Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/16b22ea8-4a7c-431a-bd74-8a2cceaaaf4a.roa
File:                     16b22ea8-4a7c-431a-bd74-8a2cceaaaf4a.roa (raw, json)
Hash identifier:          dikdC4jXiiG/8Ax6daPi8ETMCHoNxMslJn8iPpkYC3I=
Subject key identifier:   FD:EF:E1:AE:1A:0A:2A:90:31:73:B2:BA:C0:17:1E:3A:1C:1C:78:9B
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       759A3AA2E8409902CF721FC09403B09A61A877EA
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/16b22ea8-4a7c-431a-bd74-8a2cceaaaf4a.roa
Signing time:             Mon 10 Mar 2025 15:30:23 +0000
ROA not before:           Mon 10 Mar 2025 15:30:23 +0000
ROA not after:            Mon 14 Apr 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:f0f3:f000::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9a:3a:a2:e8:40:99:02:cf:72:1f:c0:94:03:b0:9a:61:a8:77:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 10 15:30:23 2025 GMT
            Not After : Apr 14 23:59:59 2025 GMT
        Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:f7:4d:1d:68:57:67:fa:2f:fc:0a:cf:90:
                    5f:8c:11:0b:51:e7:8e:de:92:8a:e6:cc:23:36:bd:
                    8d:63:78:52:0d:59:b7:cc:07:d5:a1:2e:32:b2:f0:
                    0b:0b:84:80:73:bc:65:14:7d:32:64:c2:b8:b8:76:
                    84:7e:a2:92:df:c8:97:6e:7e:c2:20:c7:94:a6:5e:
                    ef:24:d0:62:df:a1:6c:f2:e6:2e:18:a2:4d:56:a6:
                    84:eb:6a:d9:93:ac:41:55:ce:7d:5d:aa:5d:26:0d:
                    f7:c6:11:62:3c:b7:50:79:b4:aa:e2:c2:cf:22:d4:
                    26:11:c4:1c:ea:a4:ab:5d:c7:09:2b:39:dc:71:a0:
                    0c:11:a9:3c:27:cb:d8:21:75:d7:0e:e1:96:18:57:
                    b6:a5:29:5b:76:b8:ea:01:95:f3:3d:a0:79:9e:c1:
                    dc:a0:05:86:da:09:0f:6f:9b:75:d1:b6:fc:01:06:
                    50:5d:cd:3a:77:54:52:18:44:05:bd:88:0f:41:a4:
                    c1:75:8f:9f:95:b0:ff:2a:9b:b8:a7:80:89:1c:33:
                    31:be:2d:c1:38:53:a4:a0:70:0a:57:77:1c:c9:22:
                    06:d4:d7:53:42:5a:21:9d:76:08:a5:cf:b2:ad:71:
                    e9:ad:9a:9f:cd:a0:7a:0b:b8:0d:fd:34:e7:78:82:
                    dd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:E1:AE:1A:0A:2A:90:31:73:B2:BA:C0:17:1E:3A:1C:1C:78:9B
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/16b22ea8-4a7c-431a-bd74-8a2cceaaaf4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f3:f000::/44

    Signature Algorithm: sha256WithRSAEncryption
         1a:c2:63:02:4c:bc:4a:17:49:0f:ef:49:7e:4b:6a:3f:bd:ee:
         81:6b:28:7f:e5:f4:ca:75:e6:5a:f9:f9:6a:c9:07:5c:e7:55:
         69:e3:db:be:d6:03:12:af:7c:3d:e7:b9:09:ac:40:75:68:5d:
         bb:5a:be:76:48:e8:69:39:49:3c:c3:81:4e:7c:35:70:52:66:
         31:34:04:b7:5e:c7:4f:47:8e:8f:5d:08:00:f2:93:b3:61:21:
         07:e5:99:ee:92:8a:1f:ff:29:83:9d:cb:82:62:fa:2e:7b:cf:
         64:46:c4:ba:16:f8:70:c9:08:4e:f4:e2:e3:ba:f9:87:20:6e:
         a1:f5:e7:fa:70:96:d6:c3:4f:e5:cd:d4:36:22:b5:7a:24:79:
         e1:8c:6e:4b:16:82:41:d8:db:1a:d1:0d:9c:c8:77:6f:c8:f6:
         90:47:a3:86:77:ab:29:0e:d2:2e:bc:ac:f2:39:ab:21:20:84:
         27:b1:ed:ff:a1:c0:ec:3f:fc:32:8f:ea:97:66:74:bf:cd:82:
         de:d5:cc:78:5a:0a:e0:d7:4e:f8:c4:f9:8a:3c:c0:49:ff:db:
         08:e6:96:d0:b8:d0:22:81:10:d1:47:ad:2c:0d:e9:63:55:71:
         1f:5e:91:7c:45:2a:95:b3:a4:ef:b1:0d:2a:0e:b2:f3:e9:e3:
         b5:21:21:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----