Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2bd076f-38fe-414c-adae-9c6f359542b7.roa
File:                     b2bd076f-38fe-414c-adae-9c6f359542b7.roa (raw, json)
Hash identifier:          ztzsAuVZkYCeJvu38ytzO4xTuc8aRwovfNmWIScv6ts=
Subject key identifier:   3E:A5:16:53:17:83:BF:2D:20:93:C4:48:34:F2:CF:B3:51:DD:CD:F6
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       4AFDE0B9C393929B078FDD1F2D802A212C171AE6
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2bd076f-38fe-414c-adae-9c6f359542b7.roa
Signing time:             Mon 31 Mar 2025 18:51:04 +0000
ROA not before:           Mon 31 Mar 2025 18:51:04 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fd:e0:b9:c3:93:92:9b:07:8f:dd:1f:2d:80:2a:21:2c:17:1a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 31 18:51:04 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=1862af263a09eae4f06df2d7f3d8754c78eebf7b271bd947091d9f648ecd7283, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:ca:9c:3e:64:fc:24:a1:3f:74:a2:d1:21:
                    2e:72:0f:67:95:4f:13:d6:62:bf:b7:50:f5:9d:21:
                    ba:16:8b:bb:fc:c8:20:3f:f8:9b:db:92:15:21:69:
                    db:b3:55:18:ad:d4:b9:90:a2:6e:2b:89:7a:97:45:
                    13:6d:68:ee:b2:f7:bb:0d:5e:c9:38:0f:99:d0:54:
                    ab:75:2e:33:e1:43:71:9a:26:0f:5a:5c:91:59:a5:
                    ce:3c:45:c3:8c:dd:26:fa:f3:14:b4:18:56:62:8b:
                    86:6b:b3:af:9d:54:3a:85:18:6f:bc:3d:13:8b:fe:
                    4b:28:0a:42:fd:e7:bd:9c:90:48:53:51:42:9d:b0:
                    e2:6c:2c:8c:a5:41:be:2f:ad:ea:b5:19:5b:ff:32:
                    00:0f:7e:95:27:d0:47:5b:97:ec:2d:78:f8:ed:5d:
                    43:c0:e7:74:bc:88:9d:a3:9d:fb:b4:98:e5:61:8b:
                    7b:ca:b8:ac:21:9a:c4:fa:01:9f:2f:2d:0e:db:26:
                    03:27:77:77:90:96:ef:0b:a1:59:dd:41:70:db:0a:
                    8d:3f:e6:6c:e4:b1:db:ce:65:9a:1b:7b:91:51:0c:
                    4c:60:da:7a:68:12:37:b1:a7:c9:4f:a9:21:d4:7d:
                    d1:93:6a:95:cc:e4:a1:dd:b6:24:ee:bc:88:84:c6:
                    1b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A5:16:53:17:83:BF:2D:20:93:C4:48:34:F2:CF:B3:51:DD:CD:F6
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2bd076f-38fe-414c-adae-9c6f359542b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e300::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:9e:83:1a:37:45:5b:70:f8:80:91:33:fc:90:8a:64:a8:70:
         ab:e5:e0:ef:df:af:71:a8:1a:00:58:c5:2b:54:63:ba:e0:a9:
         4b:4a:32:5b:1d:09:31:0a:8f:08:c7:61:54:6e:ea:fa:e7:09:
         fb:b4:01:18:41:69:c0:e6:b2:73:87:c8:47:27:b1:81:5e:2c:
         af:05:57:c8:53:c6:03:6d:8f:1d:dd:b2:48:ff:23:db:88:ca:
         33:c4:2a:ea:ed:08:32:bb:ec:56:18:88:5c:c1:5e:d6:8b:23:
         cb:75:e3:4b:10:50:b4:1e:f8:57:a1:e7:5c:be:27:19:94:58:
         2b:8d:a9:f2:21:33:b6:ef:31:5c:ff:6c:e7:88:11:68:32:c9:
         06:09:6d:66:fa:21:87:cc:ee:4c:ae:c9:7f:1a:dc:bb:c9:8f:
         b6:01:9b:27:4d:3d:16:11:9a:e3:3a:77:36:ea:5a:c4:e0:c9:
         1a:ae:ea:ce:84:67:72:fc:36:ac:e9:f6:c2:ac:65:92:a3:fa:
         69:27:c6:31:7c:b8:67:9e:36:49:01:5c:46:10:b8:c4:07:d0:
         54:b0:82:21:2e:e9:e5:06:6e:79:1d:70:b8:03:b1:c9:d9:21:
         38:81:7d:ec:a5:59:a2:f1:83:45:44:13:34:67:c1:29:97:14:
         ea:90:57:32
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----