Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1a35457-58cf-484d-ba72-2363ec392117.roa
File:                     f1a35457-58cf-484d-ba72-2363ec392117.roa (raw, json)
Hash identifier:          5wxtLwxwq6lX6EuE+fZsznJV9GOVk0QOi2+mbbU5qTM=
Subject key identifier:   31:62:9C:EB:89:BF:EA:FD:9E:1D:4E:F9:A3:1A:93:02:A3:78:C0:69
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6BDFBA13FDA6C219FB4A1590014D7BAEE387500E
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1a35457-58cf-484d-ba72-2363ec392117.roa
Signing time:             Tue 10 Dec 2024 00:00:00 +0000
ROA not before:           Tue 10 Dec 2024 00:00:00 +0000
ROA not after:            Tue 14 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:5532::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:df:ba:13:fd:a6:c2:19:fb:4a:15:90:01:4d:7b:ae:e3:87:50:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 10 00:00:00 2024 GMT
            Not After : Jan 14 23:59:59 2025 GMT
        Subject: serialNumber=c341ec113603bbce5c418ea95c682878aa0e0f7dc00159aa1fc6d78df230905c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bd:ac:3f:5c:13:3e:67:0b:a5:eb:d6:03:b0:
                    ce:ef:7c:95:21:96:4c:c8:be:81:ba:4f:e4:cc:b0:
                    c0:cd:b6:95:c8:3d:f8:c5:3a:fd:35:19:84:9a:ae:
                    c8:b0:59:e3:ee:97:ce:3d:49:8b:d4:29:91:78:46:
                    8a:0c:8c:35:52:6f:13:b8:d6:84:bd:ca:bc:78:5a:
                    9d:e0:75:ae:42:97:48:5a:e0:38:45:b4:28:65:9e:
                    42:0b:ca:2e:c5:04:80:9a:f8:47:6d:4b:ee:49:a6:
                    b7:6c:22:88:5f:01:ff:fe:70:af:b2:05:4c:9d:3c:
                    c6:80:cd:6c:43:70:cf:db:ea:d5:f2:20:15:25:99:
                    6f:dd:a5:51:b9:88:89:35:8c:fa:12:4d:cf:63:6a:
                    8c:d4:98:db:bb:fb:65:79:1e:17:fb:64:4a:d4:a8:
                    4d:42:87:fc:c9:8c:db:7d:b5:54:41:a5:17:93:59:
                    c5:d8:f6:9a:89:59:51:17:55:50:4d:b0:61:95:3a:
                    18:55:5b:eb:42:f8:33:a4:03:17:34:db:96:e6:7f:
                    14:90:3c:f3:53:a4:c5:aa:33:81:b7:b1:88:dc:5d:
                    2e:1d:cb:89:f6:0a:ad:b6:86:f5:51:45:9e:e3:17:
                    17:d9:fa:a1:a2:8a:a4:3c:cd:de:af:40:ad:c9:31:
                    26:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:62:9C:EB:89:BF:EA:FD:9E:1D:4E:F9:A3:1A:93:02:A3:78:C0:69
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1a35457-58cf-484d-ba72-2363ec392117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5532::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:8a:24:cc:69:9f:1b:c8:19:46:48:33:db:01:d4:7d:15:67:
         4e:9f:5b:00:02:a2:3b:47:d6:0c:93:8f:72:d6:1d:57:99:f4:
         52:29:96:94:d8:b6:fe:f6:a7:23:1a:86:58:66:84:ae:bd:46:
         3e:27:d8:9b:e5:5b:d7:85:be:a9:65:74:79:44:31:4c:ed:cd:
         b2:46:3b:60:a2:05:e7:20:cd:d1:a7:fc:d4:a5:74:f0:c2:df:
         e8:c0:61:bb:f4:a4:7c:e1:f1:a8:b4:5d:47:c5:08:c6:11:01:
         4b:0c:e2:21:ea:64:fa:d2:f5:9f:ef:eb:78:ee:a3:48:d4:17:
         f9:b8:2f:19:42:89:14:b6:92:78:2c:48:64:e1:36:9d:1b:51:
         91:72:f3:ea:ec:e3:60:19:6b:96:e0:48:0e:0f:f7:c8:74:2c:
         56:fb:fc:9d:e3:5a:ac:c1:f0:e2:05:8f:3f:b0:b5:13:49:65:
         57:a3:b5:29:8f:72:ec:87:90:35:44:c9:5e:8c:d4:22:c8:e7:
         bd:5b:ec:82:e8:91:48:50:e6:1b:ea:fe:d3:f1:fa:4b:35:34:
         c7:a4:d9:08:74:62:6b:f9:2c:6b:3e:c8:b0:e6:e4:5e:e8:a7:
         26:70:82:4d:a2:84:0b:5f:e4:8f:50:30:9c:bf:53:18:16:3f:
         9b:2e:e4:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----