Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7200dfa9-d36f-44de-852a-1adda1bbb99c.roa
File:                     7200dfa9-d36f-44de-852a-1adda1bbb99c.roa (raw, json)
Hash identifier:          g4lrOyS79t9z96YVF0ojzYgbbv7g7OlDW4pSTeU/8uk=
Subject key identifier:   9C:71:96:52:23:99:D1:18:B9:FD:61:9B:E6:75:7E:9C:74:4E:F3:CA
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2789B1FFC83CE93AE2FAC1FA43DABA676F55C5CB
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7200dfa9-d36f-44de-852a-1adda1bbb99c.roa
Signing time:             Mon 31 Mar 2025 18:41:02 +0000
ROA not before:           Mon 31 Mar 2025 18:41:02 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:1000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:89:b1:ff:c8:3c:e9:3a:e2:fa:c1:fa:43:da:ba:67:6f:55:c5:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 31 18:41:02 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=a3cfa593ef20c8c4da5ebcd3521adf257670fef9b225a5ca0b676386a34b78b8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8f:fa:4d:96:31:73:b5:43:08:ad:3f:c5:13:
                    2c:d2:52:2c:65:0b:4a:db:06:2f:e7:12:44:41:ec:
                    5e:7d:a2:49:11:58:a3:3b:78:68:ca:72:a9:15:6a:
                    94:60:cd:32:84:c8:15:a3:3d:b2:87:16:ac:c0:fc:
                    24:5e:e4:da:37:fa:1f:b9:19:da:ed:62:9f:7f:05:
                    cd:15:63:1d:80:15:96:3c:95:44:28:ad:ea:64:41:
                    59:ef:ce:0e:98:8b:7d:11:f2:42:c7:33:b4:00:20:
                    56:38:73:7b:27:65:8c:c2:07:d2:7c:a0:d0:9f:0b:
                    fa:4b:0c:58:a4:8f:a9:32:50:db:8e:21:47:8c:43:
                    0f:85:4a:14:b7:99:40:15:37:07:7a:9d:38:b5:b5:
                    ca:3e:dc:96:48:a2:a5:3f:b8:e0:2e:69:d8:24:a9:
                    a5:61:da:9b:83:4c:74:5b:cb:01:e3:92:88:1d:a9:
                    55:ed:64:71:c8:b5:a8:3f:c7:48:cf:76:c4:f2:16:
                    dd:cc:fb:34:c4:f5:87:6f:2c:0d:06:f3:76:c2:6c:
                    04:0b:f2:47:76:23:a3:e6:fb:cb:a7:3c:c2:86:96:
                    25:c3:9d:fb:41:d5:e9:f2:6f:26:32:ce:9a:58:0a:
                    57:24:22:47:ba:2e:eb:fb:3f:6c:77:2b:18:18:e9:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:71:96:52:23:99:D1:18:B9:FD:61:9B:E6:75:7E:9C:74:4E:F3:CA
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7200dfa9-d36f-44de-852a-1adda1bbb99c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:1000::/44

    Signature Algorithm: sha256WithRSAEncryption
         10:a4:9b:28:11:b1:88:08:af:96:f6:f6:d7:87:3c:56:1a:5f:
         95:62:7e:78:15:0c:8b:1f:39:38:f7:14:11:2d:ed:70:12:c8:
         a7:fc:ab:2d:54:cd:65:5a:29:ff:7c:57:fc:54:6e:f3:cf:f1:
         fb:dd:c1:d1:82:aa:27:f4:3c:52:e3:75:45:a7:e1:b7:68:3f:
         4c:c6:f8:0b:7c:c6:ff:ff:eb:a8:7d:03:0e:bb:97:72:33:e7:
         63:40:d8:21:09:fc:1c:20:0d:9f:ea:c6:b2:7d:48:ef:1a:89:
         6c:75:6e:81:52:ea:1d:8c:2b:a3:48:41:2d:d3:4e:db:20:2b:
         1b:68:1a:dd:e0:a8:8f:7f:a5:38:d8:1b:8d:c7:b0:1b:4f:78:
         91:df:9f:27:20:7c:ca:0e:4b:f9:8f:af:8b:c1:87:8c:03:56:
         2c:40:b7:3b:b8:e2:d3:06:53:de:99:82:2d:2c:8b:09:ea:b8:
         36:0b:d4:63:03:28:8a:51:52:73:a9:e6:9e:41:9a:fa:98:33:
         56:d6:3c:55:29:e5:cf:5f:17:20:d7:4f:e1:3d:66:7c:a2:28:
         4b:3d:75:a5:ab:91:c0:ba:9c:6f:6e:17:43:66:c7:18:f9:8b:
         ab:f6:a8:d1:63:97:f6:9b:cd:ea:df:65:0c:58:7c:b3:46:14:
         fb:d8:52:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----