Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/19a3175f-10a7-4207-b0fb-bf04c4c703d7.roa
File:                     19a3175f-10a7-4207-b0fb-bf04c4c703d7.roa (raw, json)
Hash identifier:          fUJLeahpm3kaBXFxHrGMB0wbge3YlPArl3AzWmLGHec=
Subject key identifier:   F2:D7:93:A6:66:B9:3E:AD:2E:53:2E:25:AD:5D:6B:95:4E:C3:EE:23
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       683C8208B53C2EEEB45E6E74D08A45FF8A574685
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/19a3175f-10a7-4207-b0fb-bf04c4c703d7.roa
Signing time:             Mon 31 Mar 2025 16:11:33 +0000
ROA not before:           Mon 31 Mar 2025 16:11:33 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:9000:5203::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3c:82:08:b5:3c:2e:ee:b4:5e:6e:74:d0:8a:45:ff:8a:57:46:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Mar 31 16:11:33 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=0ed9ed944138d9359c9352862cba62000dfc37d456ad8a300763526be7bd74da, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:ae:e7:b7:cc:04:22:5b:d7:af:38:0d:fc:
                    ee:e0:25:46:03:a0:7b:56:7f:72:de:1a:5a:48:44:
                    29:e4:03:0f:71:ba:7c:e6:c2:e5:ed:9d:8e:e9:de:
                    7e:34:ca:59:c3:3b:a9:bf:74:90:ef:dd:d8:1f:fb:
                    88:94:00:83:46:82:54:33:38:c0:2b:4c:cc:5d:e2:
                    1e:f3:73:43:15:93:7f:38:db:b0:0c:13:bc:cc:7b:
                    f4:d5:ad:9c:f1:6f:84:32:49:42:45:78:93:6b:61:
                    86:04:84:f8:d6:03:09:fb:91:97:a7:69:ae:19:37:
                    be:04:e8:92:c3:24:49:3d:a6:89:57:2c:fe:7f:f5:
                    b5:d6:32:46:22:dd:51:a4:6f:e4:8a:6e:57:4c:5f:
                    44:d3:93:3d:2f:1e:b4:e6:b7:ef:79:8e:dc:18:03:
                    c0:d7:f7:20:49:0f:c6:cb:36:a0:71:3d:4c:48:8a:
                    07:10:75:a5:45:d9:2c:5a:bb:23:a3:e4:75:71:97:
                    c6:71:f3:52:8c:c9:33:36:12:c4:44:b8:14:58:d2:
                    6f:fb:5c:61:8d:96:32:02:23:90:9d:e4:33:a5:bd:
                    e9:7d:86:96:39:0d:17:c1:88:27:95:bb:a0:78:42:
                    9d:97:2f:cf:98:c0:e8:4c:6b:19:99:fe:d3:83:7e:
                    3c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D7:93:A6:66:B9:3E:AD:2E:53:2E:25:AD:5D:6B:95:4E:C3:EE:23
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/19a3175f-10a7-4207-b0fb-bf04c4c703d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5203::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:2a:3d:00:b1:29:91:56:ba:ac:df:e2:f7:c6:78:ad:54:d8:
         b8:02:0e:03:e9:02:ab:50:6e:38:a9:76:50:b8:ac:6e:f7:0b:
         c4:dd:ac:59:7c:8b:5f:23:55:96:5c:80:20:58:d2:56:9e:0b:
         81:0c:a4:02:fe:44:fa:67:ec:d1:7b:61:d5:37:0d:49:6b:5f:
         12:03:09:98:ab:61:f4:b4:17:7d:a0:80:cb:36:04:2e:1e:1f:
         10:27:1e:c9:1d:72:fe:94:8c:a2:8c:61:70:fa:81:5c:90:a3:
         c9:61:99:76:f6:a2:d8:f2:a1:cd:a9:7e:3d:8f:10:42:78:a0:
         a2:2a:41:92:21:ce:b3:0e:e1:3c:e2:98:fe:e5:48:bc:8e:49:
         6f:29:c3:be:a1:55:23:fc:38:97:ef:8d:42:64:18:4f:d5:80:
         9e:ad:1b:86:ef:a3:ca:9c:dd:a3:df:dc:87:af:0b:7e:5e:f7:
         f1:a8:c6:e4:c7:31:a3:7d:d2:af:47:fa:11:78:bf:da:81:50:
         25:af:d5:7a:4a:7b:dd:5f:10:ce:6f:a7:ae:c0:7f:5c:27:ae:
         94:bf:f6:9b:b4:ea:3f:30:8c:89:02:af:83:a5:30:be:17:a2:
         35:00:b0:66:20:83:08:34:d5:96:c2:68:e2:5b:97:74:f8:c1:
         2c:cf:00:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----