Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9bfde94a-1d95-4dce-b0b2-727172f5e49d.roa
File:                     9bfde94a-1d95-4dce-b0b2-727172f5e49d.roa (raw, json)
Hash identifier:          m3msKBIAPBdAV4EbHVZwFr1s6sp9cFtcBfdTOx6i9XY=
Subject key identifier:   C5:BC:DA:A0:2B:A8:CC:B2:DB:96:5B:C1:A2:89:CB:3C:18:66:8B:E8
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       2D108B3E8E3435C1A07DE6E5851AA8A7C630CEB9
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9bfde94a-1d95-4dce-b0b2-727172f5e49d.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        96.127.8.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:10:8b:3e:8e:34:35:c1:a0:7d:e6:e5:85:1a:a8:a7:c6:30:ce:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=bfc6751d622f0df017381e855337db0020956181c3b27264d8b51400bdf618f1, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dc:9c:0e:d6:a6:87:c1:89:d8:dc:f0:38:48:
                    08:6b:5f:33:42:12:56:1a:be:35:0f:33:87:99:08:
                    30:1d:f9:8d:bc:3b:7a:f2:b5:bd:8f:d6:35:35:23:
                    65:98:44:3e:c8:c6:96:21:5d:94:4b:67:16:7e:9c:
                    bb:3c:b2:b5:1e:7f:40:e6:0f:a1:35:5f:47:58:5a:
                    bc:5f:bd:40:02:24:2d:c0:04:b5:a4:e4:dd:31:93:
                    c1:8c:44:65:77:ce:1b:d7:63:e6:52:f4:df:9b:ea:
                    ee:f5:f8:17:ba:47:0d:62:f2:e5:03:9b:4c:b1:1b:
                    e3:9c:ce:a1:f0:17:73:09:be:1a:50:d0:e1:7c:06:
                    70:72:e0:22:8b:1e:13:10:53:2e:6e:44:0f:26:39:
                    9a:71:bc:7e:0f:d3:d1:08:5e:f1:ef:a0:45:db:38:
                    02:48:9f:e8:06:12:31:f6:00:62:d9:d3:91:4f:d9:
                    f0:49:4e:31:14:f2:4a:e6:0a:a2:75:82:48:10:6d:
                    b8:f1:d4:a3:da:9e:a5:8a:c9:bc:58:95:ea:10:89:
                    b7:92:c9:5b:a8:bc:48:dc:1b:e9:c4:3a:36:e0:c1:
                    ef:7b:8e:9f:cd:b9:c5:9b:71:22:44:10:52:47:b8:
                    ad:2f:a0:c0:8e:ab:44:2e:e7:06:7e:89:a2:6e:eb:
                    bd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BC:DA:A0:2B:A8:CC:B2:DB:96:5B:C1:A2:89:CB:3C:18:66:8B:E8
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9bfde94a-1d95-4dce-b0b2-727172f5e49d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:46:3b:f1:1e:09:34:79:40:e6:21:cc:36:70:62:31:c4:86:
         34:a9:ce:ea:17:87:00:d2:0f:b0:e3:f2:ee:84:be:7e:b4:6e:
         b5:4f:49:04:ae:9a:2b:38:0c:11:56:d4:f8:8b:b9:3a:33:61:
         27:f1:4c:a8:a4:a4:55:5f:64:de:8e:f4:cb:2d:d2:de:27:af:
         8c:29:88:92:c1:ba:a7:ee:bd:0c:29:b5:61:4f:c1:b4:be:e9:
         d0:15:1c:47:b0:be:8d:f3:7a:57:82:c5:b8:87:e8:48:14:da:
         74:78:44:0b:de:ce:bf:b8:7f:66:7f:01:6d:82:c8:d0:51:9b:
         0f:1a:7e:64:5a:26:50:81:b7:d3:37:b1:4b:61:0d:07:41:96:
         74:80:ab:4a:2e:19:a4:05:40:35:fc:fa:fb:32:70:59:01:4a:
         05:0c:3f:8e:a6:4b:bf:7b:bd:d4:22:04:fb:ce:dc:c8:fb:e2:
         11:58:6c:6d:84:40:c5:1e:aa:8c:81:98:63:1c:e3:25:e1:6b:
         16:9d:5a:46:0c:99:8a:6f:7f:d5:62:ba:d9:3a:5f:29:1b:97:
         d5:2a:f7:ec:3c:df:76:67:c0:58:64:fc:a6:d6:09:df:8f:da:
         a5:0a:a5:80:6e:bc:f8:58:04:48:37:bf:93:77:e1:31:04:63:
         fd:8c:e7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----