Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/77071dba-3d71-409d-bec3-e6ee4d8fc9dc.roa
File:                     77071dba-3d71-409d-bec3-e6ee4d8fc9dc.roa (raw, json)
Hash identifier:          JWtoBNat1PgUAAxXY+IwizG8F96PlhqqOcwMU7Di4Q0=
Subject key identifier:   6C:2C:D4:3C:B3:F5:68:29:B2:20:6E:29:1A:3A:B1:1F:22:F7:D5:AF
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       557159B11E16B2DC36211FA1229E19A9D6998450
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/77071dba-3d71-409d-bec3-e6ee4d8fc9dc.roa
Signing time:             Tue 04 Mar 2025 23:30:59 +0000
ROA not before:           Tue 04 Mar 2025 23:30:59 +0000
ROA not after:            Tue 08 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e800::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:71:59:b1:1e:16:b2:dc:36:21:1f:a1:22:9e:19:a9:d6:99:84:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar  4 23:30:59 2025 GMT
            Not After : Apr  8 23:59:59 2025 GMT
        Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:d0:5a:57:ee:6c:3e:a6:f9:d9:6d:35:92:
                    2e:a4:46:0a:4f:8a:d4:f8:12:59:eb:96:79:9f:10:
                    bd:f5:5f:1c:28:3f:cf:40:ab:0b:e6:ec:75:76:82:
                    18:63:55:ed:4d:77:3c:83:2f:8f:b2:a5:81:6e:20:
                    34:62:6f:02:5b:69:7a:3f:f6:9d:fc:29:8b:5e:ad:
                    87:e2:54:6c:32:8a:1f:70:44:0e:5b:1a:b9:36:fb:
                    8e:0d:8d:61:ca:95:d2:72:1a:84:57:8d:a4:1d:fa:
                    ed:2a:a0:b8:48:26:1d:e8:a2:e0:33:4d:8d:cf:8f:
                    99:aa:52:fa:d6:43:50:fc:b8:d0:06:9c:4d:35:4f:
                    97:a2:3e:08:68:51:c6:c1:53:cf:89:94:60:20:26:
                    e3:9f:d4:10:03:00:36:c7:9a:87:ee:49:b8:4a:a3:
                    25:b4:61:29:31:0a:9d:7f:cb:1d:2b:12:10:a0:50:
                    92:00:ab:7d:14:57:27:46:c2:06:79:92:6d:76:79:
                    07:e5:6f:06:91:e4:9d:45:0c:99:ba:93:7f:e2:ce:
                    d6:97:66:03:6b:49:11:e1:35:67:f7:b0:fe:7d:52:
                    7f:dd:bf:e5:59:3b:57:2f:38:bf:52:1f:de:b0:82:
                    b8:ae:bf:ca:9f:8a:fe:84:ca:3c:7f:4d:e7:20:d7:
                    2e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2C:D4:3C:B3:F5:68:29:B2:20:6E:29:1A:3A:B1:1F:22:F7:D5:AF
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/77071dba-3d71-409d-bec3-e6ee4d8fc9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e800::/42

    Signature Algorithm: sha256WithRSAEncryption
         06:92:03:d4:c2:c3:06:c2:00:aa:30:63:55:bc:a6:85:98:1d:
         a3:b1:7d:c6:9f:c3:73:df:b2:4f:6f:03:d2:5a:9e:30:cd:82:
         df:ed:98:52:09:50:96:bc:75:61:c4:43:0f:22:6e:cb:68:22:
         2b:ce:7e:77:d4:93:b0:1f:5d:a1:cf:a3:fd:66:80:62:36:a9:
         3c:34:cb:42:f2:52:46:af:26:92:79:64:e1:7f:18:eb:36:7d:
         65:ec:18:d6:fb:05:d6:0f:60:73:15:ab:ca:55:bb:0a:7a:ff:
         10:cf:15:66:fa:d4:71:d5:28:e1:6b:52:60:6e:91:73:5b:42:
         cc:c2:44:95:b6:10:74:4f:22:9c:01:cb:44:b2:3f:12:23:d4:
         ce:25:9e:96:c6:92:10:27:09:26:14:e2:b3:aa:1c:b9:66:99:
         3d:a4:84:7f:3c:91:ad:5e:e0:7a:dd:28:1e:27:a1:dc:8f:ff:
         23:8f:d9:ab:dc:28:7e:e7:4f:aa:12:44:7b:cc:bf:74:60:59:
         04:1c:6e:ca:8e:6a:60:19:28:71:d1:32:1c:de:9a:c2:a0:ea:
         4b:ad:87:cd:64:96:af:c3:b8:f5:93:3e:06:f1:ff:85:c8:7b:
         7d:6f:45:e6:17:41:aa:8e:dd:cc:96:7c:ab:bb:44:19:7a:34:
         ca:a2:f2:fe
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVXFZsR4Wstw2IR+hIp4ZqdaZhFAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMzA0MjMzMDU5WhcNMjUwNDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmYTJlODU2NTRiYWVmMmQ5ZWMxMDZhY2YxYjJjY2Q1NjQy
MGVlY2E2ZjJjZDcyYjcyNjkzMTY0MzcyODkzMTlmMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzm9BaV+5sPqb52W01ki6kRgpPitT4ElnrlnmfEL31Xxwo
P89Aqwvm7HV2ghhjVe1NdzyDL4+ypYFuIDRibwJbaXo/9p38KYterYfiVGwyih9w
RA5bGrk2+44NjWHKldJyGoRXjaQd+u0qoLhIJh3oouAzTY3Pj5mqUvrWQ1D8uNAG
nE01T5eiPghoUcbBU8+JlGAgJuOf1BADADbHmofuSbhKoyW0YSkxCp1/yx0rEhCg
UJIAq30UVydGwgZ5km12eQflbwaR5J1FDJm6k3/iztaXZgNrSRHhNWf3sP59Un/d
v+VZO1cvOL9SH96wgriuv8qfiv6Eyjx/Tecg1y65AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUbCzUPLP1aCmyIG4pGjqxHyL31a8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2Lzc3MDcxZGJhLTNkNzEtNDA5ZC1iZWMzLWU2ZWU0ZDhmYzlkYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAPD76AAwDQYJKoZIhvcNAQELBQADggEBAAaSA9TCwwbCAKowY1W8poWY
HaOxfcafw3Pfsk9vA9JanjDNgt/tmFIJUJa8dWHEQw8ibstoIivOfnfUk7AfXaHP
o/1mgGI2qTw0y0LyUkavJpJ5ZOF/GOs2fWXsGNb7BdYPYHMVq8pVuwp6/xDPFWb6
1HHVKOFrUmBukXNbQszCRJW2EHRPIpwBy0SyPxIj1M4lnpbGkhAnCSYU4rOqHLlm
mT2khH88ka1e4HrdKB4nodyP/yOP2avcKH7nT6oSRHvMv3RgWQQcbsqOamAZKHHR
MhzemsKg6kuth81klq/DuPWTPgbx/4XIe31vReYXQaqO3cyWfKu7RBl6NMqi8v4=
-----END CERTIFICATE-----