Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6ab2304f-4b68-4482-8d82-f19ad0a1378e.roa
File:                     6ab2304f-4b68-4482-8d82-f19ad0a1378e.roa (raw, json)
Hash identifier:          5bAU2adWNUtSwYs/+mtmwsMDabo/KsO1C1w5Jin53Iw=
Subject key identifier:   C1:57:0A:9C:82:3B:2F:01:EE:C9:C9:D7:68:23:EF:B8:D8:00:B7:35
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3BED4F33BE520693987F88D25D87BC3C39E302DC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6ab2304f-4b68-4482-8d82-f19ad0a1378e.roa
Signing time:             Mon 25 Nov 2024 00:00:00 +0000
ROA not before:           Mon 25 Nov 2024 00:00:00 +0000
ROA not after:            Mon 30 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:520d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ed:4f:33:be:52:06:93:98:7f:88:d2:5d:87:bc:3c:39:e3:02:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 25 00:00:00 2024 GMT
            Not After : Dec 30 23:59:59 2024 GMT
        Subject: CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:85:34:d5:b5:9f:38:a2:cb:4c:76:f7:75:
                    40:0f:e0:00:f0:de:62:20:33:3f:6c:a5:d4:0d:5f:
                    d8:61:67:ce:be:03:8d:33:00:0d:ea:a1:d6:a1:58:
                    c9:86:c0:7e:3e:a7:da:f7:b5:f0:5e:2b:be:f3:0a:
                    96:b7:4f:4b:ba:45:35:93:d2:f7:21:78:b4:2f:2f:
                    fb:6a:07:f5:62:3b:e0:57:6c:fc:d3:9e:30:0c:61:
                    72:26:f1:37:a4:18:10:87:dc:ad:8c:b9:97:3c:48:
                    26:85:5d:fd:a3:6b:2a:0f:58:77:3f:22:e5:ff:f0:
                    fe:eb:73:f7:30:22:91:04:b0:4b:67:f5:19:f9:c8:
                    b8:41:42:16:99:01:f0:6b:76:58:8f:9e:c2:a9:6b:
                    40:36:d3:09:68:62:de:30:9b:ea:a4:62:b8:c6:8e:
                    1d:20:20:9f:b6:ec:11:82:36:2b:e8:e3:88:e2:72:
                    47:ad:85:46:2f:90:4d:6a:e6:65:3a:f2:56:6d:08:
                    50:65:09:2a:fc:28:56:f1:94:cf:e0:c3:09:7a:32:
                    51:40:df:13:61:9d:b6:ee:33:21:ba:8b:de:67:6f:
                    27:9c:97:b1:68:0d:4a:fb:3e:19:62:cb:ea:de:7d:
                    90:5b:d3:3d:7c:f1:a3:d7:11:46:a5:cd:f6:e0:a3:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:57:0A:9C:82:3B:2F:01:EE:C9:C9:D7:68:23:EF:B8:D8:00:B7:35
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6ab2304f-4b68-4482-8d82-f19ad0a1378e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:520d::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:77:c5:fd:d3:ff:a2:c0:a5:61:b1:c0:6f:4b:d6:8b:b4:78:
         ab:de:ad:49:b3:dc:61:85:fc:ed:02:be:a3:fa:0a:af:5c:8d:
         8a:21:ff:a4:4a:36:d6:e1:0d:52:3e:a3:aa:19:d0:f4:90:b0:
         fc:43:d6:91:4c:7f:02:d3:92:f9:35:de:d1:0d:c5:26:95:a9:
         c8:57:1e:41:0f:1e:2b:e4:a5:6d:4b:d1:0d:06:2f:ac:d8:71:
         fb:bb:75:5a:66:65:5b:ee:95:4e:53:93:8c:03:84:23:78:24:
         91:25:72:0c:dd:f1:09:5c:32:84:96:19:93:ef:f0:86:2f:26:
         dd:e6:de:01:c2:73:a6:df:40:59:43:d9:91:1f:94:68:3f:2f:
         9f:d2:f4:fc:06:67:6c:23:46:96:39:87:f4:c9:85:97:ba:68:
         b6:88:23:42:ac:fd:1c:35:e8:83:b2:5d:bf:e3:82:cf:ce:3a:
         79:2f:de:3e:0f:a2:a2:e3:9b:64:b3:cc:fa:74:43:0e:c0:5a:
         69:5e:b4:5d:c5:b6:89:3c:7c:21:ed:71:6b:f7:2d:9e:bc:33:
         23:d6:aa:98:53:87:a6:8b:b4:24:c9:be:27:3d:3e:fb:be:28:
         e6:da:8a:d6:a7:d5:f4:4c:b9:4b:5b:08:c0:2c:b8:99:9c:58:
         86:76:59:9f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUO+1PM75SBpOYf4jSXYe8PDnjAtwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjQxMTI1MDAwMDAwWhcNMjQxMjMwMjM1OTU5
WjB6MUkwRwYDVQQFE0AwOWZjMzY1Njc0MDFlY2E0M2NjNGY3ZWQyNTQwZTI2YWQ4
YjMxMzA4MjA1MTk3NDcwMzkxZmIzYzYxMzI4ZmZiMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDY4U01bWfOKLLTHb3dUAP4ADw3mIgMz9spdQNX9hhZ86+
A40zAA3qodahWMmGwH4+p9r3tfBeK77zCpa3T0u6RTWT0vcheLQvL/tqB/ViO+BX
bPzTnjAMYXIm8TekGBCH3K2MuZc8SCaFXf2jayoPWHc/IuX/8P7rc/cwIpEEsEtn
9Rn5yLhBQhaZAfBrdliPnsKpa0A20wloYt4wm+qkYrjGjh0gIJ+27BGCNivo44ji
ckethUYvkE1q5mU68lZtCFBlCSr8KFbxlM/gwwl6MlFA3xNhnbbuMyG6i95nbyec
l7FoDUr7Phliy+refZBb0z188aPXEUalzfbgo6VtAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUwVcKnII7LwHuycnXaCPvuNgAtzUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzZhYjIzMDRmLTRiNjgtNDQ4Mi04ZDgyLWYxOWFkMGExMzc4ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAUg0wDQYJKoZIhvcNAQELBQADggEBAId3xf3T/6LApWGxwG9L1ou0
eKverUmz3GGF/O0CvqP6Cq9cjYoh/6RKNtbhDVI+o6oZ0PSQsPxD1pFMfwLTkvk1
3tENxSaVqchXHkEPHivkpW1L0Q0GL6zYcfu7dVpmZVvulU5Tk4wDhCN4JJElcgzd
8QlcMoSWGZPv8IYvJt3m3gHCc6bfQFlD2ZEflGg/L5/S9PwGZ2wjRpY5h/TJhZe6
aLaII0Ks/Rw16IOyXb/jgs/OOnkv3j4PoqLjm2SzzPp0Qw7AWmletF3Ftok8fCHt
cWv3LZ68MyPWqphTh6aLtCTJvic9Pvu+KObaitan1fRMuUtbCMAsuJmcWIZ2WZ8=
-----END CERTIFICATE-----