Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37cee73e-f60c-422c-8edf-fbb308bfb117.roa
File:                     37cee73e-f60c-422c-8edf-fbb308bfb117.roa (raw, json)
Hash identifier:          qqSthF4gt1ie3DVzmqOWlf9wpBXkRl2m5C4Ui7SYZbs=
Subject key identifier:   C4:BF:E8:33:FC:A7:DD:6D:2A:20:A7:F7:63:41:63:C1:51:2D:D5:F4
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       78C10C82C7CB58C3E010BEC8FC4DB009EA7C610C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37cee73e-f60c-422c-8edf-fbb308bfb117.roa
Signing time:             Mon 31 Mar 2025 18:51:26 +0000
ROA not before:           Mon 31 Mar 2025 18:51:26 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c1:0c:82:c7:cb:58:c3:e0:10:be:c8:fc:4d:b0:09:ea:7c:61:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 31 18:51:26 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=1e2c89c588f6293fbc83d4b2b3d092608a84f7c2014b35a69ea77d0473c41894, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a9:36:d6:11:e0:b5:3a:78:1a:25:eb:ac:f0:
                    58:32:1f:49:a3:eb:28:b0:9c:30:88:fd:b5:dd:98:
                    3e:7e:51:ff:f7:d2:5f:e7:45:06:2c:2f:23:92:e6:
                    f1:7c:1f:21:7f:0c:ce:c0:94:ab:90:17:0a:cd:ae:
                    d5:13:bf:b4:de:80:3e:2f:16:d0:05:44:82:8f:ae:
                    a0:9d:1c:2f:9c:26:90:81:4b:93:8e:5a:2c:52:bb:
                    43:ad:f9:b3:4f:da:b2:d2:6c:86:b9:c8:90:61:3b:
                    2b:a8:99:08:71:8c:a7:62:7b:33:80:03:a1:4f:06:
                    9e:66:27:ab:df:c6:09:90:7a:7a:fc:47:04:f4:01:
                    02:b5:4e:6a:f2:eb:3b:3b:6d:18:8c:65:bb:6b:ce:
                    e8:24:c8:b5:c0:c2:28:c9:75:dd:e0:9e:eb:b1:27:
                    e2:10:45:44:02:ab:4a:89:97:72:f4:2f:da:a7:49:
                    e2:b8:1c:b1:8d:88:54:55:68:75:54:bc:54:15:80:
                    43:f4:a2:e8:62:a2:ff:4c:dd:5e:8f:13:58:99:1f:
                    e3:d0:e8:59:86:d1:10:a2:c8:f5:84:52:91:85:ee:
                    c9:e5:5b:e5:9b:2d:76:77:24:be:db:4f:91:99:f6:
                    d0:3a:74:03:c0:f6:bd:26:4b:1a:a1:aa:65:e9:71:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BF:E8:33:FC:A7:DD:6D:2A:20:A7:F7:63:41:63:C1:51:2D:D5:F4
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37cee73e-f60c-422c-8edf-fbb308bfb117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:c9:f1:74:08:c5:4d:84:66:e8:f6:8f:be:d8:69:30:1a:a7:
         77:e5:ee:a2:52:63:39:b8:b4:f7:2f:5f:dc:94:c8:fd:a5:32:
         3c:a8:a7:fe:fa:d0:5b:9e:d7:65:b1:f9:5c:67:74:84:4c:4e:
         07:0b:e8:07:10:3a:80:7e:c6:83:d8:b2:73:97:5a:db:94:6f:
         50:2a:d6:ce:91:92:63:2a:01:63:b7:93:4e:ee:b0:59:74:6e:
         d8:e4:76:27:8d:8f:47:13:a9:9c:54:b0:bf:8c:ec:bc:6e:ea:
         fb:f6:16:31:03:6c:dc:c4:72:2d:9f:50:e7:aa:ca:a1:d8:3b:
         28:1f:91:6a:4b:f4:55:ce:c6:5b:40:a9:ea:48:ff:9e:3f:59:
         f7:ac:2b:d1:bb:7a:d9:c3:98:fc:c7:35:7e:6d:95:00:d0:85:
         49:53:04:8d:11:8d:09:62:7e:d1:5a:45:fa:ca:aa:55:03:ab:
         6f:19:09:1d:ba:c5:ad:b0:ac:0a:d1:fe:37:d7:9f:52:14:48:
         12:51:a8:01:b6:9a:5b:0e:01:33:84:b8:93:20:05:57:da:3d:
         4f:8a:4b:f6:a4:5c:1d:47:ea:b7:54:d0:3f:3a:63:c4:45:35:
         64:9c:a5:fc:19:b4:7d:cc:ed:bf:d9:34:ae:2b:43:ea:8d:a0:
         6b:31:6b:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----