Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2d483f0f-c559-4f53-a15a-67216b94ba21.roa
File:                     2d483f0f-c559-4f53-a15a-67216b94ba21.roa (raw, json)
Hash identifier:          ZO8/Vf7gYuHJIcqYQ4lKrSiDDbbdnHlpcOU6kXx4m3k=
Subject key identifier:   FA:8A:FE:6F:47:0B:ED:5C:6A:72:99:C1:35:C6:F8:6A:89:1F:E3:7B
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       0F2AD8A1AAE9D077612F87E03888E6915BB86B8F
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2d483f0f-c559-4f53-a15a-67216b94ba21.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:387::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2a:d8:a1:aa:e9:d0:77:61:2f:87:e0:38:88:e6:91:5b:b8:6b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=da7225b25cfe96d8e43ab01b5d92d555c2f68cf70d57c13c1983149ad56120af, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:82:2e:99:87:fd:83:6e:08:a4:54:b7:2f:c1:
                    a6:43:d8:5d:92:6f:b8:d8:51:d7:2f:ae:44:b4:0f:
                    42:11:9a:c5:f6:4b:8b:6b:ea:c0:53:8d:0f:dd:66:
                    02:02:ec:31:49:64:78:49:8a:9a:b4:52:2d:7b:ac:
                    1a:54:4f:1e:90:6d:2c:fe:9d:e6:73:94:a8:81:7e:
                    39:c1:78:53:80:3e:61:17:68:88:a9:88:a4:ef:8a:
                    10:d9:e6:f1:c2:4f:44:bc:01:c2:5f:c4:6e:26:83:
                    96:c8:93:ef:d3:4b:4f:0e:3a:ad:e6:69:ef:a7:9e:
                    d0:bf:55:d2:07:c5:ce:18:9f:db:26:d0:52:1f:39:
                    e1:96:31:e1:73:69:a9:d8:4b:4d:c2:d7:80:fe:8d:
                    6c:30:d0:71:8d:9f:0f:61:12:e0:d0:ac:ea:46:66:
                    73:16:d5:22:e7:73:b4:67:03:0d:9a:06:11:fe:32:
                    1d:c2:f4:46:79:9f:65:2c:a5:4f:fa:c8:d5:84:fa:
                    6c:61:30:a2:1e:47:8b:0a:bf:b0:d8:25:05:02:e2:
                    79:a0:2e:7f:dd:32:62:e5:5b:1f:3a:e1:3f:c7:37:
                    e7:7b:84:a8:01:d8:65:b0:9e:1c:28:06:44:d0:f5:
                    58:79:cc:0b:1d:23:81:ba:5c:e0:85:7c:48:8b:54:
                    78:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8A:FE:6F:47:0B:ED:5C:6A:72:99:C1:35:C6:F8:6A:89:1F:E3:7B
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2d483f0f-c559-4f53-a15a-67216b94ba21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:387::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:70:fb:ee:db:f9:4c:69:93:e9:f4:fb:48:bd:7f:dd:db:1d:
         b5:8b:72:18:24:43:fc:a1:29:59:bb:ce:16:c2:b5:f6:84:48:
         aa:e3:0b:cd:dc:9e:37:4c:41:21:79:67:c4:03:95:b5:19:c3:
         58:94:73:9b:9b:f9:ff:37:79:75:a0:38:dd:34:fd:97:cc:99:
         c9:49:ec:55:e0:56:4a:9c:21:b2:89:98:47:24:df:af:52:c2:
         a1:85:77:49:b6:54:37:51:61:30:2f:bb:70:11:99:cf:e6:a7:
         24:03:12:29:8f:9d:11:d4:b5:35:c7:b5:80:6d:72:ab:10:78:
         1d:9b:b7:b1:a4:ed:96:39:c7:69:fa:2b:cf:c0:c2:a5:1e:b1:
         4f:7c:a2:cf:1c:b1:86:13:ab:54:11:89:e4:f3:1f:96:68:55:
         ae:13:6e:84:5a:76:0f:36:bb:ff:35:5b:f5:ba:c3:05:d0:2c:
         95:5b:e8:56:9e:d3:b6:5b:17:93:5e:70:bf:7a:53:42:0a:34:
         8b:18:19:0b:e1:48:4c:f3:d0:3b:47:31:93:3e:d7:34:d8:eb:
         e5:4d:36:05:7c:0b:ff:8f:6f:74:1c:da:ba:d8:37:48:6f:92:
         07:05:b0:c8:6d:92:3b:1a:81:d0:51:44:80:21:ef:61:49:08:
         49:c1:0b:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----