Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab4b0199-6a63-46e2-9ecf-6c0bbea54035.roa
File:                     ab4b0199-6a63-46e2-9ecf-6c0bbea54035.roa (raw, json)
Hash identifier:          g+wBCshyEAYPqvvqo2TDEaJGdB8Dj1SrLuFK81GVOyw=
Subject key identifier:   D6:A8:4C:E5:7D:2F:7C:7F:F7:22:D2:5D:AD:82:13:B9:97:0C:F1:69
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7959DAE2A2EA6ED53F681B00776BA02C2EF60E6A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab4b0199-6a63-46e2-9ecf-6c0bbea54035.roa
Signing time:             Tue 04 Mar 2025 23:41:03 +0000
ROA not before:           Tue 04 Mar 2025 23:41:03 +0000
ROA not after:            Tue 08 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e600::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:59:da:e2:a2:ea:6e:d5:3f:68:1b:00:77:6b:a0:2c:2e:f6:0e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar  4 23:41:03 2025 GMT
            Not After : Apr  8 23:59:59 2025 GMT
        Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:ec:6d:66:dc:f0:a2:01:15:cf:fb:42:6d:
                    50:3f:30:31:d4:17:56:67:9d:2c:73:37:13:1f:6f:
                    e3:85:7d:ca:ed:8e:a6:c2:c3:51:f7:0f:a0:6a:76:
                    aa:29:78:b5:c9:39:4f:e1:43:b1:b0:29:24:97:d2:
                    24:1e:14:2d:4c:89:8a:0f:a3:22:50:cc:23:84:ca:
                    1c:1d:04:95:6d:a2:7e:d0:2a:2b:ca:17:8c:35:79:
                    19:79:9f:07:28:8f:3c:fd:1f:90:79:63:22:92:17:
                    23:3d:dc:6a:5f:e5:d2:25:e8:eb:d7:3c:7e:30:84:
                    2a:02:6d:5a:10:be:de:c0:19:8d:29:8f:01:35:9a:
                    44:47:0d:7d:bb:28:18:86:65:e2:e7:8c:17:70:26:
                    de:92:06:16:d6:c0:d2:15:88:bf:e5:ac:31:cb:5a:
                    d6:63:24:70:d7:e1:2d:8d:e4:00:e9:72:ab:8a:fc:
                    29:ec:6b:51:cd:9c:b8:e0:22:a6:37:3a:4e:02:92:
                    47:ab:09:ad:5b:06:3c:9f:eb:7b:53:00:9f:d4:2c:
                    cd:cc:fe:df:9f:2d:8a:7a:22:d7:41:92:7e:b5:1b:
                    46:35:6d:d1:f8:bb:b0:a8:a1:8c:07:b7:6f:2f:4f:
                    ce:1b:06:b1:9e:fa:30:45:a6:4c:1c:13:26:5d:ea:
                    ba:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A8:4C:E5:7D:2F:7C:7F:F7:22:D2:5D:AD:82:13:B9:97:0C:F1:69
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab4b0199-6a63-46e2-9ecf-6c0bbea54035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e600::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:2d:1c:ab:51:ea:59:1b:48:36:ed:77:6d:27:ad:38:79:f7:
         7a:de:fe:e8:50:db:f7:b1:e0:66:88:cb:ec:9e:22:29:85:1a:
         9a:60:21:38:78:6d:48:88:9f:0d:6d:74:88:7e:f8:67:84:dd:
         b1:52:14:68:90:9f:de:36:ce:d5:19:5f:a8:f7:8d:01:8f:54:
         cb:c9:01:d5:81:ab:f8:fc:59:74:c7:66:dd:46:a2:b7:ce:02:
         60:b0:12:b3:cb:05:91:90:57:98:0f:6c:8a:47:bf:43:3b:ec:
         03:a7:7a:d7:ed:18:46:69:6b:63:11:8c:07:f9:3b:eb:7e:f8:
         0c:9f:9d:13:97:81:00:1b:5b:12:31:59:80:83:ea:64:e9:18:
         0a:d6:ec:30:a8:c1:c6:c9:8e:ef:91:4b:49:5f:1a:f4:63:0e:
         75:8a:f6:4e:0a:f5:20:fb:50:45:05:6e:7e:ba:c7:7b:35:9d:
         46:71:8e:7d:3c:13:97:59:2b:7e:ce:13:de:24:f4:89:4e:59:
         42:98:eb:e0:1f:7f:1e:e6:b6:60:34:23:68:4e:19:61:52:ce:
         9f:84:94:a4:63:e3:47:3a:c6:e5:69:cc:a3:54:de:e6:70:74:
         92:7a:ab:4b:69:23:60:2f:31:42:e2:e3:5d:8b:8c:99:44:53:
         d5:c5:3e:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----