Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a243183f-74f0-4016-b61d-47b029a3c4e1.roa
File:                     a243183f-74f0-4016-b61d-47b029a3c4e1.roa (raw, json)
Hash identifier:          etQtPqzhtP7M4PgnbvttPtmz5lc+kNGJ3S2gJ86LhSA=
Subject key identifier:   65:C2:E0:68:FD:BA:18:CF:D6:D0:F7:AB:E6:6B:0D:76:8B:0E:87:4C
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7DD9702EFF8F3FED2BB6ECAF27B3F2D87747ED3D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a243183f-74f0-4016-b61d-47b029a3c4e1.roa
Signing time:             Tue 04 Mar 2025 23:40:39 +0000
ROA not before:           Tue 04 Mar 2025 23:40:39 +0000
ROA not after:            Tue 08 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e100::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d9:70:2e:ff:8f:3f:ed:2b:b6:ec:af:27:b3:f2:d8:77:47:ed:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar  4 23:40:39 2025 GMT
            Not After : Apr  8 23:59:59 2025 GMT
        Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:87:e3:62:00:ad:b1:02:0e:72:ca:bd:c3:
                    45:00:99:a8:4c:e2:5a:7b:b8:b2:44:f6:5a:e3:5a:
                    ce:95:a9:88:ff:f6:af:a6:f5:e0:16:63:e9:e3:9e:
                    77:03:4f:e7:7a:17:c9:bb:25:24:07:a3:94:df:e4:
                    02:e6:d0:06:59:61:fd:eb:db:27:ee:9f:d9:b4:bf:
                    5b:9b:e6:26:de:c8:e6:8a:af:58:f2:1a:49:7f:be:
                    ab:fc:66:cd:f3:de:29:c3:76:7a:a3:54:aa:24:6d:
                    0a:08:81:57:57:5d:1c:38:7d:2f:b8:72:95:74:00:
                    dc:bd:0a:f4:13:b4:b6:05:07:5f:8d:9c:54:63:fe:
                    29:67:b2:3b:90:7b:ea:3c:43:65:be:24:ad:af:38:
                    f0:c5:7b:73:36:27:92:4c:a6:53:75:e4:0c:06:66:
                    05:ca:df:cf:50:9b:8f:4c:fe:55:3f:ee:6f:45:72:
                    d8:71:c0:c9:a1:e6:be:40:90:d1:79:97:b6:5b:35:
                    d9:b5:87:79:8d:32:9d:d2:30:f6:cf:9e:22:b8:0a:
                    90:4c:34:c7:1c:52:ea:b7:15:4c:a1:a0:e9:ef:22:
                    e1:f5:a4:c7:7c:b9:65:fd:8a:25:ab:cf:8e:b7:0d:
                    4a:d9:7f:47:20:ea:d2:af:a8:45:13:a7:22:1c:f4:
                    f7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C2:E0:68:FD:BA:18:CF:D6:D0:F7:AB:E6:6B:0D:76:8B:0E:87:4C
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a243183f-74f0-4016-b61d-47b029a3c4e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e100::/42

    Signature Algorithm: sha256WithRSAEncryption
         96:f5:66:2f:76:d3:25:8e:dd:41:12:05:b3:8d:7b:29:6d:09:
         ba:7b:14:99:89:6e:e6:28:2b:00:bb:79:70:06:8c:09:ec:f4:
         23:22:ce:b6:05:a1:a1:1e:4a:60:8b:7d:96:56:b3:c7:d5:7d:
         06:40:31:b0:52:06:7a:c7:66:c8:8a:e6:b7:2f:89:04:83:6f:
         56:2a:20:86:21:89:ed:1c:31:a0:72:4a:5a:0a:a1:16:3e:e9:
         0c:25:4d:89:16:e5:76:cd:5a:90:88:44:48:d3:8d:98:08:b3:
         17:7e:1d:30:32:da:2e:94:6b:32:09:de:f2:07:14:56:8b:58:
         7e:d2:e4:04:e7:65:ec:b2:be:d8:22:b3:d0:96:3d:a1:69:01:
         f0:80:7a:a9:28:18:f2:f9:09:99:f5:4d:dc:67:1f:f9:49:7c:
         51:25:be:4c:12:46:b0:9c:ce:0a:58:29:de:54:6b:2a:7d:f7:
         52:b7:72:b8:85:b7:dd:16:96:e9:fd:30:c1:bd:40:00:1b:1e:
         f6:08:e9:42:af:08:a4:2b:48:0e:43:d6:18:78:88:b9:49:f6:
         9f:b6:f6:ee:61:54:71:4f:54:36:77:3d:6e:f6:a6:fc:00:28:
         25:37:f1:45:ce:01:01:0f:27:3e:73:fc:db:9c:00:d4:3c:ac:
         18:76:f7:e6
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUfdlwLv+PP+0rtuyvJ7Py2HdH7T0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMzA0MjM0MDM5WhcNMjUwNDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNWI3NjZhODFhNDUxOTg1NjZkYmZlNWRhNTEyMjQ4Nzc1
ZTdiMmU5MGUyOGZiMTVlODU2ZGQ2MDFmNTA5NjVkMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9XIfjYgCtsQIOcsq9w0UAmahM4lp7uLJE9lrjWs6VqYj/
9q+m9eAWY+njnncDT+d6F8m7JSQHo5Tf5ALm0AZZYf3r2yfun9m0v1ub5ibeyOaK
r1jyGkl/vqv8Zs3z3inDdnqjVKokbQoIgVdXXRw4fS+4cpV0ANy9CvQTtLYFB1+N
nFRj/ilnsjuQe+o8Q2W+JK2vOPDFe3M2J5JMplN15AwGZgXK389Qm49M/lU/7m9F
cthxwMmh5r5AkNF5l7ZbNdm1h3mNMp3SMPbPniK4CpBMNMccUuq3FUyhoOnvIuH1
pMd8uWX9iiWrz463DUrZf0cg6tKvqEUTpyIc9Pf/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUZcLgaP26GM/W0Per5msNdosOh0wwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2EyNDMxODNmLTc0ZjAtNDAxNi1iNjFkLTQ3YjAyOWEzYzRlMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAPD74QAwDQYJKoZIhvcNAQELBQADggEBAJb1Zi920yWO3UESBbONeylt
Cbp7FJmJbuYoKwC7eXAGjAns9CMizrYFoaEeSmCLfZZWs8fVfQZAMbBSBnrHZsiK
5rcviQSDb1YqIIYhie0cMaBySloKoRY+6QwlTYkW5XbNWpCIREjTjZgIsxd+HTAy
2i6UazIJ3vIHFFaLWH7S5ATnZeyyvtgis9CWPaFpAfCAeqkoGPL5CZn1TdxnH/lJ
fFElvkwSRrCczgpYKd5Uayp991K3criFt90Wlun9MMG9QAAbHvYI6UKvCKQrSA5D
1hh4iLlJ9p+29u5hVHFPVDZ3PW72pvwAKCU38UXOAQEPJz5z/NucANQ8rBh29+Y=
-----END CERTIFICATE-----