2voyG217NhuYvJnQCMej4L3A2XY9xrvE2Mfwzn570EK
FNkzQSmAf3oUd7mrmXF0ub2dA1n9rAc1mG9S8jaY8fWAszQwnnzrJ+26BIGaGcGo
AVfGoGx0D4mLt8VBEchvYXcySs9QpXu6bkxZQmlksf64ir4k84aMD7RQhWflFOIX
6jls7y61JUGAQNKjTGLtTLnp6NHmVrt+8BsKcNr5AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUGU5HpXUKMmc75+F8XrP5H9GrpC8wHwYDVR0jBBgwFoAUHl8tYvha0oTU
0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05
Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm
NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh
MzhjMzJmZDRjLzZiN2Y1NzQ4LWZlMDctNDI2Ny1iMjY3LTUzZTFiNTliM2NhZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl
LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmBg9AojANBgkqhkiG9w0BAQsFAAOCAQEAWIEfJI29/WlM6zpUtBYSJ3vS
1BbSb/Mf0JxrI7EQVViMWewZ2XmLmvDfSY+opERhq9uUkkg9GE5Nv7EzJWYXy/Jp
UW/rA8SvtwwMggC6PJIWp7qcfQBdatinmBaa79he32R0OHLckKu/gUULYvtwcgAq
9GQ0/GukoihrV/C8zTDgzrrX3ipWwxpb/xIKI/lYM0XncLf2HSRHKHCVrH3eweLE
vLWOx25HAOoTFfC6Wr3V3Yxo1naV3XgSs/QSmWoZpkVqVj41bfVGSF9DSiUE5fZS
agTBHUUdwz+GC40sfkE/xJG2Z4S/Tz6+YZuZU5g8IbcRdYea36c5DqG5Ofd6/g==
-----END CERTIFICATE-----