Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fb1b2ec-1723-461b-a643-7e2c5b8741dc.roa
File:                     1fb1b2ec-1723-461b-a643-7e2c5b8741dc.roa (raw, json)
Hash identifier:          HEnLuOiefJFBtvrf7MZL5fq2mYr5Q++FH9Qpgy1Uaow=
Subject key identifier:   B9:A5:B0:DA:04:F9:67:B0:59:A1:86:E0:4E:19:C4:63:BF:77:AF:54
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       762A5EED89C0753600C8B136ADF0822DA08E30B7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fb1b2ec-1723-461b-a643-7e2c5b8741dc.roa
Signing time:             Wed 30 Oct 2024 00:00:00 +0000
ROA not before:           Wed 30 Oct 2024 00:00:00 +0000
ROA not after:            Wed 04 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:520e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2a:5e:ed:89:c0:75:36:00:c8:b1:36:ad:f0:82:2d:a0:8e:30:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 00:00:00 2024 GMT
            Not After : Dec  4 23:59:59 2024 GMT
        Subject: serialNumber=c0e273725eeced46191ec23ba9a84476750cc08485568d800c7357cbb2c5568a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a4:55:1f:ea:5f:bb:1a:7e:c4:d9:b5:24:30:
                    a0:04:a6:cd:52:f7:8a:f0:f6:be:02:85:f9:b8:2a:
                    02:dc:58:ba:9f:44:df:fa:9a:60:36:f6:e8:27:a9:
                    e1:8b:66:dd:7b:a8:1b:83:cd:e3:a5:76:8a:fa:9f:
                    00:d8:62:52:8f:3a:4c:f8:93:e2:3f:f7:f3:68:70:
                    c7:6d:72:c3:42:3f:d2:e3:c7:05:c4:08:0f:25:5c:
                    c6:a1:69:a3:07:c0:a3:ce:10:d6:00:41:5c:15:ee:
                    27:fd:ca:cc:36:ca:da:0f:83:fa:65:9a:72:7b:f9:
                    15:4d:6f:37:95:3d:57:f0:7d:36:9a:25:a9:fb:38:
                    43:fe:3d:19:82:9c:75:86:ee:9e:f0:9c:f6:45:9d:
                    b4:d0:83:4b:bb:6c:76:54:4b:10:cd:67:bb:a3:83:
                    b4:8f:34:82:2b:78:6a:f6:a8:08:01:83:8e:96:bb:
                    80:ae:f0:e8:0e:ac:4a:54:a5:b7:77:53:90:61:09:
                    50:cb:52:8e:86:f4:b6:ac:48:9f:9b:79:e5:bd:de:
                    5a:c9:67:f1:0d:c4:6a:a8:ad:7d:85:13:17:b5:f2:
                    c1:ad:6c:72:11:0f:0b:c8:08:9e:16:3c:77:da:93:
                    dd:0f:e2:fa:fc:a5:e8:51:cc:ce:fe:7d:17:eb:12:
                    98:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A5:B0:DA:04:F9:67:B0:59:A1:86:E0:4E:19:C4:63:BF:77:AF:54
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fb1b2ec-1723-461b-a643-7e2c5b8741dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:520e::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:bc:e3:8a:2f:c7:d9:8e:f3:0b:af:21:9c:90:a5:1d:9f:f0:
         6d:92:48:3b:4b:c1:f2:20:50:ba:38:1f:51:15:9f:4d:86:16:
         31:39:53:7f:66:e4:ba:27:32:c9:d4:e7:11:21:67:57:f0:ca:
         60:e0:e6:72:63:b3:d5:00:5a:ff:2f:c9:04:e3:ea:bb:d4:cf:
         b2:3e:ab:1b:38:77:4c:e6:b0:3d:61:9d:6d:3a:4e:f8:63:95:
         c8:e8:68:fd:d9:b2:f5:63:18:59:d8:cf:d1:54:e8:cf:a6:31:
         75:88:d6:15:02:e8:c1:84:6c:9e:d3:61:18:83:6d:1d:9e:41:
         de:e6:ba:62:41:b8:0b:e1:22:7b:1f:89:5a:1f:cb:37:00:9a:
         c7:ad:f1:b5:5d:c1:2c:db:f8:62:52:a9:47:bd:20:57:67:e9:
         e5:af:ff:af:07:9e:6d:6d:f3:e1:83:30:15:26:3d:38:fd:87:
         3a:58:ef:5a:86:f3:2a:87:fb:07:b2:a9:88:9c:4d:63:9b:9a:
         89:2f:94:be:9a:3b:f5:a3:00:84:ef:79:cc:3a:dc:d3:5b:fb:
         0b:ff:bc:08:50:df:02:a5:f0:16:7f:f7:7e:c9:a9:b8:22:aa:
         50:8e:ee:54:fa:89:bb:60:73:e6:f6:af:1d:cb:d3:83:44:c4:
         0c:f4:66:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----