Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b07256c3-b97b-471b-a0c0-0d299c636138.roa
File:                     b07256c3-b97b-471b-a0c0-0d299c636138.roa (raw, json)
Hash identifier:          L44ef+SJKMizBh7cJOYiqt7NsBTPINSSKYCrx2eZ5QA=
Subject key identifier:   C1:44:E1:5F:05:35:7C:C1:EE:68:23:A8:6D:68:35:03:F4:29:2E:03
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       16CA9EBADABAF438DCC1E9CB1D57AF4042A2B266
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b07256c3-b97b-471b-a0c0-0d299c636138.roa
Signing time:             Fri 24 Jan 2025 00:00:00 +0000
ROA not before:           Fri 24 Jan 2025 00:00:00 +0000
ROA not after:            Fri 28 Feb 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c08::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ca:9e:ba:da:ba:f4:38:dc:c1:e9:cb:1d:57:af:40:42:a2:b2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jan 24 00:00:00 2025 GMT
            Not After : Feb 28 23:59:59 2025 GMT
        Subject: serialNumber=231a90ed67d5e68b8aa7508ad97ac3d65fda86fa3d7adfa9078550869c9a7a05, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:e7:1d:16:3a:af:8a:2f:1a:c9:d4:70:58:
                    94:9d:68:57:08:88:cf:95:ff:c5:34:bb:32:48:99:
                    21:15:f3:a1:07:93:83:3c:66:7f:6b:81:32:05:af:
                    e9:67:91:30:5f:86:6b:b9:32:b0:33:b1:c2:28:95:
                    8b:7f:11:19:b0:8b:d8:69:3f:5a:58:7f:a4:1d:d7:
                    7c:d0:7f:90:44:89:c6:ff:cd:8c:c1:df:2a:74:51:
                    34:d7:dd:ec:c5:83:67:cc:32:70:14:93:0d:32:27:
                    38:a3:9a:ac:08:65:9e:33:34:1d:be:c8:80:d8:93:
                    3a:06:af:0b:ac:b9:d2:9e:a7:08:17:fa:04:4c:d5:
                    e6:05:38:79:92:1f:f8:5e:ef:f0:be:84:9b:d7:5f:
                    df:4f:f2:56:88:38:3a:e4:68:9c:21:c3:82:d4:dc:
                    cd:11:aa:bf:93:ec:26:03:c6:70:66:b6:5f:ed:f7:
                    90:54:56:34:2a:f2:10:c6:da:e0:62:ba:8f:da:88:
                    1f:e8:05:2b:f3:aa:46:32:b9:43:68:26:a0:56:8a:
                    b1:ff:ce:b4:0e:df:c7:61:7e:4c:f2:28:19:75:75:
                    1b:86:e7:78:f3:a2:42:66:9b:53:03:9b:9e:3c:a6:
                    2e:2e:4d:b8:6d:ef:a0:e5:61:32:bd:75:a7:a9:63:
                    14:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:44:E1:5F:05:35:7C:C1:EE:68:23:A8:6D:68:35:03:F4:29:2E:03
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b07256c3-b97b-471b-a0c0-0d299c636138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c08::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:9c:6d:94:d4:f2:3a:5b:74:c9:4a:0c:25:09:ef:d0:4e:88:
         5b:da:fe:60:fe:3f:a6:41:3e:0a:32:9c:72:c6:b7:52:b7:c1:
         d7:9b:b9:fe:54:4a:34:69:b4:07:34:0f:1d:16:e1:b1:23:e5:
         67:be:b9:c4:06:62:e6:74:61:79:a9:23:0c:f7:58:da:8a:75:
         07:fe:a2:f3:09:45:c3:e2:ed:bc:97:5d:85:5f:cd:39:c9:e5:
         75:90:bf:4b:82:ed:ce:75:53:36:a8:d7:4d:d2:10:0f:bd:8d:
         67:d4:51:1e:39:ab:05:39:a6:e1:36:5d:2f:6e:76:f8:13:33:
         40:44:d8:d3:91:35:d8:41:c6:96:21:5f:91:2b:ea:ad:97:0f:
         cb:31:4b:c8:4e:70:38:3a:11:72:77:43:e6:75:bc:61:78:83:
         76:e9:d8:c9:ff:60:7e:32:c2:f9:80:3b:16:1c:9f:67:a1:76:
         f9:b2:d9:81:60:49:5c:96:96:45:31:e3:2a:60:13:55:ef:d3:
         ed:ac:57:5a:44:da:9c:31:c4:7c:17:9e:fd:de:be:88:68:e8:
         f8:a2:ef:e1:28:fd:fd:e6:8a:b7:e1:35:fb:3e:fe:e3:a6:21:
         63:ca:66:f8:c2:b8:8c:7b:3c:f2:c0:37:e5:6d:6c:68:e3:06:
         9b:cb:f1:4c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUFsqeutq69DjcwenLHVevQEKismYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5
WjB6MUkwRwYDVQQFE0AyMzFhOTBlZDY3ZDVlNjhiOGFhNzUwOGFkOTdhYzNkNjVm
ZGE4NmZhM2Q3YWRmYTkwNzg1NTA4NjljOWE3YTA1MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDB5ucdFjqvii8aydRwWJSdaFcIiM+V/8U0uzJImSEV86EH
k4M8Zn9rgTIFr+lnkTBfhmu5MrAzscIolYt/ERmwi9hpP1pYf6Qd13zQf5BEicb/
zYzB3yp0UTTX3ezFg2fMMnAUkw0yJzijmqwIZZ4zNB2+yIDYkzoGrwusudKepwgX
+gRM1eYFOHmSH/he7/C+hJvXX99P8laIODrkaJwhw4LU3M0Rqr+T7CYDxnBmtl/t
95BUVjQq8hDG2uBiuo/aiB/oBSvzqkYyuUNoJqBWirH/zrQO38dhfkzyKBl1dRuG
53jzokJmm1MDm548pi4uTbht76DlYTK9daepYxTRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUwUThXwU1fMHuaCOobWg1A/QpLgMwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2IwNzI1NmMzLWI5N2ItNDcxYi1hMGMwLTBkMjk5YzYzNjEzOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzADAgwDQYJKoZIhvcNAQELBQADggEBADOcbZTU8jpbdMlKDCUJ79BO
iFva/mD+P6ZBPgoynHLGt1K3wdebuf5USjRptAc0Dx0W4bEj5We+ucQGYuZ0YXmp
Iwz3WNqKdQf+ovMJRcPi7byXXYVfzTnJ5XWQv0uC7c51Uzao103SEA+9jWfUUR45
qwU5puE2XS9udvgTM0BE2NORNdhBxpYhX5Er6q2XD8sxS8hOcDg6EXJ3Q+Z1vGF4
g3bp2Mn/YH4ywvmAOxYcn2ehdvmy2YFgSVyWlkUx4ypgE1Xv0+2sV1pE2pwxxHwX
nv3evoho6Pii7+Eo/f3mirfhNfs+/uOmIWPKZvjCuIx7PPLAN+VtbGjjBpvL8Uw=
-----END CERTIFICATE-----