Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa
File:                     5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa (raw, json)
Hash identifier:          Im7BrFxwElKwEnod7tDPjMzP/wWhent06U4DWn5DNjU=
Subject key identifier:   1B:3E:2D:BD:B9:04:8C:74:E6:32:9B:FA:3B:C9:74:8A:F9:50:42:5F
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0FBA731BAAF8B787F97EE98D88ECC04FA48C88EA
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa
Signing time:             Tue 04 Mar 2025 23:10:07 +0000
ROA not before:           Tue 04 Mar 2025 23:10:07 +0000
ROA not after:            Tue 08 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:551a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ba:73:1b:aa:f8:b7:87:f9:7e:e9:8d:88:ec:c0:4f:a4:8c:88:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar  4 23:10:07 2025 GMT
            Not After : Apr  8 23:59:59 2025 GMT
        Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:b7:de:4e:f0:f1:13:a4:91:16:92:f3:1e:
                    3b:0f:35:bf:75:5c:3d:ce:5a:2b:b2:ed:61:f5:15:
                    5a:11:f9:52:68:f3:49:9a:a7:e3:10:66:40:3b:d3:
                    2c:e0:d8:ab:4c:b1:2e:f9:68:cf:b1:47:3d:15:0d:
                    ae:d8:39:bd:3c:ba:00:f9:89:ad:cf:31:ce:4f:4f:
                    05:48:32:3a:4b:58:94:5f:bc:48:51:13:b2:09:24:
                    9d:8d:69:74:a7:b0:c3:81:56:46:51:3f:4a:fd:94:
                    75:77:9a:ea:ec:96:fd:ad:88:b6:4e:da:ea:3e:b5:
                    43:16:bc:ef:9c:d8:34:ed:0b:02:70:57:e6:26:8c:
                    ae:81:c0:d5:42:99:00:a5:49:17:1d:b6:65:4f:54:
                    71:c5:6c:45:c1:0b:5b:bf:ef:c6:f3:a9:f9:0f:92:
                    75:29:68:28:34:6c:80:6b:c8:88:52:5f:15:9c:ab:
                    5a:93:f0:b1:d9:18:54:1e:4c:db:79:c6:dc:c0:4c:
                    ee:cb:43:bc:12:05:15:5c:d6:8c:23:74:18:41:ee:
                    68:17:f8:ac:93:25:50:db:5e:c2:c6:65:a6:96:b1:
                    6d:d4:ff:2c:e5:f2:e3:c9:5a:d3:6e:06:78:40:18:
                    8b:bb:e4:e1:c2:f2:00:cb:46:50:3e:6a:b2:f8:c4:
                    c9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3E:2D:BD:B9:04:8C:74:E6:32:9B:FA:3B:C9:74:8A:F9:50:42:5F
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:551a::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:88:60:8f:c2:17:7e:b7:fe:31:1d:a7:f3:69:1e:1e:06:c9:
         40:47:61:37:e2:db:68:a0:03:b3:67:d8:6a:12:8d:64:b6:7d:
         46:5a:76:ad:7d:79:00:dd:76:82:5a:0a:56:99:b0:31:c8:dc:
         d7:0e:41:37:49:0b:94:04:19:ca:2b:09:b4:f3:6e:fd:a7:7a:
         f2:0f:61:35:1a:42:c3:69:17:d8:c3:a1:a6:b8:68:36:d8:92:
         01:21:1c:73:a0:39:f1:54:f7:07:71:08:ce:32:e3:94:14:48:
         df:a2:e7:96:39:0d:93:40:56:7f:3b:8a:f7:14:b3:3b:94:92:
         4f:be:39:15:5d:a7:72:9e:8f:f9:bd:04:ab:f4:6a:0d:0c:d5:
         f5:9c:2f:83:33:ba:94:c4:08:cf:d1:83:ba:77:41:29:1e:90:
         bd:61:aa:e7:35:07:c8:65:0d:af:a8:6e:d4:88:6b:ae:8e:b8:
         fd:ae:9b:bb:9a:f2:5b:e3:aa:3d:7c:d8:7f:01:85:b3:b6:f1:
         4a:ce:33:2e:4e:79:d1:26:8a:79:ff:58:2b:03:db:e7:69:e8:
         0d:47:76:72:10:37:70:66:92:80:e2:3e:78:f3:b5:e3:ab:c8:
         04:f1:37:24:31:f4:17:99:70:ef:c7:73:a0:d2:96:a0:2b:ab:
         0d:c7:7d:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----