Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa
File:                     7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa (raw, json)
Hash identifier:          7sKgHtlyeWhRfe3J9gI2/pd1dAnNAADh58oZJbjD6EM=
Subject key identifier:   45:FF:EC:01:18:93:E3:FA:5C:36:CA:90:D7:C4:A6:A9:8E:51:D9:AC
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2C3C537B23B3817092B34E8B3A320951B6CD49A0
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa
Signing time:             Tue 04 Mar 2025 23:31:03 +0000
ROA not before:           Tue 04 Mar 2025 23:31:03 +0000
ROA not after:            Tue 08 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3c:53:7b:23:b3:81:70:92:b3:4e:8b:3a:32:09:51:b6:cd:49:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar  4 23:31:03 2025 GMT
            Not After : Apr  8 23:59:59 2025 GMT
        Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:da:61:e7:29:a3:f2:b1:18:42:39:53:0b:
                    e1:b1:40:b4:24:08:90:06:c8:ed:ab:bb:fe:58:15:
                    11:13:7e:eb:ff:81:66:a8:4c:0b:35:4e:2a:da:d7:
                    32:b3:56:2f:9e:75:30:3b:bc:c5:dd:46:cd:aa:eb:
                    71:f1:b1:16:e2:83:37:06:53:8a:4f:2a:22:5a:fc:
                    7d:b4:fa:bd:b0:32:b5:89:5a:66:47:5b:b4:4f:9b:
                    81:f9:5e:67:d7:70:11:1f:eb:82:71:3e:b0:7f:3a:
                    b8:4e:0a:b2:c0:39:1f:d5:6a:53:77:6d:71:5b:78:
                    9c:a2:87:9c:25:0f:c7:7e:3e:0b:31:fe:e5:83:f5:
                    ae:60:f1:da:4e:01:0d:ec:76:07:d0:43:11:6b:f3:
                    e6:e6:9e:0e:b7:d2:2c:6e:fe:65:2b:2e:2b:1b:71:
                    fa:d0:4f:7d:80:c8:2a:a2:95:eb:03:22:b9:4d:72:
                    59:b6:a1:21:b7:cd:30:51:5b:54:c2:ea:a4:98:44:
                    c1:3c:53:6c:a2:3c:9b:f0:9b:8c:e7:97:73:07:a2:
                    2e:64:7a:cd:7b:b6:24:08:92:69:a0:96:d9:69:80:
                    bc:36:fd:b9:60:80:55:03:4c:dc:fb:46:79:71:28:
                    b5:96:f5:e8:8f:9f:54:f3:0d:3a:b8:8b:09:ad:8d:
                    10:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FF:EC:01:18:93:E3:FA:5C:36:CA:90:D7:C4:A6:A9:8E:51:D9:AC
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e800::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:c8:83:9e:b1:a0:4a:17:51:35:90:ae:54:f3:65:f3:f2:cd:
         0c:34:63:6a:65:22:10:69:65:a7:a0:64:81:99:de:97:8a:fd:
         7e:66:9f:a8:00:c7:b0:e2:4a:db:8a:d0:ee:00:36:91:64:ae:
         7e:5d:84:06:6d:b1:c6:d6:08:2e:92:fb:7e:37:e6:c5:5a:ea:
         ac:f8:9c:0f:5a:12:6a:d0:82:cf:d0:63:8d:73:29:c0:cd:5d:
         bc:37:f4:74:82:d0:ce:b5:d2:73:fe:d3:cf:f3:ca:8f:02:97:
         2e:f9:c3:c1:5e:17:9c:99:fa:00:12:59:3e:99:0d:fd:41:ca:
         c8:35:d2:62:ba:40:c8:d7:93:f4:46:a1:e7:d1:48:6e:62:ff:
         ba:ec:b4:0c:09:80:4e:ac:0b:93:d2:5f:2a:fb:12:dd:4b:00:
         63:18:78:ee:89:e7:4d:2b:f6:96:ec:ca:89:10:c1:eb:ef:de:
         c1:bc:2b:b6:eb:1d:8b:42:20:93:2e:c5:ad:ae:ef:37:05:ce:
         e4:f3:df:e2:52:ce:b4:e9:2f:46:5d:a5:d9:4c:e9:2c:f0:02:
         3b:5b:8d:ba:b0:b4:e8:e6:f5:8b:dc:6d:e0:65:35:bb:aa:8c:
         fd:87:fb:7c:e5:cc:f6:98:63:f6:d6:51:16:69:80:99:88:8d:
         ea:ed:3c:8b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----