Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b1852bc5-c68f-45e2-babd-25b6c38b89cf.roa
File:                     b1852bc5-c68f-45e2-babd-25b6c38b89cf.roa (raw, json)
Hash identifier:          0+qO4z+jw8nKnIi2y2voshX24+H1hUHe7QLlQLVCV3E=
Subject key identifier:   EF:6F:D8:51:26:16:2E:8E:7E:D1:3A:58:01:BA:48:9F:54:4D:07:6F
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5B9F694E5B82BE82FAADB7BFA17F97F6FD50FFDA
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b1852bc5-c68f-45e2-babd-25b6c38b89cf.roa
Signing time:             Thu 05 Dec 2024 00:00:00 +0000
ROA not before:           Thu 05 Dec 2024 00:00:00 +0000
ROA not after:            Thu 09 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f3:cec0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9f:69:4e:5b:82:be:82:fa:ad:b7:bf:a1:7f:97:f6:fd:50:ff:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec  5 00:00:00 2024 GMT
            Not After : Jan  9 23:59:59 2025 GMT
        Subject: serialNumber=417b5df8a7753df84c8441e61c1d75e43a087de49f8658e4bb0d08b1d56329f1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:db:2a:b1:ba:3e:15:14:72:f7:5f:13:60:
                    a7:46:fe:60:e4:a2:51:b8:7f:ad:d2:33:7f:08:91:
                    91:9e:d6:2a:47:bf:7a:c5:1b:82:c1:69:30:25:34:
                    01:33:9d:18:4c:74:11:0e:4b:f2:c6:2d:27:60:25:
                    3d:27:af:8f:08:c9:32:1b:da:41:8a:00:90:53:e7:
                    e8:9d:56:bc:68:42:83:51:7d:1a:c0:4b:bd:b2:b9:
                    fe:7e:f2:58:d1:a9:c2:44:ca:56:56:a5:39:f2:15:
                    e0:8d:9a:f5:ea:94:5a:6f:ad:9a:96:db:35:13:8f:
                    be:69:d8:21:b2:24:27:22:d7:63:e0:18:63:62:0f:
                    3b:32:db:4e:d1:2e:d0:06:b8:13:60:33:64:7f:a0:
                    04:51:c9:96:f7:bc:15:b8:86:b0:24:28:5b:ea:b8:
                    a4:26:fd:52:f4:4c:00:50:e0:c7:a1:5d:d6:5f:3a:
                    69:0e:07:ea:32:45:76:eb:2b:0d:72:fa:64:95:7a:
                    3a:aa:3e:de:ab:a9:de:1c:77:39:95:6e:92:eb:03:
                    43:6e:77:42:8e:43:22:8e:83:34:51:94:38:00:a9:
                    ff:df:b0:f1:93:35:6b:2e:55:f4:f2:b7:5a:da:af:
                    18:d5:5b:c8:15:a8:0a:c0:97:c9:f7:1a:c6:d6:dd:
                    d5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6F:D8:51:26:16:2E:8E:7E:D1:3A:58:01:BA:48:9F:54:4D:07:6F
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b1852bc5-c68f-45e2-babd-25b6c38b89cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f3:cec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:6d:aa:ba:69:fb:a0:98:2f:d2:db:a4:74:f8:8a:a8:1a:f1:
         b2:f8:50:77:22:b9:ca:b5:aa:e4:f8:b5:6e:2e:68:97:4d:12:
         0e:1f:db:f6:61:24:67:73:5c:97:dd:ac:03:06:21:ff:4d:23:
         33:c4:e9:94:8d:2b:e7:1b:e8:4c:07:d0:39:23:7b:56:89:4a:
         ac:66:27:fd:d2:65:ec:4d:07:cc:d8:10:d8:c3:6e:1c:46:ca:
         c4:f8:6c:1e:dd:35:d9:96:09:5e:ee:84:12:86:47:01:fd:be:
         74:20:5c:67:d3:20:fd:43:1b:a1:5c:dd:6d:f9:a8:ae:33:a1:
         dc:0f:ca:a2:11:f3:59:09:32:d8:4c:06:d0:55:87:0b:ae:5b:
         4f:60:5e:32:89:2d:96:f8:8b:7a:1d:e5:5c:72:fd:e1:0e:8c:
         cf:dd:52:25:a0:dd:06:4a:3b:a2:22:6d:fa:ac:7c:ea:9e:2d:
         12:aa:a3:d7:33:a2:9e:ba:2a:af:61:d6:b1:e1:9a:4b:06:5a:
         67:6a:f2:ac:73:56:52:9f:ed:4d:15:cb:5b:17:77:4d:cb:54:
         90:49:bd:db:e9:32:6c:77:5b:72:27:ce:e8:4f:e9:af:68:d2:
         57:b9:d5:89:99:d8:d4:bb:0b:6d:5b:1f:7e:72:2f:35:60:cf:
         08:0a:a8:aa
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUW59pTluCvoL6rbe/oX+X9v1Q/9owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMjA1MDAwMDAwWhcNMjUwMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MTdiNWRmOGE3NzUzZGY4NGM4NDQxZTYxYzFkNzVlNDNh
MDg3ZGU0OWY4NjU4ZTRiYjBkMDhiMWQ1NjMyOWYxMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCa9sqsbo+FRRy918TYKdG/mDkolG4f63SM38IkZGe1ipH
v3rFG4LBaTAlNAEznRhMdBEOS/LGLSdgJT0nr48IyTIb2kGKAJBT5+idVrxoQoNR
fRrAS72yuf5+8ljRqcJEylZWpTnyFeCNmvXqlFpvrZqW2zUTj75p2CGyJCci12Pg
GGNiDzsy207RLtAGuBNgM2R/oARRyZb3vBW4hrAkKFvquKQm/VL0TABQ4MehXdZf
OmkOB+oyRXbrKw1y+mSVejqqPt6rqd4cdzmVbpLrA0Nud0KOQyKOgzRRlDgAqf/f
sPGTNWsuVfTyt1rarxjVW8gVqArAl8n3GsbW3dUrAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU72/YUSYWLo5+0TpYAbpIn1RNB28wHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2IxODUyYmM1LWM2OGYtNDVlMi1iYWJkLTI1YjZjMzhiODljZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDzzsAwDQYJKoZIhvcNAQELBQADggEBAD1tqrpp+6CYL9LbpHT4iqga
8bL4UHciucq1quT4tW4uaJdNEg4f2/ZhJGdzXJfdrAMGIf9NIzPE6ZSNK+cb6EwH
0Dkje1aJSqxmJ/3SZexNB8zYENjDbhxGysT4bB7dNdmWCV7uhBKGRwH9vnQgXGfT
IP1DG6Fc3W35qK4zodwPyqIR81kJMthMBtBVhwuuW09gXjKJLZb4i3od5Vxy/eEO
jM/dUiWg3QZKO6IibfqsfOqeLRKqo9czop66Kq9h1rHhmksGWmdq8qxzVlKf7U0V
y1sXd03LVJBJvdvpMmx3W3InzuhP6a9o0le51YmZ2NS7C21bH35yLzVgzwgKqKo=
-----END CERTIFICATE-----