Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/abe42905-b032-4c0a-b08a-22ef7222b003.roa
File:                     abe42905-b032-4c0a-b08a-22ef7222b003.roa (raw, json)
Hash identifier:          YYLiKh8cDRMUDvWGNgE0d7HVEQRWUy0D3oh7hE9LpNo=
Subject key identifier:   97:F7:57:49:F1:19:AA:31:BE:86:FF:12:A1:7D:42:2D:32:06:57:7C
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       2B9801982E67C0C485B7413B332FD9C9316532A5
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/abe42905-b032-4c0a-b08a-22ef7222b003.roa
Signing time:             Fri 06 Dec 2024 00:00:00 +0000
ROA not before:           Fri 06 Dec 2024 00:00:00 +0000
ROA not after:            Fri 10 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:f40:8400::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:98:01:98:2e:67:c0:c4:85:b7:41:3b:33:2f:d9:c9:31:65:32:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Dec  6 00:00:00 2024 GMT
            Not After : Jan 10 23:59:59 2025 GMT
        Subject: serialNumber=c9002005837a45280458066cb5e5394691422a40e5b85426e4b625eff9170d6a, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d8:9d:3a:28:26:8b:2a:44:19:7f:ce:44:f6:
                    e4:4e:e4:f6:4a:48:16:59:e2:ca:2d:cc:c9:9e:12:
                    28:50:9c:bb:e0:84:41:2a:16:83:40:8e:4e:5a:ab:
                    86:0a:3d:1a:a2:55:04:b0:32:29:8e:bf:64:44:81:
                    3e:fd:41:2b:eb:8c:ce:d9:53:69:b0:f2:9a:f3:c3:
                    a1:b5:e9:ed:57:e0:ad:2d:db:30:01:06:2c:ad:0e:
                    18:49:79:67:2b:9e:ca:2f:65:23:da:64:16:aa:6d:
                    09:5d:8e:1d:ba:ed:f5:49:31:29:93:ea:b5:8d:e0:
                    62:d4:b8:bc:55:7e:27:8e:8d:c2:0b:12:2d:dc:e4:
                    65:2f:8c:2f:37:5f:a8:f1:d3:76:b1:50:b6:fc:29:
                    02:d1:4e:e1:d6:a1:a3:f2:c0:83:0b:7a:d8:fd:ae:
                    1b:2d:f2:86:ea:84:1a:bb:8d:94:5f:b7:c9:c7:2c:
                    98:e0:b8:1d:34:7c:a3:0b:e1:77:90:8c:8a:e5:3f:
                    17:ef:43:d3:2f:fa:44:91:5a:05:bd:59:cf:3e:03:
                    a0:ae:f3:6a:5f:75:3e:b0:90:3c:82:0b:e5:88:5b:
                    e7:50:05:60:10:3a:fc:cd:81:a7:14:43:72:58:8d:
                    9f:d4:a1:b8:d1:29:a6:a6:6d:61:17:1b:29:df:31:
                    61:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F7:57:49:F1:19:AA:31:BE:86:FF:12:A1:7D:42:2D:32:06:57:7C
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/abe42905-b032-4c0a-b08a-22ef7222b003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:8400::/39

    Signature Algorithm: sha256WithRSAEncryption
         81:be:77:61:e4:9d:3c:3e:a5:0b:f3:bb:5b:0c:5a:d6:cb:48:
         f0:30:5c:e8:67:d8:57:76:56:d0:17:b3:33:83:18:f6:44:5c:
         97:53:ef:09:fb:af:69:a5:71:08:dd:50:fa:bf:38:a7:9e:6a:
         39:ae:90:35:6d:a2:ba:b6:f6:3f:b7:28:61:39:1f:d4:59:34:
         38:a8:f8:19:be:8c:23:7c:b1:d3:7f:4b:91:c4:7f:5f:72:c7:
         7e:1a:cf:6e:1d:84:88:b9:9b:f6:96:b5:a2:7a:8d:33:d7:2a:
         7d:bd:ff:61:e0:26:42:62:6e:2b:b7:e9:f0:71:da:2c:61:9b:
         b6:73:74:02:1f:52:02:c0:a5:08:0c:5c:eb:d0:f8:08:63:f7:
         6a:8f:41:39:49:bd:b4:c9:c7:1c:fc:46:fb:f9:c3:99:3b:fa:
         57:1c:29:8f:62:eb:c0:1b:6c:65:d8:cf:bb:25:24:48:d6:71:
         64:45:dd:51:a9:57:a5:f3:44:a3:eb:f9:b1:3c:83:31:2d:5a:
         cb:be:0a:3a:3a:57:23:fa:26:7c:1e:e8:f9:76:05:62:10:71:
         61:e8:0e:ea:2c:c8:3c:40:33:a5:cf:45:2a:bd:98:ad:5a:f3:
         ed:44:53:ef:a9:fa:73:5e:cf:c4:74:4b:89:ca:38:7a:f2:5a:
         38:37:49:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----