Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c95d920e-7e95-4907-9edf-29509d14ad36.roa
File:                     c95d920e-7e95-4907-9edf-29509d14ad36.roa (raw, json)
Hash identifier:          mR2ToTrII1RhDy0OMYF9EcN8ojurQQDeKzYBa7xCBHQ=
Subject key identifier:   24:54:D6:B7:13:3D:0C:F5:B3:96:01:D1:4C:89:95:46:08:EC:A0:46
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       361AE5D6C9271A2A3105730541843B1A0325A5CC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c95d920e-7e95-4907-9edf-29509d14ad36.roa
Signing time:             Mon 31 Mar 2025 18:51:35 +0000
ROA not before:           Mon 31 Mar 2025 18:51:35 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:eb00::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1a:e5:d6:c9:27:1a:2a:31:05:73:05:41:84:3b:1a:03:25:a5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 31 18:51:35 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=a334c7a57ae29065d730d1822656f06530ccd2359f5483be06fa3b6b2179329e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:00:af:49:7f:8a:8f:11:73:ce:08:5c:5e:
                    ea:3e:bd:29:5e:78:d8:dd:d6:5b:46:7f:a7:77:dc:
                    fe:e0:2c:be:b0:27:42:3a:50:d6:24:d0:4b:43:4f:
                    63:8b:07:95:60:ac:59:bc:01:01:fc:88:b3:29:e1:
                    d9:91:bc:0d:78:23:bb:73:4a:9a:21:75:a0:04:7a:
                    30:01:bc:2d:5e:25:72:de:bb:f8:d9:8c:ef:74:81:
                    fc:bc:18:01:da:85:f4:24:22:0a:a0:8d:02:32:84:
                    5d:5a:f8:26:8a:08:c3:9e:a5:57:fd:bf:9b:8c:22:
                    27:be:59:86:a2:63:ac:7f:6b:b9:e1:ec:21:4b:24:
                    ed:d7:ea:97:b6:66:f6:28:8f:7b:51:39:2f:27:34:
                    60:ae:f6:a6:5f:38:8c:28:c6:e7:4e:2c:a4:9f:2c:
                    61:5b:b6:6a:25:bc:84:7e:b4:db:93:30:8a:69:0c:
                    28:51:05:aa:53:7b:51:22:6c:8d:55:78:21:cd:a6:
                    c2:32:27:7e:10:d1:62:5e:18:52:07:06:ee:ae:2f:
                    b9:0e:d2:04:4e:fd:48:ef:db:8b:1f:d6:56:95:12:
                    01:f5:6a:b4:cf:9d:63:94:54:7e:1e:31:c2:c3:d7:
                    19:b2:43:d6:d3:42:22:f8:45:49:9e:50:9b:fd:8c:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:54:D6:B7:13:3D:0C:F5:B3:96:01:D1:4C:89:95:46:08:EC:A0:46
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c95d920e-7e95-4907-9edf-29509d14ad36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:eb00::/42

    Signature Algorithm: sha256WithRSAEncryption
         74:11:2e:70:c7:45:9c:a6:13:ab:00:58:01:7c:ff:2f:a4:1e:
         2f:a2:73:6e:2e:7a:d7:ad:07:c1:c5:1e:37:82:65:c2:02:03:
         24:9c:1e:9f:56:7c:87:ad:5a:43:9b:67:78:3e:7a:c1:17:98:
         9c:ef:02:4d:a1:19:6b:22:5c:4f:70:f4:60:a1:53:7e:7d:fc:
         7e:26:62:c5:d4:c0:e5:d8:71:06:88:45:87:32:e9:ac:38:fe:
         28:fa:5f:1b:4f:ad:50:6c:e5:57:2d:21:39:ce:98:1a:9c:5d:
         21:2a:e1:41:45:b5:0b:e8:44:0a:2f:b0:aa:d9:00:c6:8d:6c:
         f8:80:3a:24:27:7d:14:06:e9:af:23:56:4b:a9:d5:44:66:fb:
         35:24:6f:9d:ca:9e:58:be:b7:be:1d:f1:1a:7f:a1:fa:69:58:
         6e:89:dc:1a:fe:04:32:f2:be:d4:b7:f8:dd:ca:f7:27:bc:6b:
         03:c6:07:84:b9:77:45:fb:4e:6a:2b:5e:ef:32:44:b4:a5:d2:
         88:85:7f:06:cc:df:00:d3:e8:99:8e:15:22:52:6c:aa:21:a3:
         a7:70:5f:55:df:91:fd:b2:ec:ea:7c:13:f6:8b:33:5d:6a:1e:
         a5:3d:92:da:d5:38:74:1d:cd:cd:ec:f0:fd:82:48:ee:91:68:
         16:4f:d8:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----