Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41f74973-a63a-4161-8c87-21184ab17c25.roa
File:                     41f74973-a63a-4161-8c87-21184ab17c25.roa (raw, json)
Hash identifier:          +QclqC6ObzaNUU7cLFArnCYC5Yf2nLz+yoLaJ38Vva4=
Subject key identifier:   A8:6A:50:79:B5:60:C8:E2:D8:21:3E:24:1C:13:2F:D2:57:60:C8:BF
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5E86F1DB98C6F7FFE20CB9AC46806E4858E1B1F7
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41f74973-a63a-4161-8c87-21184ab17c25.roa
Signing time:             Fri 24 Jan 2025 00:00:00 +0000
ROA not before:           Fri 24 Jan 2025 00:00:00 +0000
ROA not after:            Fri 28 Feb 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c1c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:86:f1:db:98:c6:f7:ff:e2:0c:b9:ac:46:80:6e:48:58:e1:b1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jan 24 00:00:00 2025 GMT
            Not After : Feb 28 23:59:59 2025 GMT
        Subject: serialNumber=61de9e63318c5f55bf451962813fe229590fa5d434f3df19fac7ae8389a3984f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:e0:87:4e:2d:0b:21:3e:70:74:06:f1:53:
                    5e:4e:5e:1b:15:f9:0f:dc:b1:ad:32:90:67:2b:92:
                    63:f1:87:00:60:37:0a:83:58:01:67:e9:dd:ca:07:
                    11:98:a5:5a:7d:77:1f:8c:40:39:f9:b8:44:20:a7:
                    58:d6:bb:2c:22:a7:9d:6e:36:d7:de:a2:c6:15:75:
                    81:c7:f8:ef:fc:d0:94:27:ef:08:04:f3:30:1e:cd:
                    4a:48:fb:c8:0b:08:ae:2f:bd:f5:60:88:89:c5:10:
                    e0:40:ed:b8:79:8b:9d:ea:15:01:13:c1:c4:1c:ca:
                    9a:66:d9:4c:41:bb:d4:98:d3:6f:f2:75:31:5e:2c:
                    df:80:0b:bd:72:73:c9:e5:fe:1e:98:aa:e7:37:e9:
                    d7:4b:0e:63:3c:ae:a3:e1:00:85:80:a2:49:bd:22:
                    39:3e:c6:44:a1:e4:84:db:e3:ab:f3:93:8a:00:71:
                    0a:32:25:0e:b2:69:a2:f2:ff:0f:c4:53:a8:c6:90:
                    1a:7d:cf:49:d2:9c:60:9c:32:1c:f0:43:91:08:21:
                    c6:f6:2e:0e:ff:e8:d1:cb:f6:42:02:6c:e3:39:04:
                    0f:26:c0:10:67:fa:78:fc:f1:77:12:f9:35:f1:60:
                    18:60:61:f8:a8:7d:0c:37:8e:58:ab:ce:d1:c7:f2:
                    a5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6A:50:79:B5:60:C8:E2:D8:21:3E:24:1C:13:2F:D2:57:60:C8:BF
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41f74973-a63a-4161-8c87-21184ab17c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c1c::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:58:85:74:21:a6:0e:2b:65:0c:da:a2:ad:e3:91:eb:de:75:
         d3:11:d9:ff:50:a9:79:8d:4c:a9:b6:53:ca:53:10:2f:a4:39:
         9b:1a:2a:c7:e1:51:a4:fa:d1:f7:75:4d:c9:67:6a:5b:a2:0b:
         dd:bb:a1:c0:61:5e:41:ae:6b:78:c5:cb:57:59:8b:1d:52:b2:
         8c:c3:64:76:cc:f7:3f:04:56:ec:3e:81:54:df:b6:81:4e:f2:
         ea:af:8d:96:bf:21:b4:72:4d:12:e0:a1:6f:7c:38:a4:3e:9c:
         9c:1d:bb:39:13:0f:5d:e2:6b:75:30:33:9e:71:fc:e6:f2:ac:
         0d:4d:4b:cb:1f:50:8b:ab:8a:dd:f1:b5:e7:96:ab:a9:0e:bc:
         60:a9:55:9a:8a:dc:ea:76:72:e9:0e:44:17:00:d9:86:de:7e:
         4b:5c:dd:3f:31:da:5d:d9:21:4a:d4:59:d3:0a:38:fc:07:21:
         2a:f5:8f:c6:cf:41:c0:f2:ce:ff:5c:ef:58:fd:08:33:97:9e:
         c4:6a:50:c4:15:f9:4b:f6:06:d0:32:0d:f4:47:20:27:31:85:
         cc:7d:89:ae:10:93:cb:93:cc:5e:c2:86:58:08:e5:91:ec:4a:
         9e:51:0f:74:3c:85:59:bf:df:bc:bd:65:79:7a:a5:09:7c:e4:
         3e:8b:ac:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----