Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/34aa606e-0ded-49e0-8124-2799643cf271.roa
File:                     34aa606e-0ded-49e0-8124-2799643cf271.roa (raw, json)
Hash identifier:          3pCtvgqMkFGFB3IYXnf6LPiVTuK164iSnigP4ztoF7w=
Subject key identifier:   FD:FA:7E:2D:6F:B1:85:AC:95:72:7E:D1:ED:F8:D5:70:62:09:86:16
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       0B0334B16DD93FB97D5786F3BC64C4C135894061
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/34aa606e-0ded-49e0-8124-2799643cf271.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:399::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:03:34:b1:6d:d9:3f:b9:7d:57:86:f3:bc:64:c4:c1:35:89:40:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=07ec018d17f4e293ccc7d0e761e9a6f4301498b977ed48c9859758e0e68df3f8, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:30:df:77:57:bb:62:bc:8c:36:ff:67:fc:9f:
                    52:76:6d:bc:68:43:6c:bb:11:03:fd:a4:92:8c:5c:
                    c7:cf:bb:7f:08:21:68:82:97:b0:df:46:6c:ac:8f:
                    f8:d8:21:f1:ad:b9:77:25:f4:fb:12:d8:f8:4c:42:
                    aa:02:63:d5:ae:ad:0c:16:ed:68:60:08:87:46:9f:
                    d9:94:43:a2:9d:ca:f1:2d:7e:f6:4e:e3:a9:9b:6d:
                    d5:6b:3a:12:02:fe:70:71:4f:2c:6f:ad:3d:8c:5e:
                    94:33:ba:4f:22:0a:92:8d:13:39:70:4c:3a:26:75:
                    5e:77:ea:6f:13:28:0a:c7:b3:54:c3:71:c2:18:f9:
                    73:ec:52:53:a4:44:1b:52:d0:60:1d:0c:23:f3:b4:
                    86:a1:1e:3a:d9:68:3d:23:bb:54:28:6b:ef:e0:9d:
                    65:a4:b1:07:46:03:e2:42:3b:62:39:dc:59:57:5c:
                    c6:06:53:f8:01:cb:b4:c1:8f:b6:67:45:6b:e2:bf:
                    ed:7a:6d:aa:99:1a:eb:87:8d:00:60:72:c5:b5:aa:
                    e9:ea:c7:48:ff:56:e2:cd:1b:27:cb:07:db:27:de:
                    77:70:36:98:8e:af:ec:15:f4:95:9f:f9:ad:f8:94:
                    82:cd:89:c2:bb:71:fb:fd:9a:3f:aa:68:80:54:ac:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FA:7E:2D:6F:B1:85:AC:95:72:7E:D1:ED:F8:D5:70:62:09:86:16
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/34aa606e-0ded-49e0-8124-2799643cf271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:399::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:00:8a:df:5e:a1:e8:79:5e:82:6e:7d:36:7a:7a:ad:a2:dd:
         c0:c1:1e:fc:30:93:9e:61:c8:ef:19:ac:05:85:5e:76:8a:7a:
         8e:a3:98:c9:f0:33:91:d1:ce:fb:3c:aa:9f:aa:ac:0a:ad:b0:
         3c:21:e7:18:9f:b7:90:df:63:89:ee:f3:c2:e7:b5:50:57:7a:
         e5:f7:7a:6b:e8:1c:0c:5b:db:97:3d:81:53:86:ee:01:8b:2d:
         53:b8:c7:26:06:cf:8e:14:49:2a:1b:fb:24:8a:c4:30:18:d5:
         2d:99:ac:8f:3f:3a:25:fa:37:7c:d2:fb:5c:d6:ec:d8:b1:8d:
         01:ba:1b:c2:1a:5b:77:66:d2:cd:cc:1a:6c:8a:c5:69:47:f7:
         3b:dc:20:0a:0e:73:bc:cf:25:ff:7f:f0:a0:c0:56:cf:0b:ea:
         bf:56:e6:93:bb:f9:42:52:a2:c3:2b:70:96:34:2b:bf:37:0e:
         35:8f:93:3d:d3:fb:4d:07:52:31:ad:79:bb:48:36:ee:52:b8:
         ba:9c:20:aa:bd:ec:83:68:fb:8a:a9:69:5c:c7:a4:f0:a5:fb:
         25:4d:d0:7d:fd:47:bb:63:f5:3b:01:db:03:4f:48:89:a1:7f:
         b1:16:10:e2:96:ab:9b:a0:31:95:98:80:bc:8f:f9:80:83:15:
         1a:b8:49:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----