Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa
File:                     644f882a-d42c-4c76-bb70-882838f6e3e0.roa (raw, json)
Hash identifier:          F+vdW7mkkmO+yhqKz/8crZf+zskAFtcGSwV/ibMg6zg=
Subject key identifier:   DB:15:F6:89:86:3B:EA:D0:2F:FB:34:38:9C:07:BC:04:1B:6D:3E:D6
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2CD40C7FD30CDCF8F5667D6A7C34EED51E2DE053
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa
Signing time:             Mon 31 Mar 2025 18:51:41 +0000
ROA not before:           Mon 31 Mar 2025 18:51:41 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e600::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d4:0c:7f:d3:0c:dc:f8:f5:66:7d:6a:7c:34:ee:d5:1e:2d:e0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 31 18:51:41 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=bf2ebf13f79fe2eaa98de0dc91cccad2b828ba836edbf0069dd7316e53bd6669, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:3c:ea:78:bc:df:05:ef:0b:7c:fd:60:e6:
                    1a:49:25:38:ac:38:44:ad:c3:84:0f:c5:48:24:e1:
                    a4:ed:03:e8:ba:be:bf:24:6d:2b:72:8f:d0:fb:0a:
                    bf:aa:f7:83:8f:af:d3:7d:ed:f2:55:b8:82:4e:19:
                    89:85:a3:d3:4d:1c:31:60:5c:d2:46:b7:c2:81:d3:
                    c9:a2:b8:bc:0a:e2:94:92:1e:8e:ca:4d:72:90:a4:
                    0b:71:28:82:ce:c6:54:10:86:bf:f8:53:d8:73:96:
                    ba:ac:a3:77:52:98:e7:1f:2d:93:5c:a3:b3:63:3c:
                    58:3d:88:1e:94:e9:e1:50:df:e0:ac:1f:22:a2:9c:
                    12:d4:27:0f:e8:3b:47:df:79:52:ca:a7:da:ba:cb:
                    f6:48:36:c0:11:5a:38:18:5e:cb:88:6d:6e:cf:b5:
                    5d:71:5b:7b:50:83:d9:22:21:22:3e:c5:bd:89:e1:
                    8f:c8:2e:f4:d1:58:5a:82:43:4c:78:a3:3f:da:a8:
                    6e:e7:41:b2:6f:d3:be:cd:13:5a:67:cb:89:43:6c:
                    8e:bb:42:f2:61:67:5f:b1:7c:b1:86:55:31:93:8f:
                    0b:04:04:c7:e5:80:a3:46:ad:19:47:cf:63:ff:99:
                    e6:bd:d0:ff:10:59:a8:2c:a8:9a:50:02:7f:77:94:
                    66:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:15:F6:89:86:3B:EA:D0:2F:FB:34:38:9C:07:BC:04:1B:6D:3E:D6
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e600::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:d1:c5:d0:6a:f4:44:39:f7:f0:2b:e4:eb:3d:36:e9:1d:8d:
         82:70:5f:05:25:8b:bb:29:42:1b:e7:b6:e8:32:18:29:ae:dd:
         1d:f5:68:3e:8f:5d:24:83:7f:ee:28:b7:bd:36:fe:8c:0c:fa:
         4b:9d:33:1e:7e:c2:0d:09:e7:b8:9a:23:cc:4a:c2:cc:a1:13:
         90:ac:a2:9b:b4:0f:d4:ef:53:68:f0:df:b0:87:92:3d:96:3d:
         d2:e6:ba:f5:7b:32:39:ba:5b:91:2d:40:d9:d3:5a:fc:cc:27:
         6c:15:4d:bf:53:fb:38:29:59:49:b3:44:01:85:ac:ea:bc:a9:
         fa:b6:61:3b:25:b5:73:65:b8:b0:b3:69:73:87:02:c8:cc:b1:
         ec:a3:8e:5c:28:69:d0:79:19:ae:ee:7d:02:34:8f:47:3b:9e:
         ff:e5:bd:b7:5f:b7:41:65:d3:bf:d3:cb:b7:db:72:ae:a1:09:
         aa:7e:67:5a:08:71:e4:d8:48:14:77:b6:2b:94:31:3b:a7:fe:
         35:0a:69:44:a0:75:d8:bf:a7:5a:bd:82:00:76:ee:86:01:bf:
         b9:42:c3:02:f2:3a:16:c1:6a:c8:03:11:d6:43:bd:67:c6:4e:
         36:67:27:6a:9e:88:eb:6c:a4:c8:a2:61:9e:c8:1e:b2:4d:14:
         81:b0:93:8e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----