Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/91a27594-a038-483a-a558-a5377f4d266f.roa
File:                     91a27594-a038-483a-a558-a5377f4d266f.roa (raw, json)
Hash identifier:          VSn+wHM3ltR3gechRAUuG3AWF5V0oSU1O9dAh7HkuCM=
Subject key identifier:   E3:76:C2:20:B3:89:4C:F5:DE:CC:2A:6D:64:74:B3:90:3D:44:A0:92
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       0E922B0DBAF5A299397BC4F815293F399B1EE2CB
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/91a27594-a038-483a-a558-a5377f4d266f.roa
Signing time:             Fri 11 Apr 2025 00:20:06 +0000
ROA not before:           Fri 11 Apr 2025 00:20:06 +0000
ROA not after:            Fri 16 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2606:f40:fffc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:92:2b:0d:ba:f5:a2:99:39:7b:c4:f8:15:29:3f:39:9b:1e:e2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Apr 11 00:20:06 2025 GMT
            Not After : May 16 23:59:59 2025 GMT
        Subject: serialNumber=df337dd99ebe13469b671583973e444358251c8c8daacfebef5396712d734b4c, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:da:c7:8b:a6:b1:c7:22:8d:d4:ed:60:05:df:
                    8b:1e:b6:2e:a2:a4:94:18:7c:10:e6:22:f0:cd:3d:
                    33:a5:4c:5e:7c:20:38:08:73:83:49:24:51:68:b8:
                    d9:04:c8:93:83:08:34:02:b6:9f:fa:ab:e5:f6:80:
                    fa:a6:75:d9:e2:b5:7d:50:cc:01:5c:4d:dd:bb:01:
                    ff:29:39:11:56:19:9d:6f:96:d1:68:9f:c5:97:56:
                    00:bc:29:15:45:bd:bd:06:c5:1d:35:27:36:fe:b6:
                    f9:8e:a0:c1:98:84:95:5d:70:f1:ae:31:c1:8e:e8:
                    af:44:d1:60:0e:99:15:33:9a:11:66:70:d3:57:52:
                    57:71:c9:12:b8:ec:56:93:1e:09:b6:0b:21:19:a4:
                    85:d2:6d:ef:b1:87:73:74:0d:74:e4:b9:ed:87:de:
                    fe:d5:dd:2c:b0:2f:fa:c6:a5:5b:37:a3:f4:dd:72:
                    18:14:76:fb:07:84:bb:b3:5e:27:e4:64:4a:f8:bf:
                    78:a0:f0:d5:26:42:35:28:f0:88:2c:41:4e:35:fb:
                    46:68:24:bf:d4:e9:b8:37:35:1b:33:80:70:56:33:
                    93:f2:e9:88:3e:75:5e:e4:9b:09:8a:2c:b8:0d:a7:
                    06:55:fd:9b:94:15:0b:d9:4b:f3:04:05:a0:52:76:
                    66:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:76:C2:20:B3:89:4C:F5:DE:CC:2A:6D:64:74:B3:90:3D:44:A0:92
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/91a27594-a038-483a-a558-a5377f4d266f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:fffc::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:e5:7b:6d:ed:8f:cf:52:58:7e:a4:c5:59:fa:2b:69:1f:68:
         a0:79:98:dd:43:b7:7a:fe:f3:eb:13:c0:26:69:f3:c6:d7:5f:
         fa:4d:35:ec:df:fc:8f:73:d8:d9:ba:e2:b1:35:b3:20:c0:17:
         27:ae:4f:9a:d6:4d:13:6b:84:12:8d:85:d2:37:02:15:21:cd:
         d5:0e:bc:c3:54:45:dd:f4:d9:a4:78:69:80:dc:ec:6a:12:1c:
         de:d6:82:b2:30:be:86:fa:08:9b:3a:3b:9f:0e:cb:02:c0:a1:
         de:b5:ff:a9:3f:b4:bc:a0:a1:b9:7f:bc:ad:7a:9a:fc:4e:af:
         48:71:06:ad:ff:ec:e9:4d:3a:c8:53:9f:0b:88:be:93:49:c6:
         6f:61:41:8b:a9:1a:5b:6b:db:28:2e:26:37:eb:2e:cf:1f:0b:
         cd:1f:be:21:c0:40:4a:08:8b:5f:c6:08:e4:a3:54:db:5e:d9:
         10:60:6f:60:0a:c9:c8:90:2b:73:48:2e:a9:3d:6e:72:1f:1f:
         68:b7:e7:07:03:36:04:09:59:63:4e:4c:62:63:74:4c:26:fe:
         ed:ae:63:b1:6a:2b:3d:c5:71:ea:72:81:98:b6:b7:44:0f:23:
         18:35:41:74:67:07:b0:d6:db:e9:46:ed:03:ff:2e:9a:58:9c:
         5b:33:63:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----