Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa
File:                     a0024e00-f937-4b63-91df-d45ce0a6a27d.roa (raw, json)
Hash identifier:          3YzoCyWJ0TiOwkOr7X/jNEHGJPIMW+2zoClgCBSyq8A=
Subject key identifier:   25:5F:D8:16:58:E4:20:6C:09:77:C2:8C:FF:15:04:4D:C4:3C:49:AF
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7AA696C83D168216BAA9D4BAFE90E4C8E2C8AE1C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa
Signing time:             Mon 31 Mar 2025 18:41:00 +0000
ROA not before:           Mon 31 Mar 2025 18:41:00 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6010::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a6:96:c8:3d:16:82:16:ba:a9:d4:ba:fe:90:e4:c8:e2:c8:ae:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 31 18:41:00 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=de8441a479d13457719e61d70b4172fe5c97e0dac22298b146ee34a15dc61493, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8c:df:7a:ca:0c:53:4d:1b:8c:c5:66:b2:29:
                    47:05:59:dd:7e:86:de:48:8a:74:93:cb:98:57:b4:
                    72:79:00:25:63:b4:39:1e:07:d1:52:99:e7:1a:c5:
                    dd:05:81:b0:d7:be:0e:c5:b8:fe:83:ea:96:3e:cb:
                    e6:e1:e3:55:97:ff:61:d6:27:fb:17:64:f5:0a:14:
                    0c:d7:8a:70:2c:4f:0c:7a:22:59:1a:23:a9:bb:82:
                    07:38:1c:9f:66:87:67:bf:be:26:31:43:12:17:8f:
                    0b:b5:d1:a7:f1:08:3e:29:ea:99:74:f2:0f:30:da:
                    b1:f6:49:e2:d8:8c:e7:b0:cc:6b:63:b3:c0:c9:b4:
                    4e:37:37:63:1d:3a:b7:94:a9:3a:a6:40:37:36:81:
                    a6:88:df:ab:35:13:ab:98:34:ba:2f:02:43:39:dd:
                    76:da:48:6c:77:11:65:59:12:c6:1f:9d:16:3c:fc:
                    1d:62:09:da:96:23:a1:ea:72:ca:1f:5e:4f:c9:e3:
                    ab:20:05:bc:98:0b:25:fd:41:50:25:60:bd:23:3a:
                    d9:88:45:32:a3:59:54:f8:02:88:d6:53:d8:e1:98:
                    22:9f:5e:b8:f4:d8:a1:a0:4c:5d:cf:cd:7d:05:af:
                    1d:be:1e:5f:68:37:b4:5a:79:5c:13:f2:d4:5a:96:
                    ea:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5F:D8:16:58:E4:20:6C:09:77:C2:8C:FF:15:04:4D:C4:3C:49:AF
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6010::/44

    Signature Algorithm: sha256WithRSAEncryption
         4d:ec:67:5b:90:33:dd:d1:40:8a:75:f9:9e:29:e1:9e:ff:e2:
         7e:7a:cb:73:1c:b5:49:6e:50:cd:40:91:17:93:2b:86:9a:c5:
         14:70:19:73:2e:21:ff:a9:ca:c1:32:97:1b:22:44:20:9e:8d:
         b4:8f:30:83:c8:50:cf:06:7a:cf:e3:fa:a3:08:79:30:9d:1d:
         90:9b:1a:86:0f:d5:8e:e3:ec:42:99:07:ed:54:80:47:3c:ac:
         5c:eb:2e:ee:92:08:2b:39:2a:19:66:90:53:8d:36:0a:33:f8:
         4f:d4:69:98:ef:d0:e1:70:3f:4b:02:17:e1:3a:ca:97:83:9e:
         4a:d2:25:a7:8a:04:68:b5:4e:c8:51:c5:be:69:01:ad:8f:65:
         25:11:32:fc:dc:de:7a:16:13:d9:28:86:a9:49:ff:23:ae:78:
         97:fc:bb:45:3d:3a:f2:b6:83:75:7a:13:3b:b6:53:2d:98:11:
         b6:25:9f:f6:c1:8b:8e:14:35:c9:a7:98:74:75:78:e8:2a:8b:
         a8:2c:b0:73:35:c2:f0:70:a3:66:03:43:66:5b:9f:74:eb:e4:
         7c:57:55:4f:dc:9c:8a:50:e7:9a:f3:64:72:e0:bf:7d:3e:b0:
         93:8a:a9:6c:7d:d2:76:de:3c:9b:c0:f7:42:cd:89:ac:86:1b:
         9e:ae:0d:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----