Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa
File:                     e7874585-f99e-4906-afcf-7069fe104b33.roa (raw, json)
Hash identifier:          X8AO20PB1ShNnA+ccQDAf0+duC8bnDl+ySoanuUq6DM=
Subject key identifier:   EE:D0:88:5F:24:73:97:D6:CC:3B:A9:26:9D:D1:4E:9D:94:AB:12:35
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       726659164FDBB2FFB05E63D0B603A041CEE02CEA
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa
Signing time:             Sat 25 Jan 2025 00:00:00 +0000
ROA not before:           Sat 25 Jan 2025 00:00:00 +0000
ROA not after:            Sat 01 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2620:107:300f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:66:59:16:4f:db:b2:ff:b0:5e:63:d0:b6:03:a0:41:ce:e0:2c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Jan 25 00:00:00 2025 GMT
            Not After : Mar  1 23:59:59 2025 GMT
        Subject: serialNumber=e30198fa2c54bd16d99d06c0bdabe961460ae8af46613e1a95d85ce6dd1efd5b, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:5a:2c:f7:cc:a2:92:2f:3e:eb:b5:f5:e0:
                    a4:0e:2a:43:c2:c1:b5:2c:7c:a4:26:31:a9:5b:ed:
                    7c:6e:29:18:eb:7d:69:39:ae:a0:33:15:1c:04:66:
                    5e:ac:75:b7:d1:76:f7:73:a1:28:9d:27:b5:54:4a:
                    12:9a:6a:e5:6d:fd:3f:31:49:d1:8d:4a:0d:52:a2:
                    ad:a2:a9:d2:fe:95:96:65:55:22:d9:87:89:91:eb:
                    9f:e8:43:41:95:60:ad:ec:79:ac:62:81:48:5f:92:
                    6b:36:ab:c4:b6:f6:3c:0e:e5:27:c9:3b:3b:d3:78:
                    37:59:cd:cd:ff:73:fa:e2:66:4e:22:06:ac:d5:fe:
                    66:ec:46:77:c7:26:a5:3d:88:9d:33:d9:2d:d0:84:
                    98:ef:bc:07:92:4b:93:40:55:52:3c:d0:54:b8:71:
                    0e:80:b9:90:f1:34:f5:26:89:9a:70:e7:41:d8:78:
                    0b:95:d7:62:74:c4:bb:56:3e:56:99:b5:78:58:cf:
                    95:b6:2c:4d:1e:e3:1b:27:af:38:7c:65:22:ba:91:
                    6a:72:24:08:52:cb:95:d0:60:d6:2a:34:b6:f5:5c:
                    5b:36:a5:91:e6:59:70:f1:1b:22:58:1a:63:20:68:
                    0d:dc:a1:9e:a3:a4:21:b2:10:7b:08:bc:58:3d:ac:
                    7f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D0:88:5F:24:73:97:D6:CC:3B:A9:26:9D:D1:4E:9D:94:AB:12:35
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:300f::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:ab:a4:dc:4e:41:5c:02:59:b0:b7:8f:76:19:33:87:9d:1b:
         ac:55:54:74:30:1e:62:12:92:c9:ff:12:d4:68:da:01:0e:4b:
         8f:59:44:8d:bc:6b:e4:2d:f4:0a:04:33:18:52:50:c6:3d:c2:
         63:70:7b:ed:51:0d:a4:51:0d:12:ca:6e:3e:cd:9a:69:1f:61:
         35:ba:80:7e:cf:9f:97:4f:0a:c0:2d:6a:de:0c:ca:70:de:36:
         a0:da:0d:88:94:61:53:a9:9d:68:67:22:e7:42:ec:ee:72:b1:
         30:0e:92:a0:51:d6:db:8a:99:b8:d3:c5:2e:93:ac:59:88:6a:
         11:4c:e4:44:1e:37:1b:99:27:1f:99:72:28:cd:bf:59:fb:d4:
         8e:1a:e7:f0:56:a1:aa:13:a4:96:df:c5:ef:e9:07:61:7e:d7:
         a7:67:f4:23:86:4f:fe:62:4a:d4:99:bb:8a:ac:c4:ac:aa:3e:
         51:a4:ac:79:4c:db:db:70:c8:f2:01:c1:a7:b7:84:da:45:c2:
         76:8b:ee:b2:fb:a2:b7:14:a8:b1:f1:31:45:75:22:d7:aa:5b:
         b9:4a:9b:78:73:8f:6d:db:01:3f:0f:cb:8c:9f:4f:4d:32:78:
         60:39:fc:b0:63:98:15:c5:a1:97:a2:f2:4f:32:62:4a:73:8b:
         09:14:31:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----