Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/be30ad92-7a38-48eb-87ce-ecb485a7c5d0.roa
File:                     be30ad92-7a38-48eb-87ce-ecb485a7c5d0.roa (raw, json)
Hash identifier:          JdbrUzUjuYIQ5aC1k3Rjj5vZKwpUHsaZu8ub7gl1c2Y=
Subject key identifier:   81:F4:2E:05:7C:5F:B7:51:1A:61:34:18:C2:4F:ED:0E:67:A9:8C:C5
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       233445AEDFE7BDEC6B833F47498A16DF2E233F69
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/be30ad92-7a38-48eb-87ce-ecb485a7c5d0.roa
Signing time:             Tue 10 Dec 2024 00:00:00 +0000
ROA not before:           Tue 10 Dec 2024 00:00:00 +0000
ROA not after:            Tue 14 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:5514::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:34:45:ae:df:e7:bd:ec:6b:83:3f:47:49:8a:16:df:2e:23:3f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 00:00:00 2024 GMT
            Not After : Jan 14 23:59:59 2025 GMT
        Subject: serialNumber=c79a18d02a7819a7380056fbebd160a1fd0dac03f4be7b8c165e3bf4ffaa6767, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:35:1c:97:d4:d8:93:4e:8e:58:ab:db:35:58:
                    82:99:84:ab:1b:2b:cd:fe:1b:d9:c2:50:35:6f:f9:
                    a7:8c:de:5d:51:65:47:73:9c:40:e9:4e:5e:34:77:
                    09:b5:09:01:01:8a:0d:b0:ac:19:87:40:f2:36:a1:
                    f9:c5:74:b4:db:72:71:4f:8a:2f:33:24:e6:1b:45:
                    d2:06:db:bc:da:e1:1e:ca:51:27:44:b1:d4:f8:6a:
                    e3:a2:da:93:4e:f2:e5:49:25:0e:17:a6:03:3d:86:
                    61:a9:fd:9b:7e:9f:7a:0b:24:d3:54:b3:ec:51:2e:
                    e9:41:92:33:70:14:a6:77:61:8b:6d:75:84:7a:d2:
                    00:37:01:21:aa:03:81:26:03:c9:ae:12:50:ff:dd:
                    9b:21:f9:0e:18:4c:bb:1f:ab:18:d5:e7:e6:5c:6e:
                    cf:42:22:66:e0:c9:44:50:55:04:37:0d:22:42:0c:
                    e7:27:d0:8d:6a:55:dc:de:aa:f8:fd:ea:ca:5a:53:
                    8a:38:6d:74:23:32:68:ae:90:37:4b:f2:0c:d2:c1:
                    e2:d1:f9:cb:63:c8:d5:b1:70:08:b8:75:7f:1c:63:
                    0b:9b:df:1d:5b:f8:d9:cf:7f:01:42:e9:9b:93:ea:
                    e5:d8:5c:b3:80:2a:1a:c1:c9:f7:9b:c7:78:cd:79:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F4:2E:05:7C:5F:B7:51:1A:61:34:18:C2:4F:ED:0E:67:A9:8C:C5
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/be30ad92-7a38-48eb-87ce-ecb485a7c5d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5514::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:66:6c:5f:b8:4e:ce:f6:d6:6c:d2:2b:fc:63:32:c3:9c:0d:
         2c:2d:8b:bc:a4:78:49:5e:d8:f1:09:08:2c:4c:4f:08:81:32:
         52:91:92:0e:1c:9c:0c:bf:88:8d:ab:4d:fd:6e:0a:17:76:ab:
         84:bd:3a:2c:a9:ec:4b:5e:02:f7:79:82:53:33:62:dd:d1:0b:
         48:af:4b:52:c1:a7:5f:d6:28:93:f9:a7:ca:62:19:7b:2e:ee:
         8a:07:ad:93:34:93:bb:89:34:df:d6:ea:c5:3a:25:d0:59:0d:
         95:69:21:e4:97:98:69:4c:37:c2:1c:05:ff:af:c8:a2:97:4a:
         f2:d8:e4:03:36:fc:3f:0d:9f:1a:d5:b1:01:05:94:ce:73:a7:
         93:bb:b9:0b:0e:ca:2b:39:95:10:cf:18:8d:37:1a:0f:93:46:
         69:ed:6f:1f:b7:62:17:e8:f7:de:3e:ed:f5:1d:9a:6f:1f:38:
         91:7f:74:12:42:d4:7b:7f:8a:1d:94:d6:d4:64:e6:27:1c:23:
         6c:20:e3:34:63:98:75:9c:87:bd:cd:5f:7b:0c:84:c6:b2:d0:
         4a:f7:51:5f:46:29:0a:23:43:6a:e5:da:94:cb:64:68:e6:17:
         5b:9d:1a:6e:a6:93:7c:ce:88:fc:9c:4d:6f:0c:ec:c2:55:17:
         81:d2:8f:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----