Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/094c2acc-93b4-4a01-ac79-bee984bf842b.roa
File:                     094c2acc-93b4-4a01-ac79-bee984bf842b.roa (raw, json)
Hash identifier:          nEYiEE5rMACr2iFpFI5Wc+HGwpwHh9+JxTFt9I78dLc=
Subject key identifier:   AC:23:9B:3C:84:C6:03:6E:DF:9C:42:5F:7D:0B:04:71:C2:ED:D1:00
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       6EC22A348CC9758C8F44C9451D2690299BADB551
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/094c2acc-93b4-4a01-ac79-bee984bf842b.roa
Signing time:             Fri 24 Jan 2025 00:00:00 +0000
ROA not before:           Fri 24 Jan 2025 00:00:00 +0000
ROA not after:            Fri 28 Feb 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c1b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c2:2a:34:8c:c9:75:8c:8f:44:c9:45:1d:26:90:29:9b:ad:b5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jan 24 00:00:00 2025 GMT
            Not After : Feb 28 23:59:59 2025 GMT
        Subject: serialNumber=0cc545ff4b04d46bfe568b6b98c19df0fca1c6a3475c2c6a13b1b58898bf7004, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:34:d9:c3:91:9f:f2:5c:89:9f:75:79:62:9b:
                    c4:3c:47:fb:77:95:78:39:24:eb:6a:a3:0c:af:ad:
                    a3:05:d6:9b:4e:e6:76:dc:22:d4:82:49:7f:14:40:
                    ff:b7:39:b5:96:32:22:90:6a:02:27:e0:be:5a:f8:
                    71:ce:f2:b9:12:09:d7:ea:11:1a:88:a4:03:ef:93:
                    b2:8f:2f:f3:e2:c0:48:82:97:5a:e4:56:13:97:44:
                    ba:20:d9:81:06:37:3c:c9:4d:82:c1:9b:9f:71:98:
                    31:3e:07:8d:95:8c:bb:18:ed:ae:56:54:f9:a0:ae:
                    0d:ad:bd:de:70:bf:93:8f:d2:c6:b8:77:90:56:84:
                    28:cb:16:9f:3f:31:ba:4e:0a:bb:b3:2e:6d:32:5f:
                    b5:46:9b:32:63:ea:56:7c:41:57:3f:39:57:67:ab:
                    3d:d1:bd:07:69:b6:8b:4c:6a:35:2d:fa:49:31:ff:
                    c6:ec:f7:75:19:3a:33:b2:c9:c8:14:71:03:8d:1a:
                    05:a4:ac:03:de:af:99:23:21:0c:9b:7e:cf:53:6f:
                    6f:cb:6b:d7:b1:35:64:0c:7e:fd:90:df:91:b4:86:
                    e1:d3:1d:d7:08:26:bf:1f:0d:39:60:2a:22:b0:f4:
                    67:fc:3a:4b:d0:ef:54:58:4f:95:3e:0e:d6:51:17:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:23:9B:3C:84:C6:03:6E:DF:9C:42:5F:7D:0B:04:71:C2:ED:D1:00
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/094c2acc-93b4-4a01-ac79-bee984bf842b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:73:6f:a9:d3:f3:b3:1b:6f:48:08:df:4b:ce:38:0a:b8:24:
         97:fc:91:b3:21:69:dd:c0:73:9b:ce:b0:d3:71:bf:34:33:ee:
         6b:5a:bd:25:2a:c1:58:31:da:26:16:d8:26:e5:34:d4:99:5c:
         0d:0a:22:fc:1d:d2:25:a9:8a:13:a5:21:d5:b6:32:67:a6:8d:
         39:60:8e:22:a3:60:2e:c4:6f:b1:76:bf:a3:5e:ba:ef:08:bd:
         d0:dc:00:43:fe:84:30:7f:75:75:07:cd:e0:46:47:3e:61:7f:
         f0:ab:06:2c:96:67:a2:83:3a:55:09:df:62:1f:60:19:b8:dc:
         45:75:77:a1:e6:28:46:55:ba:b3:98:f5:c3:11:57:65:b3:6e:
         71:78:28:5b:d7:89:b3:c0:70:29:3d:29:9d:ff:69:69:87:f5:
         55:94:70:77:aa:85:4d:a1:06:32:04:3f:8a:bb:a7:af:78:cf:
         f4:81:a7:af:d2:05:d5:23:f6:3b:ed:93:f5:69:bc:d3:69:23:
         a6:0f:d5:c7:88:0e:ab:da:c3:a4:cf:ea:4e:eb:fb:3e:d5:fe:
         77:c6:74:b5:20:9f:d8:5e:fd:f4:a3:81:3f:61:ac:79:d4:aa:
         01:42:8d:03:28:39:3c:2e:13:c2:e2:65:2a:23:e0:51:2e:7d:
         cd:ac:bd:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----