Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/73712e14-51d5-41db-bcf2-73aa504e6eab.roa
File:                     73712e14-51d5-41db-bcf2-73aa504e6eab.roa (raw, json)
Hash identifier:          hc8MFzr0ZIuvwTf4Ow7Pn2LgMqmYjuGON5Ac1GwBziQ=
Subject key identifier:   43:B5:E6:57:FF:AA:47:48:AA:75:58:83:75:DD:54:C0:3E:35:A8:86
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       27F4F73B94CBD0FCCE94F9F73F694AF1341317FB
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/73712e14-51d5-41db-bcf2-73aa504e6eab.roa
Signing time:             Mon 31 Mar 2025 18:40:43 +0000
ROA not before:           Mon 31 Mar 2025 18:40:43 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:80::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f4:f7:3b:94:cb:d0:fc:ce:94:f9:f7:3f:69:4a:f1:34:13:17:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 31 18:40:43 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=060ac8020a4effaa33cfc8cc926f4c8ef31bbf55f5ce3464ec26bcba40b98f82, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a1:4a:9e:e4:d8:eb:80:3c:97:41:b7:7c:d9:
                    b2:10:de:bc:6a:82:eb:42:c8:de:f8:ab:c8:6c:2e:
                    d7:af:96:6e:13:22:bf:6f:6f:7f:44:ff:39:62:58:
                    e4:3a:dc:40:6f:cd:4a:22:5d:0d:13:9a:2f:09:f9:
                    52:4e:04:46:88:b2:36:48:58:47:96:90:d7:b0:e9:
                    3d:e9:e2:71:78:ee:fb:f5:8a:0d:31:00:a1:59:91:
                    84:17:bd:fd:b7:7d:d0:dc:b7:3b:87:a9:5f:72:a1:
                    0f:02:4e:dd:c8:36:76:3c:54:e1:bd:aa:c1:28:b9:
                    1c:14:8f:15:94:dc:ce:a1:42:78:11:c4:7b:42:43:
                    a7:f7:1b:a7:ad:82:95:d7:bf:8e:0a:1a:0a:2e:0a:
                    5b:44:5d:98:ef:63:68:83:f6:96:10:32:a8:5e:0e:
                    84:d2:c7:bb:01:4f:36:81:e8:51:2d:f1:16:2e:37:
                    1e:cb:28:c7:60:d1:c6:66:30:15:63:3c:6d:db:61:
                    42:64:d1:e8:f0:c4:b3:74:e5:e6:38:ce:6c:2e:a5:
                    44:90:0e:18:06:34:a5:97:44:00:b1:f5:db:20:92:
                    91:43:01:f2:20:3a:7a:46:f3:0a:3a:9f:6f:83:c2:
                    ff:77:87:74:74:d7:b0:14:6d:84:5b:be:0a:0b:53:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B5:E6:57:FF:AA:47:48:AA:75:58:83:75:DD:54:C0:3E:35:A8:86
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/73712e14-51d5-41db-bcf2-73aa504e6eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:2e:3b:c3:39:52:a1:12:00:59:9b:e0:be:30:46:70:a7:6f:
         49:f9:65:51:c0:6f:71:e9:fe:c4:c7:3f:cd:37:a4:59:f5:8e:
         2b:41:63:64:23:a6:2e:88:76:c2:5a:a0:2e:3e:cb:04:a7:7b:
         81:08:c1:14:73:43:8a:be:e5:89:e6:3f:91:68:20:b8:eb:f3:
         3c:74:e2:89:c5:e9:0f:1c:b7:c5:e8:93:95:0d:05:6f:60:4b:
         02:3f:9d:ea:d2:c3:32:1c:53:d5:15:70:b0:ee:e8:77:64:b4:
         1a:45:80:aa:3b:e9:e3:71:4f:70:f3:4a:af:36:84:33:7d:02:
         95:2c:3e:e6:91:4f:7a:e1:9a:b8:f1:ac:c0:eb:59:68:5b:4a:
         d0:ef:32:24:65:c7:3b:da:aa:21:39:cd:4c:a3:84:56:7b:92:
         14:30:99:c4:68:be:32:e9:4d:4e:2d:26:3d:f3:73:da:2d:ec:
         cf:1c:a8:ac:3d:98:83:91:c4:fc:59:09:ec:ce:d8:b0:12:84:
         89:b8:81:4e:12:02:60:eb:f0:23:98:db:09:6e:1b:5c:7f:d6:
         ac:28:02:d1:12:3f:fc:ab:80:b9:a9:40:ad:4a:a0:ab:f5:64:
         a2:2a:05:4c:2e:d2:00:dd:c0:f0:ce:ed:fc:69:5d:9c:9b:c8:
         1f:20:d9:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----