Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab860450-a818-47f3-a42f-5570594471c3.roa
File:                     ab860450-a818-47f3-a42f-5570594471c3.roa (raw, json)
Hash identifier:          cytJuq4+VjbPra+sZQasMmD8hTsnhW77T6TieL6uLnk=
Subject key identifier:   F3:23:59:51:81:EF:85:F0:1F:D0:AC:9D:2C:98:BB:57:BC:AD:E6:5D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6A02C08DE3FCE2D1AB6EA05D2F13300B429645A9
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab860450-a818-47f3-a42f-5570594471c3.roa
Signing time:             Tue 04 Mar 2025 23:40:03 +0000
ROA not before:           Tue 04 Mar 2025 23:40:03 +0000
ROA not after:            Tue 08 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e900::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:02:c0:8d:e3:fc:e2:d1:ab:6e:a0:5d:2f:13:30:0b:42:96:45:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar  4 23:40:03 2025 GMT
            Not After : Apr  8 23:59:59 2025 GMT
        Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:84:88:5b:56:01:9b:34:86:a4:3f:4a:e4:97:
                    11:da:7d:9b:6f:cc:28:39:f2:e7:9e:0a:ad:a9:9e:
                    9a:9a:fe:74:99:11:4f:f0:5e:6d:27:00:04:0f:40:
                    af:d2:53:66:3f:92:a6:95:93:ca:a5:9c:ca:3f:5c:
                    75:97:af:6a:1e:8f:51:9b:10:15:3d:07:cf:98:75:
                    df:f4:e9:8a:10:3f:98:0c:8c:1c:72:10:a5:43:c6:
                    3f:09:d5:0a:3a:4c:9d:55:58:b3:ef:bc:48:13:a1:
                    35:04:99:45:b7:6e:50:e3:1c:4a:08:d5:8b:08:da:
                    3e:93:e5:1f:fc:7e:96:4f:e6:0d:06:95:f7:af:b7:
                    a4:37:57:8e:ea:4f:5c:33:7e:49:16:12:ff:22:6a:
                    89:89:bb:b0:f9:a1:a9:15:08:18:07:ad:54:c0:e6:
                    2c:24:48:f9:b2:81:bd:b0:4d:49:39:c1:3d:47:f9:
                    58:7e:4b:b4:1a:8e:e5:c2:c8:d8:ba:cb:fe:7b:98:
                    51:84:64:c0:39:dc:9c:59:51:91:ef:f8:53:5a:dd:
                    13:2e:53:9e:36:04:e1:6a:e9:3a:57:52:b3:b7:ed:
                    de:d3:48:87:93:33:bb:78:78:9d:de:b3:f3:09:be:
                    4e:67:a8:79:09:ec:91:70:8d:68:59:48:12:b2:20:
                    69:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:23:59:51:81:EF:85:F0:1F:D0:AC:9D:2C:98:BB:57:BC:AD:E6:5D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab860450-a818-47f3-a42f-5570594471c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e900::/42

    Signature Algorithm: sha256WithRSAEncryption
         3b:d1:b6:6b:a0:9a:20:dc:ac:3f:2d:ec:8d:3f:ce:cd:57:21:
         a1:d9:19:a8:08:c6:58:24:6a:01:26:82:b8:54:ef:8e:2b:b9:
         4c:7e:1d:0b:53:05:70:94:ef:a5:e0:91:00:40:70:e6:f8:51:
         9b:ec:74:39:e3:33:7f:c3:29:33:36:31:61:ed:d6:77:b5:8d:
         0c:76:0f:f5:de:b6:6e:d9:79:17:86:15:5d:4f:f0:16:f8:89:
         d5:7c:f7:44:a2:50:f8:cb:7f:69:29:cb:77:e0:18:2a:7c:73:
         4a:87:8a:4b:26:c0:a8:03:c5:49:42:eb:ca:aa:63:2b:04:76:
         98:2b:62:10:90:d6:cc:98:c8:78:9f:1c:e1:2e:21:0d:83:de:
         46:fa:d8:4f:a9:af:c2:78:46:04:83:7e:ce:43:8f:b0:f9:4b:
         e5:56:a7:6a:6b:2a:7b:e6:82:de:dd:6a:24:ef:ab:30:20:5c:
         53:b3:ba:4e:91:59:eb:12:1c:36:75:6b:cb:c2:67:fa:05:51:
         db:b2:fa:01:8b:1b:71:3a:f9:79:73:3d:45:7e:64:00:1e:48:
         5c:96:40:c6:c4:d9:ac:3b:bf:e2:de:e8:ff:2a:47:ac:cf:56:
         b9:f7:b7:82:98:f1:56:ab:3a:57:56:49:4b:08:a6:34:0e:09:
         c8:56:0e:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----