Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6912c7e5-41f4-4b82-9db8-51bac2912f50.roa
File:                     6912c7e5-41f4-4b82-9db8-51bac2912f50.roa (raw, json)
Hash identifier:          xfaYvbjJ1i5ar2asQZBMIeDtc+Mh3QWQQhqwUEkXO2M=
Subject key identifier:   FB:1C:CD:7D:0B:FE:86:5C:96:E3:DA:96:49:B2:DC:5D:2F:60:45:C7
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       45A76BED816A59629C1FA31AC11DB495C0DF6D96
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6912c7e5-41f4-4b82-9db8-51bac2912f50.roa
Signing time:             Fri 04 Apr 2025 00:20:27 +0000
ROA not before:           Fri 04 Apr 2025 00:20:27 +0000
ROA not after:            Fri 09 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:400::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a7:6b:ed:81:6a:59:62:9c:1f:a3:1a:c1:1d:b4:95:c0:df:6d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Apr  4 00:20:27 2025 GMT
            Not After : May  9 23:59:59 2025 GMT
        Subject: serialNumber=5336bdc1e5629dcb7491137bb5f8a272c9f00fd7bfc0ac73c11a3df22b7fd42a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0c:36:8d:02:f6:c0:ce:23:eb:1e:d3:02:50:
                    ba:35:c2:16:a8:13:04:db:e5:37:4e:7c:06:09:e7:
                    00:bd:77:32:db:77:78:5d:8f:7a:a5:73:25:e2:d4:
                    31:27:99:6b:02:e4:2b:2d:65:df:49:86:8c:ab:6c:
                    02:49:6f:6d:fc:59:8c:a5:55:3a:69:9a:7d:59:1d:
                    22:90:48:5d:78:5b:61:d4:d2:c3:a4:1a:ff:9c:cc:
                    0d:ea:c5:fc:48:72:2f:0e:3d:4a:28:eb:93:b0:d8:
                    79:7d:ca:86:13:6e:94:89:fd:78:63:3a:46:e2:e7:
                    ad:08:ee:be:b4:15:54:92:c3:cd:ae:6b:55:a4:2d:
                    1d:ae:96:c3:be:3a:cf:dd:de:76:9b:3f:80:8b:89:
                    56:a2:9c:df:29:e2:d6:7d:61:73:3e:bc:16:2c:28:
                    26:d9:50:e0:c2:c5:96:a2:a5:c6:e9:f2:2e:2f:6f:
                    9a:24:0b:76:ed:e7:df:1f:06:53:75:65:3f:25:f2:
                    bf:f5:78:a2:3e:be:77:b0:0a:39:5c:79:5f:2a:fa:
                    2e:e0:af:62:8c:00:08:57:9e:3d:bf:88:92:62:e8:
                    2f:e3:d4:1a:4a:c3:8c:0d:57:69:e1:4a:66:a1:17:
                    b0:70:3d:da:97:00:d7:36:6e:39:51:80:5a:8f:1e:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1C:CD:7D:0B:FE:86:5C:96:E3:DA:96:49:B2:DC:5D:2F:60:45:C7
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6912c7e5-41f4-4b82-9db8-51bac2912f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:400::/44

    Signature Algorithm: sha256WithRSAEncryption
         28:99:80:a3:d3:69:8a:dc:7c:dd:77:a3:cc:1c:50:6f:16:8e:
         de:de:70:70:1f:66:f3:bd:7f:a7:ab:54:9a:44:c9:1c:b9:f9:
         5e:c9:bd:0b:83:75:f2:4a:8e:25:dd:eb:6f:cd:c9:09:7d:7d:
         50:15:25:42:d6:bb:9d:a0:a4:b0:77:74:60:04:77:1d:67:d8:
         33:f7:64:2e:00:d0:ba:70:91:3c:d5:0b:40:36:41:d6:0a:d0:
         4b:53:74:4e:19:d5:65:04:57:c7:89:82:08:e4:e7:e9:14:61:
         13:a7:81:d7:8e:81:d3:0b:e3:df:7e:61:de:2d:d4:33:cb:0c:
         a3:c9:c0:ee:38:5f:b0:1f:e0:a9:03:b0:29:83:86:52:42:bb:
         99:e9:4c:8e:b5:f4:09:d1:2f:83:10:66:3c:7c:15:c0:86:85:
         40:a7:23:53:9f:cd:f2:d1:54:5e:f3:17:90:43:1e:6a:0b:7e:
         81:7b:68:31:4b:2b:7a:21:72:84:fd:cb:2e:4a:68:fc:04:8f:
         b8:2e:cc:1b:49:ee:f1:ef:2d:62:db:53:c6:de:f3:90:76:30:
         b6:ed:00:1c:c9:bc:81:c2:00:23:0f:3b:6f:f4:66:a8:95:33:
         22:e2:9d:c2:ad:46:b0:e9:98:c7:dc:bb:ca:af:16:61:6e:be:
         9c:0a:99:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----