Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e176376b-59e2-4c1e-bc4e-89a463fa12d4.roa
File:                     e176376b-59e2-4c1e-bc4e-89a463fa12d4.roa (raw, json)
Hash identifier:          wEBSjtbkfv81JF4A0iTDDzbZs/jet1QHOEEpYZopk8I=
Subject key identifier:   75:06:B4:05:38:FE:9F:4C:F1:2C:84:DC:FA:69:7B:EF:61:98:D3:98
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1F16100EC54BDBBAA5C1841D1AFBE2BDA2EA0B20
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e176376b-59e2-4c1e-bc4e-89a463fa12d4.roa
Signing time:             Mon 09 Dec 2024 00:00:00 +0000
ROA not before:           Mon 09 Dec 2024 00:00:00 +0000
ROA not after:            Mon 13 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:16:10:0e:c5:4b:db:ba:a5:c1:84:1d:1a:fb:e2:bd:a2:ea:0b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec  9 00:00:00 2024 GMT
            Not After : Jan 13 23:59:59 2025 GMT
        Subject: serialNumber=8c49afad3d1ac13867252c63c49c8526476b2572a7809c30ea4078c50a61209c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:49:ac:09:34:2c:cb:62:43:23:e0:78:36:
                    11:ee:2b:7c:95:23:e2:e9:22:a3:7b:95:e0:9c:7b:
                    0b:0b:9b:2e:3f:88:d8:a1:71:7c:40:0f:d0:a4:99:
                    70:94:72:04:65:69:4c:09:bf:af:8f:05:94:f2:9c:
                    4b:18:29:35:95:c4:10:89:56:71:d8:95:84:f9:b4:
                    1b:7b:6b:e9:a7:17:9b:0f:c5:0b:51:98:a0:b5:b1:
                    b0:98:19:a4:73:7c:2d:95:25:88:8c:17:2a:70:df:
                    82:80:38:22:d7:d2:ca:5b:05:5f:68:4f:02:ca:39:
                    71:76:37:a7:45:07:c7:ec:1e:80:b8:80:a2:f7:1e:
                    0e:f4:41:f1:7f:2f:99:a2:68:bb:ac:3d:7a:74:50:
                    f2:ca:2c:f5:c0:16:cc:43:90:c0:38:25:fd:ab:92:
                    23:a8:bd:a8:12:32:37:71:a3:a8:be:7f:70:b0:c8:
                    ec:f4:c0:fc:61:82:3f:dd:b2:10:6d:c2:bf:70:e0:
                    46:ce:f7:f2:04:12:cf:54:9e:43:07:7b:8c:d6:60:
                    f3:9c:12:68:b1:75:0d:45:44:77:2e:a5:76:96:a7:
                    4c:d6:dd:71:51:e8:6a:e4:a4:fe:8e:20:1f:7c:9f:
                    1b:8b:1c:77:f6:6d:cf:d6:c3:50:aa:de:eb:8d:cb:
                    18:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:06:B4:05:38:FE:9F:4C:F1:2C:84:DC:FA:69:7B:EF:61:98:D3:98
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e176376b-59e2-4c1e-bc4e-89a463fa12d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:0e:62:5e:d5:4a:32:2d:96:ee:db:03:77:d6:79:b9:cf:45:
         7d:c1:3f:9e:ce:f0:c5:34:fa:18:9f:4c:ed:82:a6:c0:3a:7e:
         08:06:ff:7f:42:ba:3f:d4:33:5f:b7:72:9f:6a:d7:7a:c3:76:
         63:77:ca:f7:01:35:d3:54:0d:4b:50:96:15:9d:15:29:dd:72:
         05:a7:ac:1d:bf:35:29:c3:e6:59:42:84:ec:ac:dd:9a:f3:14:
         ce:fb:f6:a0:65:80:3b:76:9e:f0:95:4c:67:73:17:b4:45:a6:
         91:88:50:92:e1:80:ad:9c:26:3f:07:00:39:25:60:78:e6:36:
         df:cc:99:07:41:97:3a:6e:79:92:5f:b1:a5:2a:98:eb:9b:ab:
         59:b0:0a:da:46:56:03:5e:7b:43:d0:41:8a:6c:b3:37:e7:71:
         4a:b8:83:71:6c:28:03:c9:d0:d9:5b:36:12:79:56:ff:ab:44:
         c2:39:55:d2:62:e2:08:cd:34:50:da:29:de:30:7b:d9:b8:46:
         7a:b8:03:17:78:4b:3c:50:ab:a4:88:0d:00:f8:f4:9a:32:6a:
         e0:e2:29:32:6c:35:b0:04:5b:51:f9:25:93:7d:7b:db:ce:e0:
         ab:e9:b9:07:d8:3a:dd:6e:0a:bd:19:8a:2f:46:33:c1:0a:5d:
         d7:82:4c:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net