Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8a22460-1c12-4314-8b13-6a586edac27c.roa
File:                     c8a22460-1c12-4314-8b13-6a586edac27c.roa (raw, json)
Hash identifier:          yysnTKf2J7lhm2uEK04tocIvUji2x6CvSaqc5ERXgDg=
Subject key identifier:   C4:35:BE:E1:9E:4F:1A:64:71:0A:AC:F3:93:32:58:37:8A:A9:68:9D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1BE3B23C0A6D1B77771B756EEBC720EBB176F6C0
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8a22460-1c12-4314-8b13-6a586edac27c.roa
Signing time:             Mon 31 Mar 2025 18:50:24 +0000
ROA not before:           Mon 31 Mar 2025 18:50:24 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:ec00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e3:b2:3c:0a:6d:1b:77:77:1b:75:6e:eb:c7:20:eb:b1:76:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 31 18:50:24 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=f2ba5cca6456b6371a6c6fe7a57c00f0e558657cd3525ed3527d31079263e7ce, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1c:ee:b4:b5:a4:ff:13:41:75:92:7d:47:5a:
                    fb:46:2e:53:79:6b:e0:6c:d1:1d:42:6a:03:b0:08:
                    4e:c3:1b:c0:df:9e:4e:64:c1:d6:19:fc:12:31:f5:
                    35:1c:f0:f2:24:12:d8:3f:b2:9f:c6:da:e9:5b:9f:
                    e3:8b:51:09:89:96:a2:03:bd:28:6d:1a:8c:06:98:
                    40:05:13:55:89:76:86:5b:5e:62:d2:cb:a0:53:64:
                    5a:94:48:6a:59:9a:75:e3:e4:49:b8:09:50:b0:80:
                    56:35:4c:56:06:c0:52:fc:a5:2f:85:4d:7b:dc:a5:
                    af:64:8e:0b:a4:fe:c7:46:65:5b:70:2e:4e:9b:ee:
                    7a:11:fa:8d:0d:5c:d7:e7:0e:82:3c:e1:62:dd:27:
                    52:92:d1:db:57:ed:cd:d1:8f:4b:74:c3:02:6d:e8:
                    39:48:98:6c:9e:fb:ef:4e:f8:c7:de:ee:d4:e8:54:
                    76:0a:7a:d2:bd:68:e2:f2:27:b2:6c:c4:b3:50:30:
                    8e:c3:0f:e4:53:82:65:09:ea:25:6b:da:a2:d1:33:
                    62:33:b9:d2:86:c5:04:84:6e:06:8a:54:6c:e4:aa:
                    4e:cf:9a:e4:d4:3d:28:7a:24:a7:49:a5:56:3e:e5:
                    a1:c1:39:7c:3a:31:cb:2a:41:79:2f:ac:4d:c3:28:
                    f0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:35:BE:E1:9E:4F:1A:64:71:0A:AC:F3:93:32:58:37:8A:A9:68:9D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8a22460-1c12-4314-8b13-6a586edac27c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:2f:23:a8:1c:40:3f:0b:67:b8:02:9a:46:9a:7c:84:6a:ef:
         22:46:03:8f:ec:15:2a:d1:cd:ab:e0:eb:b1:36:3e:ff:ee:86:
         92:80:5c:d3:44:36:6d:84:d7:09:bb:89:de:8b:fa:db:58:31:
         e0:2e:2f:ff:64:59:51:ec:c1:6e:5b:81:79:f0:82:49:c1:52:
         c5:9a:94:fb:66:34:ba:e5:88:39:61:aa:68:26:3b:ea:8c:3b:
         71:02:b7:a3:59:5c:5a:39:61:dc:08:82:6d:9f:04:5c:6f:c4:
         20:73:57:d7:c7:77:ce:a6:be:e3:76:09:3a:ee:0e:89:10:03:
         0b:a1:1a:92:77:71:a4:64:12:1d:6e:c5:69:9f:b5:1e:e3:2c:
         fd:ed:59:ad:21:8b:03:90:23:b5:4a:1a:08:ec:54:33:de:a2:
         1c:78:e6:4f:07:26:1a:c7:4f:74:41:ac:51:0a:5b:8d:9d:36:
         e1:eb:1b:ad:b6:e8:0e:a8:2b:f8:11:e4:db:23:46:d4:a2:1f:
         c9:a7:ee:f4:27:be:39:9a:79:cf:95:dd:e5:b1:ed:ab:eb:f7:
         fe:6e:65:10:b8:c7:1f:0d:30:07:bf:63:c4:5c:a3:42:dd:d9:
         4e:d2:bf:8a:55:35:18:e8:0d:ed:69:a6:0c:8f:5e:77:93:c5:
         e8:8b:c9:b6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----