Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce2fdba2-ca41-4d2f-9c1f-e479918e93fc.roa
File:                     ce2fdba2-ca41-4d2f-9c1f-e479918e93fc.roa (raw, json)
Hash identifier:          p6rZoGEByhj3QsBLtIqZSkQfnavONlb5l4ANCtsEdfs=
Subject key identifier:   DB:7F:4E:71:40:09:81:0A:7B:5E:97:C3:3E:4C:87:62:DC:C0:57:CF
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       4D05D65EABB0D026AC9D195F2F8CD534428C0F07
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce2fdba2-ca41-4d2f-9c1f-e479918e93fc.roa
Signing time:             Fri 24 Jan 2025 00:00:00 +0000
ROA not before:           Fri 24 Jan 2025 00:00:00 +0000
ROA not after:            Fri 28 Feb 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c0f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:05:d6:5e:ab:b0:d0:26:ac:9d:19:5f:2f:8c:d5:34:42:8c:0f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jan 24 00:00:00 2025 GMT
            Not After : Feb 28 23:59:59 2025 GMT
        Subject: serialNumber=0d8a82feb75f392df4e20d9cf4925d1f71b23a4867c372781ded5e3f8ac3ba67, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:7b:42:ae:d2:b4:a9:6e:28:2f:ef:fd:d1:
                    b1:ee:f1:1c:b2:10:a0:1c:20:cb:b6:ee:29:f4:cd:
                    bb:a0:15:c1:b9:d9:08:2b:a9:54:41:dd:c6:fe:be:
                    b5:2a:e4:a9:4f:e9:12:0b:94:60:05:99:95:92:96:
                    ce:d8:4d:ac:00:10:e1:85:45:b8:2a:30:d0:70:0c:
                    e6:7b:74:83:f3:4e:59:c2:13:3b:b3:0f:21:2c:9b:
                    e8:a8:54:e4:87:46:3c:24:9c:f5:b2:53:52:79:9f:
                    3a:10:9a:ce:7d:ab:33:63:f8:78:36:d5:47:0b:90:
                    71:f7:35:53:4b:cc:07:e7:11:a6:55:2a:6e:59:ee:
                    1c:33:c4:81:36:65:69:07:62:4f:b8:06:68:f0:05:
                    64:b7:ba:2e:47:e2:e0:6e:ab:18:e6:d4:be:5d:56:
                    ac:bf:cb:ba:d0:f1:c6:37:1a:80:46:ad:61:17:48:
                    24:0c:2c:28:9a:08:5f:9f:a7:58:6a:a6:16:59:c7:
                    74:6f:9f:c5:27:2e:02:bf:f9:fc:a3:9e:e2:9a:a2:
                    58:b6:b2:74:d5:8a:02:e3:5b:b5:88:a5:c5:46:ce:
                    25:5a:11:19:92:0a:62:e7:86:a0:b6:70:67:a3:2b:
                    fb:ae:0d:2c:71:50:7a:98:a9:88:01:1b:a9:11:f7:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7F:4E:71:40:09:81:0A:7B:5E:97:C3:3E:4C:87:62:DC:C0:57:CF
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce2fdba2-ca41-4d2f-9c1f-e479918e93fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c0f::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:2d:32:c6:06:25:0c:3b:f7:16:52:2a:41:a4:45:cd:0f:5b:
         b4:88:fa:d9:8c:84:37:f8:c5:7e:ac:a6:fa:85:0f:91:3f:ea:
         7d:90:cc:45:c8:65:6d:d8:f0:90:ec:c7:81:ef:cc:e4:5d:82:
         79:50:37:1c:e3:ab:52:31:02:bd:db:53:e3:38:d0:c8:d0:e1:
         c0:29:44:01:44:97:46:5e:b3:ee:33:4e:cf:04:41:6e:5c:9d:
         0f:1d:30:b5:fd:64:3a:67:e7:63:e3:8a:67:e8:a9:13:cc:cf:
         09:62:ff:a1:14:2e:f7:65:43:4b:1f:ce:fd:eb:e9:9e:3d:a6:
         ec:65:d3:78:6b:2b:7b:42:65:fc:47:2e:1b:3e:1a:96:49:0e:
         d8:8a:7d:3c:d5:9f:2d:cc:79:86:02:ca:54:79:5e:53:3f:d5:
         6d:ee:bb:12:12:a8:bb:06:63:c5:70:f8:24:d2:44:15:5d:d8:
         5b:b8:1d:c9:10:c2:57:b9:a8:8c:03:64:d1:f4:8d:7f:7d:5b:
         a4:f5:f4:41:d7:20:fd:cb:d0:8c:e5:a6:a3:be:7a:b7:f1:dc:
         b7:64:b8:f9:56:14:c3:10:5c:3e:95:fc:c4:91:cc:71:f1:d8:
         72:59:dc:84:34:cb:2c:6d:8e:7e:f2:ee:be:48:ac:1e:eb:ce:
         9e:e0:c9:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----