Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7c0c4811-7db0-4cc0-8fa1-6dbda4055b97.roa
File:                     7c0c4811-7db0-4cc0-8fa1-6dbda4055b97.roa (raw, json)
Hash identifier:          XKZnVbpoLabelpGnLR05v9lrs3CwBhyKUOLzUFn84NQ=
Subject key identifier:   40:CA:6E:39:DA:85:ED:C5:90:90:63:3C:50:B5:AD:2C:5C:00:3C:42
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       305DC702DDC61899E7D904416C200126600865F2
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7c0c4811-7db0-4cc0-8fa1-6dbda4055b97.roa
Signing time:             Mon 31 Mar 2025 18:51:37 +0000
ROA not before:           Mon 31 Mar 2025 18:51:37 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:eb00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5d:c7:02:dd:c6:18:99:e7:d9:04:41:6c:20:01:26:60:08:65:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 31 18:51:37 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=1abacec4ed983250b49850a6176c4835a1af15e3d61eb0a9676de3fb8d96d1cc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:97:cc:a8:b8:df:56:36:e0:41:a6:5f:e5:
                    37:38:46:1d:c2:26:78:4a:94:9b:a8:dc:02:ef:a7:
                    02:04:ef:27:71:03:d3:d1:93:5f:f5:3a:5b:54:fa:
                    75:7e:7c:7f:61:3e:cc:41:cf:6c:2b:d5:38:ef:24:
                    a4:d5:9c:13:7b:f4:9c:58:d4:17:45:2f:e5:4d:99:
                    04:fc:3a:ce:3b:86:6d:58:bb:68:43:3d:0e:ce:c6:
                    93:9d:13:09:74:6e:4e:1a:fc:0b:fd:fb:56:12:9f:
                    1f:65:74:ec:71:37:6f:39:7a:52:8d:c7:7a:91:d7:
                    6a:57:13:bb:be:0b:77:46:25:44:fd:fa:2a:f2:b8:
                    f5:6a:75:ed:ea:b2:ba:0e:9a:b3:ad:dc:8b:13:16:
                    77:1f:86:1d:d6:cb:ba:f7:2b:ef:e9:00:53:fe:65:
                    c8:d9:d7:dc:74:d2:f2:de:02:f5:b3:88:56:c4:ef:
                    02:37:26:0a:94:04:39:9a:77:ba:24:ec:50:f7:83:
                    44:35:7f:16:a2:1a:dc:d7:37:3a:a0:68:85:f4:f0:
                    43:f5:fa:84:1a:f0:da:80:96:93:01:58:39:d2:26:
                    ea:b4:bc:12:86:0e:11:10:ce:77:00:c0:df:05:7a:
                    00:7e:34:33:59:c8:52:20:ee:78:ac:65:54:b4:25:
                    ba:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CA:6E:39:DA:85:ED:C5:90:90:63:3C:50:B5:AD:2C:5C:00:3C:42
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7c0c4811-7db0-4cc0-8fa1-6dbda4055b97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:eb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:21:01:34:6a:11:9c:9c:af:2c:36:7e:29:2c:75:cf:e2:
         67:ec:85:87:1a:14:9b:1b:48:0f:c5:02:5e:d6:96:70:a8:a5:
         ab:c5:7e:08:ef:cc:b5:47:30:8f:ff:9d:02:e7:1f:d1:98:2a:
         94:c6:fb:f4:d6:c3:67:e4:5a:55:06:42:ee:a8:f4:ab:25:e3:
         3f:a1:b3:7e:bf:ab:3d:81:14:d9:d2:01:f7:26:de:f1:39:33:
         ec:d3:32:e5:30:bb:5e:44:8c:86:58:90:c1:48:7c:dc:1d:11:
         a2:c6:04:45:9d:c7:29:d3:41:20:d9:8c:8f:3e:a9:f4:91:6a:
         43:c3:f5:a2:2f:bc:f7:05:d0:20:bd:3f:e3:78:8d:b6:c0:9c:
         b2:9f:21:e5:75:4c:2b:39:d8:22:eb:32:25:ac:9e:aa:c8:01:
         12:16:82:5f:33:52:7b:6b:10:69:44:85:ac:5b:60:2a:c2:1c:
         84:2a:dc:46:32:0b:21:8e:06:d7:96:7a:7b:fc:28:ea:4d:fe:
         42:e9:2a:1c:d5:af:6c:ea:cc:b3:e9:37:68:ae:1a:db:a9:f8:
         36:6b:0c:ae:20:72:77:8d:21:df:9e:99:b5:e0:b2:b3:3c:f2:
         55:0a:86:e1:78:8e:0b:db:b7:77:8d:e9:bc:a0:11:de:f5:bb:
         06:1f:bc:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----