Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa
File:                     a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (raw, json)
Hash identifier:          1RH3nvj4oaoG8qkIz97LqeezzVp4WRPKLR4ZkWVUdWw=
Subject key identifier:   2E:EA:AA:AA:B0:20:C1:54:5D:DE:D5:9B:07:A1:90:BF:0B:6A:8F:FC
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       5ADE88810C2EC855724C088A1EE533C39DE7CA52
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa
Signing time:             Mon 31 Mar 2025 18:30:08 +0000
ROA not before:           Mon 31 Mar 2025 18:30:08 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:de:88:81:0c:2e:c8:55:72:4c:08:8a:1e:e5:33:c3:9d:e7:ca:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Mar 31 18:30:08 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=a6fcc1c1c92af1c3df6003ed874b2be17c2dfe676373167dae91d352293bd64c, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:5b:61:3a:a7:2b:53:ca:6b:10:2c:3a:e2:
                    30:42:d7:f0:e2:03:8e:c3:a7:0c:c5:d1:f3:44:2b:
                    3b:d6:5e:ab:4d:ab:4d:8d:54:85:51:95:13:6c:1f:
                    a6:dd:be:1e:31:30:ad:4f:12:48:10:6a:eb:b1:49:
                    09:97:e8:a5:f5:e1:51:75:66:a3:db:a7:4b:0c:c3:
                    46:c6:21:b5:c3:a2:16:d9:1c:93:f1:93:d5:01:12:
                    87:46:91:c6:29:ba:70:48:2b:e9:be:08:c1:5a:09:
                    57:dd:69:a6:29:e1:69:fe:38:69:50:8a:18:b6:ee:
                    70:34:dc:8d:59:85:92:ef:04:d6:c4:ed:ca:c7:bd:
                    c5:c2:2b:c1:5e:89:8d:31:44:68:8b:83:c5:93:3b:
                    05:93:98:78:8c:ac:dd:ee:04:54:b3:e8:0b:1c:8d:
                    f0:3f:8a:9d:e4:f7:87:89:ad:98:c1:fd:2e:53:8f:
                    82:f3:ca:98:92:b8:7a:7d:02:f8:b4:63:96:85:31:
                    45:ac:5b:16:0b:95:06:d4:3e:14:c5:f4:5c:19:98:
                    3c:da:02:2c:3a:08:24:50:dc:7f:a2:0e:30:c5:61:
                    ab:e2:f2:75:ee:60:0c:2c:f7:c5:ad:c5:2a:9c:de:
                    58:54:98:ea:54:8b:39:c2:08:62:c8:53:a9:1a:d6:
                    9d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EA:AA:AA:B0:20:C1:54:5D:DE:D5:9B:07:A1:90:BF:0B:6A:8F:FC
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:b1:c6:e6:fd:73:57:d4:db:63:d4:81:51:4f:d0:33:d5:53:
         28:ef:e2:ca:00:90:99:14:0f:fc:7f:f1:0b:a1:d2:cf:4d:d3:
         33:af:e1:b5:fc:f2:a9:ec:2d:7a:8a:1c:9f:5c:bd:86:1c:1d:
         a4:d5:9e:0d:65:c5:c4:2d:37:3b:df:7a:d6:ff:04:9d:d0:32:
         94:2c:cb:c2:eb:12:75:6e:70:49:25:c2:34:d1:b2:c0:2f:f4:
         b0:e7:cd:90:a7:77:24:d7:1b:61:43:52:01:48:08:ac:00:2f:
         7f:35:6b:94:e1:7c:7e:5f:14:08:15:cf:b5:61:8f:3c:4f:96:
         40:ac:23:ba:c0:e9:16:99:16:a3:fa:9f:a0:cb:3d:ec:df:17:
         6c:bc:b6:ca:43:bb:5b:fb:92:4b:28:98:ad:90:e6:90:5a:52:
         72:4a:76:22:e1:d4:f7:75:39:0f:c0:4b:d6:fe:64:94:e7:49:
         76:33:c8:52:7a:28:79:5e:d7:3a:7c:ea:15:70:3e:eb:b7:5b:
         7d:0e:2b:ce:15:06:2a:f6:74:e9:35:ce:03:51:c8:e9:a6:aa:
         83:ac:45:f2:84:93:68:b5:09:cf:1c:6e:81:de:d1:1d:d5:d9:
         6c:9a:bf:c5:97:8f:52:c7:9f:62:ac:0f:d6:ea:70:20:b0:32:
         f1:34:e9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----