Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3ee19f4b-6941-451a-a36b-eca835bb4851.roa
File:                     3ee19f4b-6941-451a-a36b-eca835bb4851.roa (raw, json)
Hash identifier:          K3aqAnVpHfUSyLCjcrCMtrIgOeI2ALwQf1yfkBzXj8U=
Subject key identifier:   35:3F:B9:A9:A6:EC:F5:84:56:CC:2C:F7:AF:1F:F0:B6:09:1D:6C:A2
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       28D6F2429616888FF22ED801AA2F63D3408C258B
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3ee19f4b-6941-451a-a36b-eca835bb4851.roa
Signing time:             Fri 24 Jan 2025 00:00:00 +0000
ROA not before:           Fri 24 Jan 2025 00:00:00 +0000
ROA not after:            Fri 28 Feb 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c0b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d6:f2:42:96:16:88:8f:f2:2e:d8:01:aa:2f:63:d3:40:8c:25:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jan 24 00:00:00 2025 GMT
            Not After : Feb 28 23:59:59 2025 GMT
        Subject: serialNumber=634a4cd2bcf49dbbb3d551b0328c3f9025c585f2c082ccc8a8d3c5c770894852, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:37:3f:06:ac:8e:c8:da:44:66:fe:a1:2f:
                    7b:b8:0f:1d:f4:eb:bb:b6:ef:b9:3a:82:1f:c1:65:
                    a3:b7:c3:6a:8c:3b:ec:8b:1b:38:a0:e7:2f:41:7e:
                    e2:a7:95:14:65:09:ff:40:9d:16:61:de:87:2e:17:
                    29:34:e7:75:09:f5:90:e8:7e:1c:ca:bb:37:0c:40:
                    f9:71:d9:4e:8c:ec:8b:e4:99:71:b9:2f:fc:b5:13:
                    0a:d9:a1:0b:c0:85:44:a0:44:62:ea:55:c3:a1:49:
                    74:83:33:e9:01:29:a3:d6:ee:8e:43:dc:fd:55:37:
                    60:20:77:ab:7a:bb:5b:44:e6:94:31:e9:18:c3:1a:
                    b2:8c:93:7c:ad:cc:11:23:20:68:dd:17:45:55:c6:
                    21:9a:f5:66:51:af:1c:61:52:6a:aa:30:c2:6b:9a:
                    12:ca:6d:42:35:03:9a:a0:1c:cd:9a:78:b4:83:47:
                    cb:49:34:39:7a:c7:1b:a4:e0:7c:18:26:3c:da:6f:
                    ec:54:f3:03:93:c9:bd:f4:6b:dc:2a:22:6b:74:46:
                    7e:1b:b1:a1:ef:f5:8e:bc:fa:dd:9e:13:ac:a8:97:
                    ef:61:8b:9f:cf:74:35:33:14:5f:a6:6c:f7:77:fa:
                    4b:c7:8a:a5:b2:b5:59:6a:79:7f:fa:47:ac:96:1e:
                    08:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3F:B9:A9:A6:EC:F5:84:56:CC:2C:F7:AF:1F:F0:B6:09:1D:6C:A2
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3ee19f4b-6941-451a-a36b-eca835bb4851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:fc:67:93:cc:a7:55:f7:3d:1d:17:e3:24:e2:f2:27:2d:d0:
         ad:8f:78:e1:c2:67:e8:61:98:98:26:4d:87:57:17:7a:41:af:
         4e:1b:63:58:6f:75:2b:8c:39:88:de:35:4f:ee:a9:8d:db:9f:
         fc:22:e9:9a:19:f6:b9:85:b1:e7:b9:83:ca:53:3d:00:f1:1d:
         47:ad:1d:ae:35:01:06:e7:8a:07:61:02:c2:e2:00:7d:c8:83:
         23:e0:d0:11:68:03:3b:e8:0f:31:fe:22:d6:60:26:db:28:65:
         9a:79:55:81:8c:96:29:7b:64:a0:e9:ac:65:02:a6:4b:43:ed:
         c2:7d:10:ad:26:7a:ce:87:53:26:6f:e1:25:df:69:c1:47:4d:
         3e:64:c1:a3:2b:aa:f6:90:d2:eb:ea:51:29:60:b6:50:32:31:
         a8:01:d3:21:2e:e4:c6:9a:6d:fa:a4:37:d8:81:4c:87:97:3e:
         7c:ab:bf:cf:94:5c:62:52:ef:8d:18:62:0f:16:e0:7e:28:a3:
         f3:2f:60:b3:9d:d6:68:c0:2b:77:70:9d:29:2d:65:cd:2e:45:
         59:45:86:ee:16:f4:c9:d8:53:8f:b1:c3:0e:c8:87:3e:96:40:
         36:95:ca:29:da:f5:4b:8d:82:6e:75:db:f4:dc:fe:f9:e2:5a:
         00:33:dc:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----