Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f5d9525-0193-4993-b222-48d2585ae7fa.roa
File:                     4f5d9525-0193-4993-b222-48d2585ae7fa.roa (raw, json)
Hash identifier:          MS/HcD9OFEwoGVyhshRFLIXXpLLy/V3/30JPMlYBM5w=
Subject key identifier:   78:64:C3:7C:BA:3A:8C:45:01:F5:54:52:11:28:F8:3E:3A:F0:51:6C
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5DC8C77557BF4E2A3256E6A7CD158230399B42FF
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f5d9525-0193-4993-b222-48d2585ae7fa.roa
Signing time:             Tue 11 Mar 2025 00:10:17 +0000
ROA not before:           Tue 11 Mar 2025 00:10:17 +0000
ROA not after:            Tue 15 Apr 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:f0fb:f000::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c8:c7:75:57:bf:4e:2a:32:56:e6:a7:cd:15:82:30:39:9b:42:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 11 00:10:17 2025 GMT
            Not After : Apr 15 23:59:59 2025 GMT
        Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f4:ac:51:f3:68:19:2a:b0:f6:d8:a5:54:2a:
                    89:9e:81:e1:b4:c1:76:47:7e:33:3c:9e:1c:a9:2a:
                    69:c8:2e:a7:ac:de:73:1c:ea:e2:98:4b:8d:92:4d:
                    01:d9:16:6f:01:b5:57:57:43:b5:37:ac:58:e0:4e:
                    67:7c:90:08:9f:4a:8c:9e:9e:3d:78:ac:7a:e3:68:
                    d9:12:b1:2e:f7:4e:1a:e5:a9:1a:59:b2:b5:64:df:
                    a1:79:d8:3b:54:6b:d9:50:de:6f:ee:fe:87:3d:5f:
                    1a:62:65:d5:56:3a:28:68:b2:26:b8:f6:59:bd:ce:
                    28:8e:f5:89:98:46:a8:c0:ae:61:2f:6e:4e:81:de:
                    9f:fd:f3:0e:20:52:a2:18:9f:54:7b:73:97:c1:4c:
                    ed:60:4f:6d:a1:30:eb:7e:b3:8e:99:b6:2f:f9:c2:
                    b7:9e:06:25:b9:d6:67:56:84:fb:36:ba:a3:97:91:
                    4b:11:a0:c6:70:a5:dc:9b:b4:07:c0:e7:73:2c:65:
                    ae:7a:5e:f4:48:f3:33:89:dd:b2:ce:84:86:14:8d:
                    48:39:91:a7:2a:18:96:9d:21:9e:1f:80:2b:df:b7:
                    03:04:5b:13:bd:0d:c9:40:c3:b1:2b:8e:2c:cd:25:
                    74:d7:ea:52:53:51:04:48:a0:8b:3a:65:cf:75:49:
                    19:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:64:C3:7C:BA:3A:8C:45:01:F5:54:52:11:28:F8:3E:3A:F0:51:6C
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f5d9525-0193-4993-b222-48d2585ae7fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f000::/44

    Signature Algorithm: sha256WithRSAEncryption
         2c:18:e4:be:d4:48:47:d4:e3:f5:25:c5:56:05:a8:a6:ad:9e:
         6d:eb:7f:ae:85:7a:2e:12:56:b1:6d:28:5a:b9:7c:30:40:e7:
         d7:40:d0:3b:65:74:48:cf:79:a7:8a:6a:ed:90:f3:c2:da:84:
         5c:e6:7f:5b:2e:be:29:72:33:4c:9c:d7:9d:87:ca:b8:64:43:
         91:1a:0e:0b:5c:ad:9a:c5:d3:b8:11:8e:de:40:6c:0e:02:d2:
         82:37:1d:c2:01:07:a9:7c:19:fe:f0:bd:32:87:a3:73:e6:6a:
         51:e3:73:3a:15:1d:c3:99:86:2c:04:58:12:02:23:00:28:f5:
         85:08:fe:fc:9e:db:91:90:87:c4:6b:a0:8b:1a:ab:ac:e5:af:
         2f:b3:3e:0d:65:33:a1:76:9c:65:1f:33:65:8b:e0:e8:e0:7f:
         b9:05:95:ac:c7:06:a7:31:d0:45:ff:0f:11:2b:9f:8a:c5:be:
         16:cd:09:c8:00:a1:20:35:47:2c:2b:71:b6:34:e3:10:d4:0f:
         5a:40:c4:ae:f2:3c:6a:ba:71:77:dc:7b:1e:72:1b:31:ab:88:
         ec:39:9d:67:01:77:01:9f:ed:c9:ba:51:e6:70:3e:6f:5c:50:
         03:bb:c5:22:d4:24:62:69:6e:35:20:99:bd:08:b5:71:46:df:
         4a:12:c9:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----