Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/789a1aef-77f7-4108-9d41-1a97c18e12cb.roa
File:                     789a1aef-77f7-4108-9d41-1a97c18e12cb.roa (raw, json)
Hash identifier:          siPfHuGGjE9YJw1FPTFK46OgC+nRb04UFzIoIsGJjqE=
Subject key identifier:   4A:17:3B:22:D7:D3:2F:3A:67:3D:30:4E:65:4F:F2:42:19:2D:E4:0D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0F87F9FB8757076771336B8F7756D3608E319467
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/789a1aef-77f7-4108-9d41-1a97c18e12cb.roa
Signing time:             Mon 31 Mar 2025 19:00:11 +0000
ROA not before:           Mon 31 Mar 2025 19:00:11 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f00c::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:87:f9:fb:87:57:07:67:71:33:6b:8f:77:56:d3:60:8e:31:94:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 31 19:00:11 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=b6f056e19cfa318d9ce5ca0a34dc57940df5fb722837b23bb349b81058a17fe4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6c:8b:73:45:81:25:6f:d5:ea:af:1e:ef:36:
                    a2:8f:86:a8:2b:dc:e8:be:bf:dd:a4:d1:f3:1f:9f:
                    81:c6:7c:8d:f5:d3:90:3c:7e:75:38:47:70:0b:73:
                    9d:54:08:8f:1e:23:73:c7:05:4b:d8:06:47:20:fb:
                    4b:06:16:8a:19:6a:f1:f3:bc:4f:d2:b3:dc:53:d6:
                    43:19:2e:c5:f1:fc:ed:fc:00:b3:f9:d7:e5:36:d2:
                    25:8c:70:ea:48:3f:34:b9:ca:63:32:99:87:dd:86:
                    7f:f8:04:14:f2:ae:2b:d1:fc:e3:75:49:3e:a9:6f:
                    de:96:fa:a4:08:62:e9:eb:61:f5:d9:97:da:95:54:
                    b2:fd:c0:ac:96:7c:91:0e:0e:1d:ce:89:b6:22:24:
                    69:3b:1d:54:99:6f:c5:d5:be:7f:76:d7:a7:f9:01:
                    a6:6e:90:5a:b6:24:08:43:87:eb:31:27:eb:b4:ad:
                    8f:2e:98:00:63:82:34:74:72:22:89:23:0b:ba:76:
                    17:db:e4:ae:de:3b:90:d2:6a:0b:b4:5f:85:9b:ec:
                    04:54:6b:1f:5c:f9:46:4f:e4:d4:ba:e1:06:65:bc:
                    9d:ee:8f:1c:d1:df:33:e7:25:02:5e:22:c5:87:69:
                    e2:81:f3:28:7c:b5:dc:59:99:9d:28:05:24:b5:ca:
                    a9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:17:3B:22:D7:D3:2F:3A:67:3D:30:4E:65:4F:F2:42:19:2D:E4:0D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/789a1aef-77f7-4108-9d41-1a97c18e12cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f00c::/39

    Signature Algorithm: sha256WithRSAEncryption
         37:ec:68:a0:be:ac:f2:ad:60:55:5a:59:37:02:95:57:16:c6:
         af:73:62:98:be:89:d7:44:9b:5d:08:4c:6c:28:f1:4a:69:92:
         70:3b:f5:6b:36:af:5f:06:7d:d7:a0:32:6a:71:c0:7c:e0:92:
         19:0d:82:bd:e7:26:de:3f:34:02:21:e7:cd:5f:fd:13:96:28:
         8d:70:8a:db:e8:fe:36:46:08:44:bb:75:a3:d5:44:7f:b6:b2:
         7b:59:85:28:2d:17:86:e1:ca:af:03:a1:dd:3d:51:57:3c:91:
         ea:13:ea:b4:75:6c:89:99:bf:8c:11:44:8a:31:05:e9:13:d2:
         87:1c:1a:3e:e1:1e:eb:50:ac:ed:95:80:bf:d3:03:03:6a:81:
         98:6f:90:6e:1d:e3:f4:f1:f1:e1:44:8e:3d:92:0f:83:81:40:
         d1:3b:7f:bf:d8:ff:0d:73:c5:4f:58:5c:a2:dc:86:26:96:79:
         b5:4e:12:1b:d6:88:ac:31:34:e2:bf:41:03:13:2c:3a:eb:5d:
         1a:94:65:b1:c2:c9:59:11:c7:fc:a8:37:47:60:1c:75:de:f8:
         6e:1d:9f:ff:1d:fd:90:20:aa:52:a8:4c:a0:59:f2:b9:f3:dd:
         cb:55:22:f2:6d:f0:00:12:7e:ea:f8:58:7a:06:3b:61:3a:16:
         76:dc:37:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----