Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06ea2b4a-6dfc-489d-b8f1-dc7f93cac1c3.roa
File:                     06ea2b4a-6dfc-489d-b8f1-dc7f93cac1c3.roa (raw, json)
Hash identifier:          chUWEz1qGhRxC0L1AhHYdsgLMtQYYADmScvvp/MOzTE=
Subject key identifier:   2F:CC:8E:FC:5C:63:64:F3:1A:B0:AD:E1:7A:75:D6:37:E5:25:C1:CD
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       4C96CF0382ADA54BB2D4674A9692CEC06CAF7F80
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06ea2b4a-6dfc-489d-b8f1-dc7f93cac1c3.roa
Signing time:             Mon 31 Mar 2025 18:51:30 +0000
ROA not before:           Mon 31 Mar 2025 18:51:30 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e900::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:96:cf:03:82:ad:a5:4b:b2:d4:67:4a:96:92:ce:c0:6c:af:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 31 18:51:30 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=459be0d586799dca4bf8fd42a520c3613080a321f996a027e8831ec3689c3e61, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:97:5a:bc:e4:0b:6d:42:9a:21:d5:21:8a:2c:
                    5f:36:0b:0e:96:d9:02:21:cb:54:9d:94:f5:c7:24:
                    97:dc:ef:27:16:e4:13:ed:ee:e5:5c:e9:08:0e:83:
                    62:f6:b5:fe:3d:e4:82:61:6d:aa:b7:99:49:70:1d:
                    64:dc:b9:e1:48:73:a5:c3:ea:a4:86:3b:af:0d:45:
                    58:04:39:3d:fa:0d:13:fc:8d:3b:d7:ad:75:1f:3e:
                    b3:41:4e:39:6e:7f:8d:63:45:36:89:b9:ad:1d:8e:
                    3b:d1:cf:38:32:44:7c:08:fb:51:df:94:84:2e:d4:
                    d2:48:37:5a:f7:3d:13:56:a4:86:96:7b:df:a6:e6:
                    c4:85:99:1b:47:f8:6f:0d:d7:2a:eb:ae:5c:b8:7a:
                    ff:da:50:f8:f1:c0:71:aa:23:51:9b:b5:85:d9:e1:
                    92:9f:92:37:dd:24:98:bb:7d:cc:66:48:d9:1a:ca:
                    c1:dc:a1:47:e4:43:7d:d9:14:4d:dd:22:87:d8:94:
                    84:5e:95:51:b8:0e:4d:b5:48:16:a0:c4:89:7b:92:
                    2a:7f:a6:c8:68:6f:a2:a5:42:c6:fe:98:cc:66:1c:
                    59:99:a7:f3:89:1b:28:8f:b6:cd:6e:92:62:1e:b1:
                    f0:48:1b:73:d4:02:1e:ea:12:d0:d6:55:52:7a:4c:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CC:8E:FC:5C:63:64:F3:1A:B0:AD:E1:7A:75:D6:37:E5:25:C1:CD
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06ea2b4a-6dfc-489d-b8f1-dc7f93cac1c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e900::/42

    Signature Algorithm: sha256WithRSAEncryption
         2b:11:c0:b6:ba:c5:5b:38:14:5f:7a:f3:59:0f:16:d0:16:04:
         ec:ad:87:5d:69:33:e0:4b:dd:1b:45:a5:75:85:0a:89:57:44:
         65:12:c4:9e:e2:a6:c1:33:29:a5:4d:cd:92:4d:b5:1f:a6:6a:
         f9:b8:26:f9:99:8d:3f:85:0e:78:b4:e1:40:f1:29:31:cf:33:
         cb:6e:51:9d:af:51:9f:2d:28:e2:ed:d4:81:49:82:46:42:1d:
         6b:e5:70:40:88:9f:60:fa:55:a4:26:66:cf:87:3e:17:1d:01:
         42:c0:18:d7:55:62:71:93:5e:b9:48:a1:a7:27:40:fc:2d:79:
         a9:aa:1e:92:6d:b6:89:9c:e3:fc:83:19:8c:4b:d2:02:2d:20:
         bd:6b:26:e8:e6:fe:22:6e:c9:fc:59:3b:d0:dd:b1:87:2d:5f:
         d6:a7:35:8a:1c:31:87:7d:27:79:0b:72:bb:e5:83:fe:63:ae:
         48:e7:5f:4e:b6:1e:bd:3f:4e:de:df:ac:9e:6a:0e:b3:82:c8:
         c5:fd:4b:61:bc:a1:22:c1:3b:dd:1f:52:8b:2c:10:a1:7b:87:
         d3:6e:2f:f9:68:ca:d3:60:9d:cb:93:f0:66:35:f4:b0:91:74:
         94:ce:ff:90:82:c8:5d:c9:6b:28:3d:e1:79:0f:b1:b2:2b:aa:
         b7:6e:80:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----