Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa
File:                     0ec55b55-70d8-4c9a-a949-98332400c54c.roa (raw, json)
Hash identifier:          g6aCp9/SCzJIKbAnah/TvmfLBmxKP7Uo3ml/1+r+Nfo=
Subject key identifier:   FF:83:83:A2:65:47:B3:E3:66:7B:9B:10:75:E6:C4:6F:70:30:A6:38
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       6D8F805E966C577D511AAFFFCE56E6C9353F792E
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2620:107:3000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8f:80:5e:96:6c:57:7d:51:1a:af:ff:ce:56:e6:c9:35:3f:79:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=2083a13c9b8c9ecf0ff0844e9dddec9068830c1d820186b5b3ddad3035c34296, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fd:2b:0e:9f:18:0d:a1:00:c6:e0:e6:74:64:
                    0b:4f:54:69:27:68:61:4d:66:33:9e:29:53:0e:95:
                    10:2a:1f:3b:16:3c:f5:9b:31:9e:0e:cf:a4:b1:3f:
                    00:68:7f:9f:59:f1:85:cc:9c:8e:0f:41:f6:56:f4:
                    e0:41:06:04:c4:57:de:bf:ea:91:8b:8f:d7:43:fc:
                    9b:4d:41:b7:fc:b1:2a:a7:2d:73:39:db:14:66:58:
                    64:f8:38:d3:97:fb:24:c5:a2:f3:78:8c:23:45:3e:
                    bf:35:c6:da:94:ff:46:00:68:4e:73:35:3a:96:13:
                    bb:90:3c:39:7d:a9:53:70:62:da:9a:73:b0:e4:a7:
                    04:02:32:31:7a:13:36:51:c9:43:1e:59:29:fd:c4:
                    2f:29:9b:65:8e:aa:c7:56:be:44:cd:f5:c5:ad:df:
                    05:4d:0c:bc:c1:93:b9:ae:5b:fc:1d:49:74:59:5a:
                    6a:ec:e9:5f:bb:a8:7c:8d:c2:2c:48:bc:52:b1:04:
                    89:bb:56:11:74:b9:28:1f:48:40:21:1e:cb:91:c4:
                    fe:fa:8e:c1:10:83:df:97:57:2e:1d:0d:56:06:dc:
                    6c:bf:c4:37:9f:cd:96:67:fb:0c:ba:aa:10:1f:3f:
                    d4:f4:78:53:55:97:19:47:4b:09:ca:50:63:4e:40:
                    3d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:83:83:A2:65:47:B3:E3:66:7B:9B:10:75:E6:C4:6F:70:30:A6:38
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:e0:7e:8d:7e:65:a6:47:74:f3:b9:60:8b:5c:fc:93:c1:9f:
         0b:08:59:71:00:6d:6d:0a:10:3d:b0:2e:ec:eb:4a:35:42:2f:
         da:ba:f2:52:be:cc:9a:c0:41:5d:80:18:81:27:ac:1d:d3:19:
         0b:c2:1a:b4:bb:4d:a9:53:65:65:9a:c0:46:1b:08:0f:d5:a1:
         53:f5:2c:23:e9:19:9b:9a:3a:24:b5:a3:94:83:c2:9e:d9:f5:
         d4:24:43:eb:ce:e1:c6:62:17:d2:60:5a:2a:40:fe:9b:0c:b9:
         41:8b:bd:d0:2a:83:ea:f6:7e:00:42:94:2d:a8:fc:1e:71:d4:
         d4:19:b4:09:f0:1b:9f:2e:f4:7d:6e:73:c6:78:39:55:2b:85:
         10:46:49:de:b5:78:5e:09:22:af:49:c0:06:8e:07:17:fa:15:
         7c:58:e6:93:11:f6:cb:53:5a:9b:2d:28:95:33:e9:4e:01:bc:
         5e:1b:0a:a0:ce:6d:ae:73:e7:cf:7d:8c:d2:77:3d:fb:ed:98:
         74:e5:64:52:23:0a:bb:8b:d5:e6:f9:80:32:b2:de:80:a5:e9:
         dc:91:0a:3b:9e:e0:dd:70:6e:dc:53:e6:71:a3:85:b0:70:cb:
         eb:53:e6:4c:59:e4:d9:4b:26:c3:f0:c7:de:41:b6:15:8f:87:
         b0:3b:d2:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----