Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa
File:                     2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa (raw, json)
Hash identifier:          zs2NbZn6nS7CkyigOP+SlSL5BUNhs2jekyZxMTFZiXw=
Subject key identifier:   BC:62:C3:C3:36:63:B6:63:A1:0D:AA:94:3A:20:F4:28:0D:31:E6:F3
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       2C6A5A5EAF1472CBDBA8E776533C09DB7204E7F3
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa
Signing time:             Mon 10 Mar 2025 15:20:54 +0000
ROA not before:           Mon 10 Mar 2025 15:20:54 +0000
ROA not after:            Mon 14 Apr 2025 23:59:59 +0000
asID:                     699
IP address blocks:        2606:7b40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6a:5a:5e:af:14:72:cb:db:a8:e7:76:53:3c:09:db:72:04:e7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Mar 10 15:20:54 2025 GMT
            Not After : Apr 14 23:59:59 2025 GMT
        Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:60:03:72:3f:f6:37:fc:e2:56:bf:fb:d2:
                    4c:05:66:b8:99:6b:77:51:da:16:e4:51:80:d4:ba:
                    b5:cf:dd:00:7f:fc:79:40:c3:35:21:b2:0b:22:0a:
                    3a:41:4d:ef:d7:a8:f3:c0:c0:14:d1:53:f0:af:96:
                    2f:c5:b8:7a:a6:a7:aa:3d:64:00:cf:55:d9:26:4a:
                    f5:8c:da:07:07:03:f4:49:26:fb:fb:55:ed:7a:e3:
                    4c:0d:8b:a5:c6:dd:9d:84:9c:df:c6:8f:8f:3a:8f:
                    08:bd:f0:81:4b:e1:43:01:b6:b5:3d:de:7c:6c:ac:
                    4a:fd:23:c4:9f:0f:15:01:45:77:38:2a:21:ed:db:
                    85:5b:b1:ea:38:16:61:37:71:e7:de:28:38:14:10:
                    89:1a:48:e5:0e:46:d3:dd:01:52:1c:3e:4a:52:19:
                    21:1d:46:cb:ae:d1:e6:fe:0e:80:bd:3b:f6:cf:f0:
                    ac:81:e8:ec:30:e9:17:4d:6f:5c:4c:90:99:cb:4e:
                    33:45:99:89:87:3c:62:3a:82:a4:47:d8:01:61:2a:
                    cf:1c:18:72:80:bb:11:1a:c4:31:a7:39:64:50:3b:
                    a2:b7:25:3a:04:85:c4:b8:02:f0:fb:68:ef:a0:22:
                    2a:f4:5e:22:a7:5b:8a:30:f8:2c:3c:e1:8a:d2:c6:
                    3a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:62:C3:C3:36:63:B6:63:A1:0D:AA:94:3A:20:F4:28:0D:31:E6:F3
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:d4:9a:48:d5:2c:05:08:4a:b0:29:d4:6a:89:8e:e4:16:3b:
         72:f2:31:09:9c:77:d5:21:92:e8:e0:34:f8:f0:b7:f7:31:f1:
         5f:95:c5:0c:3a:b9:99:ea:07:e9:cd:c5:f3:e8:5c:bb:f6:ea:
         50:83:ed:a9:89:4d:97:61:1d:b5:1d:bc:49:3f:39:1e:5c:70:
         a6:6f:27:1a:0e:6d:a3:79:40:8e:93:3e:e5:d8:a8:f8:ec:d5:
         35:af:43:65:e5:23:9e:13:79:71:a8:f8:52:f2:2a:86:b3:35:
         71:95:91:7b:21:70:d5:ec:93:66:8e:1a:7a:b8:1f:c0:97:47:
         68:4b:a0:59:0e:c6:89:e1:e9:47:b9:e1:7a:28:df:66:65:b8:
         07:f1:34:c7:72:43:cc:64:04:66:09:e3:80:f4:ae:a7:c9:91:
         2f:87:bd:86:3c:43:cd:a0:62:bb:63:2f:07:aa:55:bf:e5:2a:
         73:e2:10:58:fb:bb:bb:16:72:46:e5:8b:55:92:37:89:c4:28:
         1d:59:e3:2f:8a:9a:9d:b3:bf:48:73:61:24:00:db:93:f9:f9:
         d8:63:2b:71:23:20:61:74:d4:9f:be:46:88:27:3c:63:3c:24:
         d0:0a:56:57:ab:64:86:5a:8f:75:c8:f6:39:f1:e6:b7:13:14:
         27:0a:f6:67
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIULGpaXq8UcsvbqOd2UzwJ23IE5/MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwMzEwMTUyMDU0WhcNMjUwNDE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNTgxNWRkNWVjNWJlNWY0NDUzMzE5MmFkMTM5M2NjMWZh
MDYxZDM4ZTA0NTFiMWVjNjk3NWNmNGZhMWNkNzMwMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDYtGADcj/2N/ziVr/70kwFZriZa3dR2hbkUYDUurXP3QB/
/HlAwzUhsgsiCjpBTe/XqPPAwBTRU/Cvli/FuHqmp6o9ZADPVdkmSvWM2gcHA/RJ
Jvv7Ve1640wNi6XG3Z2EnN/Gj486jwi98IFL4UMBtrU93nxsrEr9I8SfDxUBRXc4
KiHt24Vbseo4FmE3cefeKDgUEIkaSOUORtPdAVIcPkpSGSEdRsuu0eb+DoC9O/bP
8KyB6Oww6RdNb1xMkJnLTjNFmYmHPGI6gqRH2AFhKs8cGHKAuxEaxDGnOWRQO6K3
JToEhcS4AvD7aO+gIir0XiKnW4ow+Cw84YrSxjrJAgMBAAGjggKyMIICrjAdBgNV
HQ4EFgQUvGLDwzZjtmOhDaqUOiD0KA0x5vMwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzJkYTkwYzJiLThiZWEtNDBjNi04ZGM4LTU3NjViNjdmYzYxMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC
MAcDBQAmBntAMA0GCSqGSIb3DQEBCwUAA4IBAQAl1JpI1SwFCEqwKdRqiY7kFjty
8jEJnHfVIZLo4DT48Lf3MfFflcUMOrmZ6gfpzcXz6Fy79upQg+2piU2XYR21HbxJ
PzkeXHCmbycaDm2jeUCOkz7l2Kj47NU1r0Nl5SOeE3lxqPhS8iqGszVxlZF7IXDV
7JNmjhp6uB/Al0doS6BZDsaJ4elHueF6KN9mZbgH8TTHckPMZARmCeOA9K6nyZEv
h72GPEPNoGK7Yy8HqlW/5Spz4hBY+7u7FnJG5YtVkjeJxCgdWeMvipqds79Ic2Ek
ANuT+fnYYytxIyBhdNSfvkaIJzxjPCTQClZXq2SGWo91yPY58ea3ExQnCvZn
-----END CERTIFICATE-----