Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2c20fc31-bbe3-460c-9c8b-8e10fc7dedb1.roa
File:                     2c20fc31-bbe3-460c-9c8b-8e10fc7dedb1.roa (raw, json)
Hash identifier:          wCJDIrO79dzcXjXgi1YWoKreNw1rxPH4ClhUZrb0WvA=
Subject key identifier:   BA:E4:0E:64:05:89:76:F1:9F:A1:87:81:1D:F0:AA:66:11:8B:4D:02
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       54E9BEF7EF141AE472B8E33EC42AB95886B5AB7F
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2c20fc31-bbe3-460c-9c8b-8e10fc7dedb1.roa
Signing time:             Tue 10 Dec 2024 00:00:00 +0000
ROA not before:           Tue 10 Dec 2024 00:00:00 +0000
ROA not after:            Tue 14 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:84::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e9:be:f7:ef:14:1a:e4:72:b8:e3:3e:c4:2a:b9:58:86:b5:ab:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 00:00:00 2024 GMT
            Not After : Jan 14 23:59:59 2025 GMT
        Subject: serialNumber=f8dc4086ad40cff0a8fed239d3e05eee630607a9bc7add5d5d6e07553efeba6c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:2b:ab:14:df:41:0b:3c:dd:b7:64:16:8c:
                    f3:ed:6c:19:bd:1d:55:a9:3f:d4:5f:79:19:0a:8d:
                    f3:91:a9:01:08:c8:f1:44:5c:9a:29:42:24:6f:6f:
                    f7:17:35:d0:86:46:36:64:5d:57:9c:41:93:a7:de:
                    c7:09:f4:5b:fd:21:f4:02:c7:c4:be:ba:33:68:e5:
                    e3:c8:28:55:af:be:7c:ed:33:c4:72:4d:23:7b:c1:
                    fc:87:46:c7:f2:00:b2:21:1e:30:c2:8e:54:ee:1e:
                    08:f9:95:56:76:b3:90:75:64:c9:38:ee:81:78:57:
                    d8:39:70:b4:29:de:c1:f7:18:f1:2d:56:05:30:e1:
                    e0:63:3f:96:29:ce:1f:8c:49:fc:0b:11:6d:2f:bc:
                    92:f5:ea:de:6d:7d:ba:72:3e:39:73:92:7e:a1:ac:
                    a8:63:f7:f2:38:84:4f:5b:6e:7b:ff:be:9e:f3:45:
                    e6:ba:f6:4e:67:9a:2c:50:77:cb:c0:39:dc:6a:f0:
                    fa:6e:d3:99:2c:ad:05:d6:72:02:b7:2b:17:fd:40:
                    1b:45:71:b1:96:99:ff:56:7c:78:e3:97:9a:43:f4:
                    6e:3a:20:37:c3:84:f4:eb:58:99:08:85:7e:86:e4:
                    ae:3e:9c:cd:2f:fa:50:a6:d3:bb:e7:99:6d:22:01:
                    42:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E4:0E:64:05:89:76:F1:9F:A1:87:81:1D:F0:AA:66:11:8B:4D:02
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2c20fc31-bbe3-460c-9c8b-8e10fc7dedb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:84::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:6e:cb:ee:98:f4:dc:2d:14:5c:75:89:d6:35:fb:4c:bc:2e:
         b2:e5:94:de:0f:52:7a:b3:c0:f5:a5:83:eb:97:27:ec:0f:60:
         bd:f0:69:1f:14:c9:8e:af:cf:92:52:56:87:bc:59:59:ac:8b:
         07:57:ee:1c:be:da:97:7e:4b:94:2b:85:3a:74:c8:72:31:b4:
         d9:a2:fa:95:db:e6:80:02:dd:4c:ab:99:35:04:03:ec:bc:12:
         7b:7b:5e:ae:0f:58:11:2a:85:63:9a:74:d1:a0:88:ed:c0:05:
         82:37:bf:9f:ab:ca:c4:92:23:54:fe:4d:70:f8:5f:28:b7:b4:
         27:22:f5:3c:f7:ab:ac:62:b0:b8:a7:f6:a4:91:0a:c5:d6:a3:
         1a:54:ae:6f:e5:b6:16:fe:99:ca:e7:5a:da:d1:9c:10:68:f3:
         76:8a:ff:c0:b9:85:95:36:e5:0e:72:ba:c3:3f:d2:f4:15:d4:
         a8:0b:01:b2:ab:ae:4d:99:96:1b:27:ee:00:08:0d:53:cf:43:
         83:6d:ab:eb:f7:12:a4:d2:58:c6:9f:e4:26:f6:31:4f:28:51:
         32:c9:e3:04:55:48:65:40:4a:4e:89:4c:43:f9:34:5e:aa:7f:
         d3:19:d8:9e:71:c5:1d:8c:7f:72:4d:f3:60:77:0c:5a:8c:07:
         2f:1c:3d:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net