Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa
File:                     b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa (raw, json)
Hash identifier:          rI8d/oN6T6gBa9D4Cf/m7XHo4QAzYXaxLG0/6vVHEY8=
Subject key identifier:   5F:B8:C2:D4:A2:BD:2F:D1:D7:6C:EB:67:9F:80:72:C4:F6:0D:AE:D8
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6B51F24893F006FDE664C6E134C9B93160CB4F09
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa
Signing time:             Fri 21 Mar 2025 00:50:11 +0000
ROA not before:           Fri 21 Mar 2025 00:50:11 +0000
ROA not after:            Fri 25 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0::/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:51:f2:48:93:f0:06:fd:e6:64:c6:e1:34:c9:b9:31:60:cb:4f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 21 00:50:11 2025 GMT
            Not After : Apr 25 23:59:59 2025 GMT
        Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:6f:8f:ee:67:c6:70:ce:42:83:7d:67:9f:
                    03:13:05:f2:1c:6c:ca:1b:9f:8d:2d:5b:83:84:d9:
                    8a:97:13:88:c4:83:e9:db:d3:81:a2:36:e5:87:df:
                    8e:9c:43:59:5c:5f:4b:f8:e4:32:dd:f4:d3:e0:f2:
                    5f:d4:a6:eb:86:3e:11:36:04:11:4f:f1:37:1f:ea:
                    13:ae:30:4f:83:b5:40:9b:6a:e2:e2:06:9f:ce:a1:
                    1f:f9:67:32:6e:78:f3:88:f2:c0:50:55:c3:e0:25:
                    f4:8c:11:f0:b1:49:6f:04:be:06:e2:e4:17:62:f8:
                    c8:41:ee:8b:93:7f:b1:12:ed:94:74:3d:8a:b4:b1:
                    9c:cc:16:62:98:4f:5b:87:5c:e3:50:dd:fd:49:a0:
                    d6:00:d7:ef:ac:f0:af:94:13:38:63:a7:7a:7c:2c:
                    5e:c4:4b:64:48:14:af:04:c8:8d:27:5b:62:bb:dc:
                    1d:42:e9:89:a6:09:c4:92:8f:c2:d4:ee:fb:9b:a3:
                    48:6d:ae:ac:a9:e6:4d:1a:5b:92:7f:44:11:c3:30:
                    0a:86:73:2f:b0:dc:cc:64:54:bf:8a:3e:b9:49:df:
                    31:5a:c0:52:33:8b:5a:ee:b3:9f:d5:f5:63:26:41:
                    31:b0:ca:38:b8:d6:3e:32:6c:e7:a9:a7:1e:a2:95:
                    e0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B8:C2:D4:A2:BD:2F:D1:D7:6C:EB:67:9F:80:72:C4:F6:0D:AE:D8
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0::/28

    Signature Algorithm: sha256WithRSAEncryption
         0f:12:c7:c9:5e:1a:54:1c:90:ed:0f:77:d5:65:44:e3:30:55:
         ed:f5:6b:20:99:69:ad:b9:a8:5c:30:29:ae:ec:b2:0f:81:eb:
         2c:4c:01:3c:7f:69:cc:ad:d0:8f:09:41:65:3d:d7:f0:07:94:
         17:c8:31:bc:e0:3d:86:1a:be:0a:b9:b5:4f:55:a2:f9:ac:5a:
         b9:fa:25:1a:77:d1:25:74:69:e0:3c:63:01:c3:03:5c:80:a1:
         f5:16:f5:e3:bc:85:20:96:e0:c1:19:d8:d3:37:0d:03:a1:41:
         18:1e:eb:db:37:b4:30:46:97:91:45:27:d3:bc:bd:ec:a0:07:
         4c:53:5a:a8:88:af:ac:94:41:c3:cb:f5:98:5b:aa:51:1e:78:
         9f:bf:a1:89:50:25:08:31:92:ff:dc:56:ab:7f:01:d5:97:06:
         79:cb:30:86:b9:59:05:6f:f5:7b:5f:f8:98:17:1e:3e:66:09:
         a4:19:e0:e4:8f:1e:55:d7:f1:fe:60:21:1e:39:da:d6:80:32:
         e2:21:a6:60:e7:3e:71:1b:0a:f3:d5:f1:18:bd:1e:c3:91:5f:
         db:78:5c:e8:ef:0a:07:96:a7:71:41:22:03:0b:7f:1f:00:b1:
         9a:2d:77:ec:ab:ea:30:1f:14:0e:46:b5:ca:ec:95:63:f1:e2:
         c4:f3:4c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----