Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/02e80c9d-369f-46ba-87b8-e7748e7c9c90.roa
File:                     02e80c9d-369f-46ba-87b8-e7748e7c9c90.roa (raw, json)
Hash identifier:          NfrmQg0UinMZPssArvvlVC4ToqTJtK4KhYI/yngQIck=
Subject key identifier:   E9:83:1E:B8:04:F0:C5:6E:54:22:19:C6:A2:03:F7:31:07:A1:6B:4F
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6D3711CB4C2671C3B0EE01B811218ACE18DC0B97
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/02e80c9d-369f-46ba-87b8-e7748e7c9c90.roa
Signing time:             Tue 04 Mar 2025 23:30:46 +0000
ROA not before:           Tue 04 Mar 2025 23:30:46 +0000
ROA not after:            Tue 08 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e700::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:37:11:cb:4c:26:71:c3:b0:ee:01:b8:11:21:8a:ce:18:dc:0b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar  4 23:30:46 2025 GMT
            Not After : Apr  8 23:59:59 2025 GMT
        Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:53:c5:9f:57:5f:18:ac:93:32:81:0d:54:
                    c9:db:1e:38:5b:de:91:01:ab:57:cd:5a:b8:18:56:
                    f1:15:0c:3d:6f:51:64:63:e5:dc:53:f0:12:1d:18:
                    cb:f2:ac:d6:9b:7b:84:a2:74:a6:da:ab:c5:1e:e5:
                    1a:2c:56:83:b8:b5:67:15:a5:31:68:90:ea:4f:03:
                    d9:1a:96:b0:d9:db:00:58:d8:3e:0f:85:4a:e6:57:
                    cc:e0:db:1b:b0:18:a0:3b:15:d0:7d:7a:06:be:6c:
                    25:74:e3:7b:92:d2:3e:72:55:8e:91:4a:cb:5c:c5:
                    9d:71:77:6d:c3:42:5e:43:6c:e6:8a:76:0d:d0:91:
                    12:25:1a:d7:75:1d:81:f9:6f:3e:c1:02:2a:24:87:
                    f5:74:d4:cd:31:f3:57:61:25:83:93:54:6a:16:81:
                    3b:6f:1b:ff:b2:d9:6e:75:5c:02:11:33:86:59:e1:
                    fe:97:4d:79:ee:03:79:c6:7a:f6:b2:c5:8d:a6:77:
                    90:f1:a3:b2:bf:33:f2:99:fd:da:2f:1a:b1:6d:4f:
                    d8:cc:aa:0c:85:0b:86:b6:9b:1c:5d:64:5e:9d:f0:
                    b8:d7:a2:ff:d4:4b:96:a4:81:75:ad:32:3b:2c:8d:
                    52:95:a9:06:33:de:1e:94:af:7d:9c:b2:22:52:34:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:83:1E:B8:04:F0:C5:6E:54:22:19:C6:A2:03:F7:31:07:A1:6B:4F
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/02e80c9d-369f-46ba-87b8-e7748e7c9c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e700::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:d3:7d:7e:a8:c6:d0:43:5a:f6:6d:83:3a:2e:c2:eb:22:ed:
         a6:5e:5f:39:eb:be:59:cc:28:a8:6d:04:ba:09:a8:2d:52:69:
         f2:15:c4:ea:e4:b9:c6:84:ae:64:f3:9a:33:e5:0c:c3:19:73:
         fb:ec:ab:0d:3b:f1:49:ea:0e:be:7a:91:a1:82:d3:44:26:b6:
         31:d6:0a:44:ec:4e:04:94:d2:01:15:88:97:43:ff:dd:11:6f:
         98:6d:37:09:80:dd:58:ec:45:68:6a:a9:01:3b:40:94:de:26:
         0c:eb:15:95:7f:42:51:de:80:a5:38:08:0a:18:a0:b0:04:0b:
         6d:ce:66:0a:60:13:29:e0:d7:ce:36:9f:18:70:a4:71:57:c6:
         d3:5a:ab:26:18:10:db:c7:1e:4f:94:58:7f:d0:ee:36:1c:46:
         da:17:7a:ce:62:2b:8e:e3:23:ec:3a:13:b2:83:4d:ae:de:73:
         10:1c:e5:4b:91:74:8a:36:3c:74:f0:0f:ae:21:60:74:32:3f:
         99:fe:b6:94:f2:00:db:24:01:49:9a:f0:5b:30:d9:70:b8:cd:
         56:67:d2:b3:9b:95:5f:d6:93:df:33:30:54:96:2c:7a:1e:3e:
         62:dc:11:bb:1e:9d:18:99:4e:16:ad:e1:c0:4c:e3:d6:2c:41:
         8d:75:ca:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----