Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5443f26e-949a-460a-b187-e26290bfcf24.roa
File:                     5443f26e-949a-460a-b187-e26290bfcf24.roa (raw, json)
Hash identifier:          mmseQXPyCnIOg8iojHv62ZxM4zT2cM/38XxpKXv9y3Y=
Subject key identifier:   6F:A0:41:E6:45:8D:FF:20:5C:A9:C4:85:BC:53:CF:5F:C1:C6:50:DB
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       21F800A8453ECFE9CEE4EF6738A96BF19D330849
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5443f26e-949a-460a-b187-e26290bfcf24.roa
Signing time:             Mon 10 Mar 2025 15:30:17 +0000
ROA not before:           Mon 10 Mar 2025 15:30:17 +0000
ROA not after:            Mon 14 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:4000::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f8:00:a8:45:3e:cf:e9:ce:e4:ef:67:38:a9:6b:f1:9d:33:08:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 10 15:30:17 2025 GMT
            Not After : Apr 14 23:59:59 2025 GMT
        Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:95:af:c3:d4:32:4a:66:d4:b0:72:cb:1e:
                    3c:4a:50:94:ba:31:17:28:a9:5f:a7:1b:32:4f:29:
                    89:3e:f6:93:81:f0:73:61:a5:c1:cc:59:58:eb:34:
                    12:23:9c:4d:e9:11:19:8d:a1:7a:8a:d1:4e:28:f9:
                    87:86:7d:52:b1:16:50:3d:82:20:29:f1:2d:58:95:
                    eb:a8:21:06:92:a2:a8:8a:af:12:c4:20:0c:43:32:
                    08:4f:2a:f7:ef:f3:ea:9a:56:39:b9:33:32:f4:fa:
                    28:6e:02:c4:e5:63:13:0a:89:f1:8d:2f:86:47:c6:
                    42:60:12:fa:43:60:5a:3b:9e:28:cb:7b:99:02:d1:
                    63:1f:15:9f:e5:6c:f5:08:56:b3:e8:a3:7e:74:28:
                    00:1f:b0:68:6b:99:f8:82:a2:f1:b8:44:4f:78:17:
                    38:37:da:f2:12:60:be:e0:30:e4:90:a4:42:cf:e0:
                    a6:13:aa:ed:47:c4:e3:b7:d7:9e:62:67:84:02:09:
                    30:48:be:0e:d2:3e:70:44:81:87:92:7a:4a:9f:03:
                    1c:77:1e:da:d0:4a:e6:1d:6d:f3:5a:21:93:ec:03:
                    ae:e2:02:9e:54:4d:b6:7f:c5:2d:6a:01:d5:74:6a:
                    e1:e6:21:89:f7:49:9a:0c:44:d2:61:97:6e:da:d4:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A0:41:E6:45:8D:FF:20:5C:A9:C4:85:BC:53:CF:5F:C1:C6:50:DB
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5443f26e-949a-460a-b187-e26290bfcf24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:4000::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:f6:77:4e:c0:6d:ce:60:72:8f:a0:c7:27:0c:e4:16:6c:73:
         4c:e6:a6:f8:c1:98:a8:ca:7d:f6:78:e7:4d:b0:9b:c7:e6:0b:
         3f:0e:34:5b:a4:73:50:8b:ea:91:61:7d:21:61:a4:a4:40:ec:
         14:25:5e:ee:2c:a5:32:ee:dd:1d:1f:a5:47:39:c5:a5:4b:65:
         05:49:a8:84:47:3e:b7:7a:ee:79:c9:0a:34:99:48:18:1b:9d:
         66:1c:9e:f5:a2:a8:14:f4:3c:aa:c4:ee:4a:4b:4e:ba:79:56:
         a3:f7:a0:ec:ff:ff:90:4a:09:df:c0:f1:51:ac:1b:a4:e0:47:
         97:3e:5a:48:c8:92:f4:12:63:13:17:92:99:a8:b9:6e:d7:10:
         0b:8d:cd:c6:e9:54:90:88:b1:e9:69:91:f0:55:fa:fe:03:e7:
         39:73:9e:46:f7:7c:ca:64:85:40:a4:dd:30:72:f3:f1:31:68:
         19:02:28:29:56:8d:44:55:2c:e3:1d:21:8d:06:d0:05:b8:24:
         7c:5c:46:04:fb:46:ab:b3:3b:21:f6:54:58:cc:f1:2d:fe:be:
         1e:ee:6b:da:b3:e5:3d:c5:fd:80:b3:42:61:a6:91:24:8d:96:
         69:9e:65:cd:fb:ef:8c:00:f7:e7:18:a6:c0:f1:ef:a5:f2:04:
         a7:a3:3f:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----