Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa
File:                     4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa (raw, json)
Hash identifier:          8xV7E+By12E/GCFSRee9V2EU3wX3+4VvdoWEbPnv5RA=
Subject key identifier:   B6:CC:F7:CE:97:90:8F:52:AF:03:E6:8C:92:4D:82:0D:23:40:E6:F7
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       34356C85C1B7167525A07A303CABE3E1650C8425
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa
Signing time:             Fri 04 Apr 2025 00:20:28 +0000
ROA not before:           Fri 04 Apr 2025 00:20:28 +0000
ROA not after:            Fri 09 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:400::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:35:6c:85:c1:b7:16:75:25:a0:7a:30:3c:ab:e3:e1:65:0c:84:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Apr  4 00:20:28 2025 GMT
            Not After : May  9 23:59:59 2025 GMT
        Subject: serialNumber=a9331396f806cc8f5b9d9c58d700f1fb4b520aad415fc3d30bc704036894bf87, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:50:a4:ea:bd:94:ef:59:12:ba:1f:5b:86:
                    bf:02:1d:21:9a:c6:7e:3d:2a:a5:b3:ed:9f:66:74:
                    c0:42:91:59:30:d2:97:66:41:05:69:2d:ef:36:cf:
                    36:c7:d0:c1:37:7d:1a:3f:e2:8c:6d:8d:f0:a7:e8:
                    89:92:e0:d9:ae:3d:98:9e:bc:0f:8e:7e:9b:ce:e0:
                    0c:18:27:5b:d8:90:4a:4a:26:93:15:3b:a1:b5:63:
                    50:69:54:4f:5c:dc:f8:01:1a:c6:1e:9b:4d:6f:1e:
                    85:4d:8e:13:36:2d:cb:5b:26:d4:43:2b:74:d7:de:
                    90:c4:6a:ba:03:ad:29:f0:f2:99:c2:a2:74:08:b6:
                    fe:bf:ca:dc:8d:ae:10:53:ce:dc:73:bd:91:69:80:
                    73:05:49:d9:48:1e:e5:62:8b:53:f0:05:60:1a:ff:
                    cf:8b:f1:89:f3:a0:99:c4:98:24:1d:82:e5:71:ce:
                    d0:9c:68:21:ad:d4:9c:dc:13:25:cd:f8:3e:f5:cb:
                    f4:cd:c4:a2:f5:63:7a:d3:d3:51:f5:78:ed:60:10:
                    b5:3b:1f:e3:2f:d0:f2:e6:39:b2:ca:c7:3a:59:1b:
                    08:32:9b:68:f1:63:0c:25:20:2f:13:7f:6e:bd:d7:
                    4a:9e:f9:69:6b:1d:00:21:04:32:37:f1:f0:41:eb:
                    97:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CC:F7:CE:97:90:8F:52:AF:03:E6:8C:92:4D:82:0D:23:40:E6:F7
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:400::/44

    Signature Algorithm: sha256WithRSAEncryption
         a4:77:51:99:04:df:a5:b3:a3:71:e4:09:37:e5:ca:36:a1:40:
         c7:48:82:15:24:54:66:81:24:9b:fe:79:09:b0:15:05:a5:da:
         2f:98:06:c5:dd:ad:45:a6:69:f0:5f:14:3a:0a:2a:81:de:48:
         ac:af:50:6a:08:bc:c9:ee:69:3c:aa:e0:4c:5c:47:cc:91:09:
         7e:38:3c:46:5a:86:93:41:51:d2:36:70:37:30:47:d7:2e:3b:
         f9:45:c6:fd:46:3d:1a:5b:f3:1a:a9:d6:48:a6:29:e1:b7:2a:
         e5:61:a4:12:03:4d:62:77:72:9a:3d:94:eb:00:3b:b3:07:12:
         f8:df:d4:30:d5:4e:2e:04:d9:cc:2f:ac:8b:56:52:06:9c:cd:
         38:3a:67:6d:24:91:e7:3a:05:24:24:30:ef:4b:0e:a7:71:75:
         22:5d:0a:99:d4:f2:f3:48:64:3c:2f:13:84:f8:5c:dc:cd:60:
         2f:88:37:11:7e:1b:58:68:3a:1c:42:51:76:83:de:5d:f2:47:
         18:3e:fa:76:c2:c2:ae:b6:d8:f4:aa:4d:8c:81:6c:21:42:c2:
         03:c1:8a:38:84:a0:c4:9e:41:15:71:31:f4:cb:66:ea:dc:33:
         84:e9:64:dd:c2:fa:12:70:3a:65:f8:0d:7c:2e:72:67:9f:cd:
         b2:65:3a:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----