Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/19ec461e-c063-4606-ac0f-e184cbdbb2b6.roa
File:                     19ec461e-c063-4606-ac0f-e184cbdbb2b6.roa (raw, json)
Hash identifier:          XS/lPHseThldhsW132t7yy4Bvi1bgKl9NRiVMsdMxDI=
Subject key identifier:   7E:28:7B:49:FB:DA:1B:FB:C5:5E:EB:4C:3B:4A:BF:00:30:95:A2:B2
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1696A581A236329EDEA162A42AEB29A18F33B90B
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/19ec461e-c063-4606-ac0f-e184cbdbb2b6.roa
Signing time:             Wed 11 Dec 2024 00:00:00 +0000
ROA not before:           Wed 11 Dec 2024 00:00:00 +0000
ROA not after:            Wed 15 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:553c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:96:a5:81:a2:36:32:9e:de:a1:62:a4:2a:eb:29:a1:8f:33:b9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 11 00:00:00 2024 GMT
            Not After : Jan 15 23:59:59 2025 GMT
        Subject: serialNumber=1394ae36bdd508dcf1f7b2efaf542f3e417ae47f258b537eeeaf2df564cefd70, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6e:08:c2:af:30:16:95:17:51:1b:c1:07:c4:
                    21:49:80:6c:88:0c:6d:5b:51:65:df:c8:88:aa:ab:
                    fe:56:ba:66:43:d6:8c:fa:17:35:7e:6e:cd:f3:54:
                    2f:49:db:4f:87:15:97:b0:89:0c:3a:81:21:f0:58:
                    e1:b0:42:d6:b8:61:8c:96:00:2c:06:7b:7f:4c:a5:
                    f7:fe:79:56:8d:a2:5c:5d:85:dd:2e:bb:77:2f:79:
                    3e:0c:da:be:9f:0c:33:65:90:9b:b8:82:c6:70:db:
                    c5:1b:b2:c4:21:59:09:3e:10:d5:19:d3:53:03:ca:
                    59:6b:73:61:c6:e3:55:55:d9:2d:16:d3:03:80:76:
                    ac:3a:9a:09:7c:17:7c:04:3b:50:79:ae:cd:fc:e0:
                    a5:aa:b5:84:73:f8:1c:0d:eb:86:44:81:2a:a9:46:
                    73:e8:14:9e:82:7d:34:65:2b:18:a1:68:a6:4a:45:
                    c9:db:73:80:5e:aa:1f:97:7e:35:30:ca:42:19:fe:
                    3d:02:e6:4f:9d:0b:b3:97:2e:fa:9d:ed:a1:bc:ca:
                    ba:a2:35:83:a7:b2:78:db:12:e0:1a:dd:f8:1e:b7:
                    17:ac:45:59:e2:cb:9c:63:66:11:81:e1:b0:a1:e9:
                    45:21:5c:92:dd:81:ca:91:c6:ae:d4:6f:99:6f:84:
                    14:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:28:7B:49:FB:DA:1B:FB:C5:5E:EB:4C:3B:4A:BF:00:30:95:A2:B2
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/19ec461e-c063-4606-ac0f-e184cbdbb2b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:553c::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:5d:94:38:34:d1:d3:37:34:10:1b:45:40:f8:4e:ab:2a:1c:
         9b:40:c6:8e:1c:2d:a8:5b:95:bc:50:e6:8d:20:7d:58:02:67:
         38:3f:81:26:e3:cf:ab:af:f7:c3:32:53:d2:df:a1:60:02:87:
         2c:2f:15:4d:ab:3f:21:ab:fa:ce:d1:a8:0c:4a:9c:4b:43:66:
         91:e8:38:e6:2f:9a:b3:28:6e:61:0d:e6:bc:9a:60:bd:19:87:
         aa:09:02:54:25:40:06:92:71:cb:82:d2:ba:59:9e:57:ca:d4:
         17:19:76:6c:2e:78:91:da:cf:e2:14:3d:15:9a:6b:92:25:f0:
         f0:06:61:09:b7:9b:d1:bb:d9:78:0f:73:80:e3:74:f0:25:c8:
         16:19:39:18:35:52:98:72:02:ec:11:ab:45:de:f5:80:ad:c5:
         73:68:79:09:56:67:94:ad:b8:6d:c0:2e:59:d6:3a:f1:5f:47:
         2f:b4:a1:eb:86:1e:20:d9:34:85:d7:92:16:2c:55:73:32:50:
         14:ab:82:b5:1e:bb:14:83:11:8b:cc:79:5c:64:89:72:9f:41:
         9d:ad:96:27:b9:98:eb:04:96:92:8b:9f:d0:66:64:33:88:e0:
         ac:08:97:d0:c2:c1:1b:ec:34:33:de:55:3d:33:a2:d5:1a:b2:
         77:6b:1b:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net