Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a057d928-cbb8-42a7-8833-36c45fa2a922.roa
File:                     a057d928-cbb8-42a7-8833-36c45fa2a922.roa (raw, json)
Hash identifier:          fwo3X0gB/BbIjchdDyTbVg3I89Tn5u2NwIc6VUb7uFU=
Subject key identifier:   3A:8C:37:0B:F9:9C:2B:1F:0C:06:1F:5D:23:9E:FA:3F:90:7A:13:D9
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6713A56DE66849BA9B813FE60B957E8607923C81
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a057d928-cbb8-42a7-8833-36c45fa2a922.roa
Signing time:             Tue 10 Dec 2024 00:00:00 +0000
ROA not before:           Tue 10 Dec 2024 00:00:00 +0000
ROA not after:            Tue 14 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:86::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:13:a5:6d:e6:68:49:ba:9b:81:3f:e6:0b:95:7e:86:07:92:3c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 00:00:00 2024 GMT
            Not After : Jan 14 23:59:59 2025 GMT
        Subject: serialNumber=2ba8dae2eb57666333afbf985be7eb54e93dc1b7e43b9b8ea1460ae19643dd0c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4a:3a:10:1f:ed:79:d4:e2:a0:6b:46:14:ef:
                    41:15:8c:f6:07:b4:fa:ea:6f:35:8c:6d:a0:53:08:
                    9d:22:9b:ac:5a:db:47:74:bd:4b:ec:b6:19:e6:25:
                    33:77:96:b5:8f:12:6d:fb:cb:2c:a1:3f:7a:a2:2f:
                    08:89:1b:78:3e:aa:49:51:9c:31:4c:a2:f4:7f:00:
                    9e:03:cd:1b:3a:da:49:cc:b1:32:ea:a9:20:02:bd:
                    b3:ef:84:f2:b2:7a:d6:dc:98:e3:50:21:47:2c:4b:
                    8b:31:62:bd:db:d6:07:e5:b1:b1:25:a2:db:60:f0:
                    1f:be:b0:f2:42:01:12:15:b1:e1:d7:04:f3:86:0b:
                    8d:3f:8f:f8:b5:46:f8:5d:6e:7a:bd:80:b6:96:0f:
                    90:ed:51:7f:7a:89:ba:d5:ee:fd:bb:b3:19:9d:43:
                    10:b5:bb:9a:30:da:f5:ba:e0:d3:7d:5c:8b:92:dc:
                    2c:86:8b:c7:21:1b:8d:5f:33:c6:c2:9d:b0:60:bc:
                    a9:7c:21:59:e1:81:e4:e1:03:f4:dd:63:7f:ef:4e:
                    d7:94:66:0a:79:a4:37:37:f5:7d:30:47:d9:01:68:
                    b5:88:ce:e9:1d:b7:fd:cd:35:6a:97:d4:fc:9b:f6:
                    53:d5:38:0d:58:7b:e7:25:b0:b8:37:9c:c9:8f:58:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8C:37:0B:F9:9C:2B:1F:0C:06:1F:5D:23:9E:FA:3F:90:7A:13:D9
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a057d928-cbb8-42a7-8833-36c45fa2a922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:86::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:76:7d:be:e2:58:f9:31:eb:38:f5:72:de:bd:1f:fc:b3:b6:
         7e:ab:26:8e:8b:4f:4d:26:d8:17:e8:4d:e3:dc:b7:f3:8a:4a:
         8a:00:f8:dc:49:eb:6d:06:80:a1:5f:93:28:a5:bc:ac:b0:b9:
         24:00:3c:3c:cc:7c:19:f6:27:8c:04:b1:ef:9f:e8:46:a0:0b:
         49:93:96:4e:a8:57:a9:02:fe:ba:aa:a3:6e:12:e7:42:87:9b:
         1b:0f:e1:0e:85:56:1c:ba:80:8d:7e:53:32:ef:9d:90:79:c0:
         b0:36:c0:31:5d:5f:e6:6f:85:c3:18:97:56:0d:0e:2c:47:38:
         c9:47:cb:2f:29:f9:a8:23:7e:9a:a8:81:6f:e4:ff:49:88:91:
         84:23:78:be:6c:0e:55:65:0f:ad:19:fd:bc:0e:f4:7d:0c:1c:
         57:5d:9f:e2:92:e0:84:c5:16:73:ce:47:b0:1c:d9:7c:14:64:
         88:1c:76:68:fa:7c:81:91:8c:1b:5f:77:5b:a3:f9:46:89:66:
         d9:e6:b1:80:09:8e:2d:7b:00:3c:c3:00:23:b0:35:20:67:b3:
         df:4f:5f:ed:fc:59:3d:f9:07:b2:b9:ca:79:a5:75:62:5a:f6:
         94:67:8b:d8:58:e0:9a:35:47:ea:0e:32:97:c2:2f:62:28:7b:
         fb:2b:3e:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----