Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1083a01-360a-4b23-a3a3-630df82536fc.roa
File:                     a1083a01-360a-4b23-a3a3-630df82536fc.roa (raw, json)
Hash identifier:          1a9Wyksd2zz9Zk6TXUoj4V+Ix+dqQmgn6Iiq9zYTstQ=
Subject key identifier:   EB:C1:37:61:54:98:88:4A:E4:60:E5:91:B4:A2:C0:29:83:84:6A:DF
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2203E7B52D98056F552D9D2C2495451A224EFFC9
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1083a01-360a-4b23-a3a3-630df82536fc.roa
Signing time:             Mon 31 Mar 2025 18:40:44 +0000
ROA not before:           Mon 31 Mar 2025 18:40:44 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:80::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:03:e7:b5:2d:98:05:6f:55:2d:9d:2c:24:95:45:1a:22:4e:ff:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 31 18:40:44 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=e5f27e9ac7166ef70e77ec79c2d189075a5f121219d732d681c7b681c0492eaa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:45:ab:45:53:a4:5d:6a:e6:e1:f6:51:3d:7b:
                    ca:f4:52:b2:c9:8e:f3:be:d6:f1:01:2d:68:f8:aa:
                    40:b1:c4:a0:18:61:82:31:c4:98:dc:ae:f0:1d:1a:
                    33:cc:0e:83:85:77:83:89:7b:68:5a:e3:35:f9:41:
                    10:a4:ea:74:8e:80:8f:cf:ca:8d:f4:aa:81:68:96:
                    ce:dc:33:c8:1a:1c:87:fc:aa:33:75:22:7b:8f:0b:
                    b5:4c:13:ec:dc:f3:c3:bc:87:cf:24:5d:99:fe:e1:
                    0d:f3:a3:de:5e:f8:38:75:28:69:2b:36:35:65:e4:
                    63:dc:05:2e:e8:df:3d:dd:42:7e:9b:3e:f3:cb:ff:
                    43:e7:87:b1:35:47:08:ba:ea:f2:bc:8c:ec:69:9e:
                    9b:50:1a:53:ca:5b:23:99:e7:6a:1c:19:da:d1:64:
                    d4:05:dc:5b:4d:ce:16:b6:f7:47:99:b6:6a:2c:77:
                    68:28:37:2e:82:2f:b3:69:c0:ef:53:8d:98:ae:75:
                    2e:e8:81:4b:7f:cc:64:fb:81:23:15:e3:24:ab:49:
                    cb:2b:65:ac:d6:9d:e2:80:22:d0:99:64:22:b0:14:
                    70:04:76:f4:f0:7b:0a:22:d3:e8:50:07:46:ed:ba:
                    7d:e7:0b:93:ec:f8:14:27:17:d2:ad:3c:a2:e7:c7:
                    b1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C1:37:61:54:98:88:4A:E4:60:E5:91:B4:A2:C0:29:83:84:6A:DF
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1083a01-360a-4b23-a3a3-630df82536fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:30:64:d9:ea:d0:86:4f:db:46:e6:bd:73:4a:9b:63:a2:ed:
         b4:60:c7:34:8e:34:6f:4a:4f:df:3f:f7:06:37:c0:8f:06:1d:
         c2:b2:4b:33:56:94:c8:23:51:46:6b:4b:70:38:f2:88:6e:77:
         61:4e:ae:7a:19:1b:79:22:49:c5:cb:e1:a2:00:09:41:7e:94:
         21:47:b7:9a:56:ee:07:6a:20:ad:f8:86:4c:28:56:3a:2a:a0:
         9c:86:cc:5f:5a:74:3e:52:e2:3f:f0:0c:dd:c6:7e:31:c8:f8:
         34:ce:81:5b:d6:e6:d1:16:d9:1d:bc:8d:b3:7c:6d:84:0f:04:
         fa:5e:54:9d:aa:e2:c8:34:ca:a1:b4:71:1b:43:8d:21:7f:94:
         49:f9:5a:83:ed:7c:8d:ad:59:53:4b:f1:17:90:7e:58:ed:d8:
         3c:40:21:56:dc:96:d2:d6:83:a5:d2:c6:ae:f1:f2:5b:52:83:
         5b:5d:e0:91:f1:83:40:64:6c:79:21:59:62:bc:fc:f4:86:a9:
         89:14:35:4a:fa:15:ae:ed:1b:2e:b7:ba:c1:4a:0b:47:04:81:
         fd:22:a9:45:34:48:32:e7:6d:99:5a:18:88:00:cf:3d:39:9d:
         e1:f8:0b:1e:f6:3d:7f:b5:52:6e:3f:2b:b4:18:fa:0d:b3:13:
         58:e8:39:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----