Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa
File:                     0b456d9a-b78d-45ba-9949-b00a9581f118.roa (raw, json)
Hash identifier:          jCrVcqAXO5KYgjsjrKhgrTYmmPNH4oajmuE0pqXOPoU=
Subject key identifier:   34:9C:F5:E1:C0:F9:16:42:F6:A6:92:B5:50:2F:DC:21:E8:88:CA:F6
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6E505CA8943FFDFF95CA824E979D4F36D78D3245
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa
Signing time:             Tue 04 Mar 2025 23:30:11 +0000
ROA not before:           Tue 04 Mar 2025 23:30:11 +0000
ROA not after:            Tue 08 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:ec00::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:50:5c:a8:94:3f:fd:ff:95:ca:82:4e:97:9d:4f:36:d7:8d:32:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar  4 23:30:11 2025 GMT
            Not After : Apr  8 23:59:59 2025 GMT
        Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:cd:d6:45:3d:54:85:56:52:9b:8b:b8:c0:
                    f4:7c:30:b7:da:48:c3:c1:9b:0e:4e:3f:ab:90:cc:
                    5c:32:e6:9a:04:41:b4:a8:a8:ad:c2:dc:bc:78:f4:
                    50:04:01:18:36:51:1a:5c:93:ea:8e:97:b4:c0:09:
                    d2:4c:ca:aa:31:b9:65:d1:97:3e:9a:c6:92:70:a9:
                    e8:34:a2:0e:0f:5e:41:d8:c6:e1:1a:b6:94:5b:a2:
                    20:0b:bf:ee:23:a5:2c:18:d8:a8:43:25:f7:42:a6:
                    37:71:6c:9a:43:1f:31:35:68:ef:df:24:f7:06:db:
                    a4:08:e4:27:41:66:af:b9:df:7e:d7:ea:48:44:15:
                    91:b7:0d:1a:8c:9a:d3:2c:52:9a:48:11:82:08:4e:
                    93:af:4b:df:ef:8a:8b:ee:6e:a2:28:9d:14:dc:10:
                    96:a6:49:ed:c5:7c:fb:f7:0d:70:90:5a:06:fe:44:
                    73:2d:87:ed:b0:54:fc:39:5a:23:0d:f3:ec:10:a2:
                    47:f1:ae:73:82:91:89:9e:aa:d4:3d:ec:f4:2b:56:
                    1c:5a:02:a2:f0:4d:7c:3d:d6:18:fd:09:e0:13:0d:
                    59:b2:43:80:bc:92:cc:21:58:56:e5:e3:68:cd:98:
                    64:9e:f7:f3:22:64:96:44:20:b4:91:51:5b:98:0f:
                    11:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9C:F5:E1:C0:F9:16:42:F6:A6:92:B5:50:2F:DC:21:E8:88:CA:F6
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:ec00::/42

    Signature Algorithm: sha256WithRSAEncryption
         6a:3d:bd:44:f5:53:c7:18:50:80:0f:b7:1a:2f:3f:98:48:97:
         d6:22:0f:e1:13:7e:8d:8c:f4:01:83:67:b3:ad:31:c3:19:58:
         2a:ab:93:30:90:2a:96:91:b4:67:b6:23:73:6b:97:de:de:cc:
         7c:bb:e9:ff:84:8e:8f:6d:95:49:07:0c:87:ea:94:b9:f3:57:
         49:1d:bb:dc:7d:5b:c2:fa:0a:a6:2d:50:99:03:97:f3:e0:45:
         a4:ec:a6:e5:dc:10:cc:b4:da:08:6d:4c:42:75:84:3c:62:63:
         b5:3c:05:ac:f6:97:bf:24:a6:db:ec:98:08:8c:92:8b:0e:ed:
         e1:80:91:49:33:7e:4d:c5:12:c1:37:14:a0:a6:50:bc:6b:04:
         7c:1c:11:77:a7:28:28:e3:71:cc:76:aa:53:22:22:d9:77:bb:
         e4:14:60:3d:43:44:53:6d:52:19:4e:06:e4:14:31:de:fb:73:
         58:40:90:51:d1:44:84:1d:ba:ed:7c:ec:d1:98:96:c8:e6:86:
         d4:63:27:81:e4:f9:8a:88:d0:ff:78:66:d6:23:73:0b:4b:f2:
         e2:a0:08:61:80:8f:96:43:19:fd:d7:40:54:01:40:c6:7f:e2:
         c0:82:3f:73:5b:56:33:26:b6:97:86:85:4b:c3:03:c1:bc:e2:
         f8:98:d3:66
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUblBcqJQ//f+VyoJOl51PNteNMkUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMzA0MjMzMDExWhcNMjUwNDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BjYmViZDVmODk0NGUyYWQ1YjY3MjYyNjRkNTg4ODEyMjBl
MzE3MGY5OWM0OGViZDg2ODQ1NzhiOGQ5ZGE4NTA0MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDF0c3WRT1UhVZSm4u4wPR8MLfaSMPBmw5OP6uQzFwy5poE
QbSoqK3C3Lx49FAEARg2URpck+qOl7TACdJMyqoxuWXRlz6axpJwqeg0og4PXkHY
xuEatpRboiALv+4jpSwY2KhDJfdCpjdxbJpDHzE1aO/fJPcG26QI5CdBZq+5337X
6khEFZG3DRqMmtMsUppIEYIITpOvS9/viovubqIonRTcEJamSe3FfPv3DXCQWgb+
RHMth+2wVPw5WiMN8+wQokfxrnOCkYmeqtQ97PQrVhxaAqLwTXw91hj9CeATDVmy
Q4C8kswhWFbl42jNmGSe9/MiZJZEILSRUVuYDxH/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUNJz14cD5FkL2ppK1UC/cIeiIyvYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzBiNDU2ZDlhLWI3OGQtNDViYS05OTQ5LWIwMGE5NTgxZjExOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAPD77AAwDQYJKoZIhvcNAQELBQADggEBAGo9vUT1U8cYUIAPtxovP5hI
l9YiD+ETfo2M9AGDZ7OtMcMZWCqrkzCQKpaRtGe2I3Nrl97ezHy76f+Ejo9tlUkH
DIfqlLnzV0kdu9x9W8L6CqYtUJkDl/PgRaTspuXcEMy02ghtTEJ1hDxiY7U8Baz2
l78kptvsmAiMkosO7eGAkUkzfk3FEsE3FKCmULxrBHwcEXenKCjjccx2qlMiItl3
u+QUYD1DRFNtUhlOBuQUMd77c1hAkFHRRIQduu187NGYlsjmhtRjJ4Hk+YqI0P94
ZtYjcwtL8uKgCGGAj5ZDGf3XQFQBQMZ/4sCCP3NbVjMmtpeGhUvDA8G84viY02Y=
-----END CERTIFICATE-----