Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f5342ecb-711b-446c-8167-0d2a93e65bea.roa
File:                     f5342ecb-711b-446c-8167-0d2a93e65bea.roa (raw, json)
Hash identifier:          7Uty+T8CH6kUP4tBK6LkH4n9Z7AoffFe8kiaeeTtGVw=
Subject key identifier:   CD:4F:F9:2D:B7:DF:29:65:DF:C8:DD:89:82:37:73:38:00:A1:D0:A1
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       7CD0D0C5AACEC423F6BF6E6E7040A3E8360CDB61
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f5342ecb-711b-446c-8167-0d2a93e65bea.roa
Signing time:             Fri 24 Jan 2025 00:00:00 +0000
ROA not before:           Fri 24 Jan 2025 00:00:00 +0000
ROA not after:            Fri 28 Feb 2025 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c18::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d0:d0:c5:aa:ce:c4:23:f6:bf:6e:6e:70:40:a3:e8:36:0c:db:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jan 24 00:00:00 2025 GMT
            Not After : Feb 28 23:59:59 2025 GMT
        Subject: serialNumber=3152373fc002f3e65b49956dd944c7bd4971e0787056b4b452b7ee70cb5d8551, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:50:d8:b4:6a:61:e0:66:a0:ef:74:3b:d4:f7:
                    c9:71:f5:59:33:27:b9:94:e5:fa:5e:48:0b:3f:28:
                    43:c6:f1:7a:19:fa:61:d1:bb:93:c0:c9:25:a3:e0:
                    0b:cb:da:9b:97:05:53:29:6a:5f:42:ca:d2:a5:8e:
                    da:93:31:2f:d0:fa:ff:07:15:88:6c:4c:49:87:2f:
                    54:cd:0b:7a:08:8c:86:0b:38:28:5f:d0:a8:1d:56:
                    74:e2:3b:ef:02:cf:09:a5:59:3c:44:27:b9:03:1b:
                    cf:62:a2:ae:f6:9d:8c:24:09:17:1b:e0:0e:ed:2e:
                    ef:5d:67:71:fd:f6:12:c2:ea:99:7d:76:f0:57:65:
                    fb:8d:be:0b:31:4a:62:57:aa:95:eb:f2:6b:cc:ae:
                    e8:08:e5:56:0c:b9:2d:50:ef:6b:9a:eb:d3:3b:af:
                    b1:00:b9:e3:b7:fc:52:5d:b7:e8:43:aa:f3:33:63:
                    44:75:08:45:2f:68:f4:50:1f:d9:34:91:16:eb:7b:
                    7d:9e:65:9c:1d:16:64:78:36:b1:6b:c1:fe:ab:a2:
                    9b:7d:a1:7f:db:67:46:1e:a4:39:e1:d8:a8:24:4d:
                    eb:a9:1d:4e:ef:86:41:03:15:1f:e8:ad:ad:41:d7:
                    87:e0:ea:ab:f3:fa:86:c9:0a:17:61:92:f7:a6:bb:
                    4a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4F:F9:2D:B7:DF:29:65:DF:C8:DD:89:82:37:73:38:00:A1:D0:A1
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f5342ecb-711b-446c-8167-0d2a93e65bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c18::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:c2:6b:33:4c:a4:81:05:85:b2:bb:b7:15:54:24:df:01:cb:
         79:db:1b:a8:a6:87:3f:23:58:a4:f9:b1:93:6b:46:e2:db:bc:
         bb:04:9a:cd:55:6c:37:5d:88:d3:d8:38:4e:8f:53:d5:d0:6f:
         0b:60:c7:56:40:96:26:67:53:d2:40:ef:ea:6a:00:f2:9e:b0:
         ad:3f:c6:bb:0e:4d:a1:a5:47:f2:a6:6b:dd:95:72:3f:47:d7:
         dd:94:9f:f6:ea:e1:fe:42:1b:d9:85:8f:08:e6:80:2e:ee:ab:
         92:ab:28:84:af:d5:b0:d5:f6:60:98:19:aa:fb:32:9b:4a:07:
         f7:04:cc:39:9b:eb:36:2f:c0:c7:b5:ec:33:ea:3b:ee:33:b9:
         ad:99:4a:05:8e:a7:48:8f:c1:7d:52:db:76:64:f2:25:3a:dc:
         f6:a3:f9:06:37:7e:4c:61:e9:d2:67:90:d6:3d:0b:cb:e2:92:
         1a:a0:9b:56:a8:66:0e:cc:fa:b5:ba:81:1f:77:a6:8b:d4:47:
         49:93:d7:d3:8e:0f:ff:03:fe:bb:c1:39:44:4e:bb:e8:ef:d7:
         b5:96:ba:a5:ca:cc:fe:8c:9b:01:e8:68:14:37:62:d0:0a:7c:
         c6:8c:f8:c1:99:68:9b:c0:b5:01:6e:9c:54:bf:aa:7c:f5:cc:
         31:23:7f:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----