Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa
File:                     9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (raw, json)
Hash identifier:          Vj6rJEhMtUkJ+CNH4GPJvlo1SbPMZO0j/df4faitVmg=
Subject key identifier:   13:43:65:DE:82:24:84:01:8B:C7:CF:59:2F:91:C4:BF:0E:13:D8:09
Certificate issuer:       /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial:       17D75080505740816DA9EB391059E728FDE62FCE
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa
Signing time:             Fri 31 Jan 2025 00:00:00 +0000
ROA not before:           Fri 31 Jan 2025 00:00:00 +0000
ROA not after:            Fri 07 Mar 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:b140::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d7:50:80:50:57:40:81:6d:a9:eb:39:10:59:e7:28:fd:e6:2f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
        Validity
            Not Before: Jan 31 00:00:00 2025 GMT
            Not After : Mar  7 23:59:59 2025 GMT
        Subject: serialNumber=ea9f085f76e0b8539455d89a25c0c8743a449315e488ce3b2993191e45f5026e, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:1a:b7:56:a7:40:77:b4:76:f2:ee:9b:7d:
                    40:17:c3:2d:9a:08:be:49:b1:59:1f:36:c0:6d:40:
                    b4:8d:a2:f4:91:40:af:50:07:84:e5:c5:d4:02:26:
                    96:b6:40:27:a5:79:00:39:a2:42:7f:0b:fd:83:de:
                    77:0d:6d:d9:c2:a9:70:f3:8d:2e:74:67:c0:3b:6f:
                    c9:f1:e0:5e:c8:a7:55:8f:3e:64:88:be:51:2d:24:
                    2f:97:c9:c9:e5:f9:47:7d:be:4b:40:d2:16:3e:f8:
                    b8:f5:b9:0f:91:da:46:de:a6:71:38:33:74:d4:52:
                    ee:e6:8e:4a:49:5c:bf:2f:d3:44:cc:ad:fa:91:f0:
                    ff:62:16:87:14:43:2b:08:61:07:11:c8:75:8d:4d:
                    fd:47:28:2a:43:f1:40:6e:44:33:a9:9c:6c:cd:f5:
                    c3:5a:eb:c6:5b:d9:b0:e9:f3:94:3e:cd:f7:8d:35:
                    ae:ff:ce:c0:de:07:76:a4:2e:23:03:cd:e2:4f:11:
                    ca:da:31:8e:c8:9a:bb:2d:be:9b:e5:ed:2d:66:31:
                    7a:e4:dc:97:24:7b:00:df:3b:d1:4b:cd:25:17:df:
                    04:35:0a:1a:4c:94:3d:b7:20:ab:91:5d:c0:6b:34:
                    12:ae:a0:2e:36:8b:54:81:5e:79:6a:21:2c:25:7d:
                    d7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:43:65:DE:82:24:84:01:8B:C7:CF:59:2F:91:C4:BF:0E:13:D8:09
            X509v3 Authority Key Identifier:
                keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:31:9c:ea:00:ce:47:93:1d:d5:cd:eb:4f:83:c9:36:66:44:
         b9:f5:53:2a:6d:fc:58:eb:76:f9:93:14:f3:6d:a2:f7:66:6c:
         9c:a8:7a:9b:1b:96:3f:21:b7:12:e9:dd:97:e2:9e:b6:3e:90:
         e1:6f:18:98:a6:46:eb:c5:c0:7b:6e:cd:2e:77:c3:0d:c4:5d:
         16:12:1f:f5:e0:c8:53:f7:54:7b:44:a8:0c:af:e6:cf:99:d0:
         83:c5:b5:b7:18:19:6a:ee:e9:cb:c4:5b:c7:f7:d1:9f:2c:ca:
         d3:2a:40:a4:b3:5c:46:ad:4a:e8:10:5c:2e:27:5c:d4:19:9c:
         5b:85:e0:49:91:5e:c2:b9:ed:8b:28:a2:92:bf:c2:21:38:9f:
         5e:bb:bd:c8:c1:70:25:39:59:30:c5:9c:bf:89:b0:9e:17:2d:
         c5:0d:7c:18:dd:40:7b:6a:7f:0d:5e:69:9a:5b:6a:c3:e8:85:
         07:92:5b:1d:1d:e7:09:fe:08:fd:8d:5d:53:a8:c3:dd:ab:f0:
         5f:0f:4d:ac:80:5b:13:23:1b:13:bd:98:92:6a:dd:5e:83:e5:
         03:32:d3:9e:c2:a0:68:44:56:1c:c0:7e:e7:fb:12:5e:72:b7:
         55:b4:11:95:c8:de:bf:3c:e9:70:17:e1:42:df:62:1d:2a:3a:
         16:8a:d4:a2
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIUF9dQgFBXQIFtqes5EFnnKP3mL84wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi
NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYTlmMDg1Zjc2ZTBiODUzOTQ1NWQ4OWEyNWMwYzg3NDNh
NDQ5MzE1ZTQ4OGNlM2IyOTkzMTkxZTQ1ZjUwMjZlMS0wKwYDVQQDEyRiMGRiYmI2
YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvqBq3VqdAd7R28u6bfUAXwy2aCL5JsVkfNsBtQLSNovSR
QK9QB4TlxdQCJpa2QCeleQA5okJ/C/2D3ncNbdnCqXDzjS50Z8A7b8nx4F7Ip1WP
PmSIvlEtJC+Xycnl+Ud9vktA0hY++Lj1uQ+R2kbepnE4M3TUUu7mjkpJXL8v00TM
rfqR8P9iFocUQysIYQcRyHWNTf1HKCpD8UBuRDOpnGzN9cNa68Zb2bDp85Q+zfeN
Na7/zsDeB3akLiMDzeJPEcraMY7Imrstvpvl7S1mMXrk3JckewDfO9FLzSUX3wQ1
ChpMlD23IKuRXcBrNBKuoC42i1SBXnlqISwlfdebAgMBAAGjggKyMIICrjAdBgNV
HQ4EFgQUE0Nl3oIkhAGLx89ZL5HEvw4T2AkwHwYDVR0jBBgwFoAUfYRHxJeKC0xz
m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z
NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi
ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1
MmM1MzUzODk4LzkzMThlZmMzLTRkM2EtNDEzZi04NmM2LTE2OWE3MWQyZWNjYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3
LWQwNTJjNTM1Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC
MAcDBQAmBbFAMA0GCSqGSIb3DQEBCwUAA4IBAQB+MZzqAM5Hkx3VzetPg8k2ZkS5
9VMqbfxY63b5kxTzbaL3ZmycqHqbG5Y/IbcS6d2X4p62PpDhbxiYpkbrxcB7bs0u
d8MNxF0WEh/14MhT91R7RKgMr+bPmdCDxbW3GBlq7unLxFvH99GfLMrTKkCks1xG
rUroEFwuJ1zUGZxbheBJkV7Cue2LKKKSv8IhOJ9eu73IwXAlOVkwxZy/ibCeFy3F
DXwY3UB7an8NXmmaW2rD6IUHklsdHecJ/gj9jV1TqMPdq/BfD02sgFsTIxsTvZiS
at1eg+UDMtOewqBoRFYcwH7n+xJecrdVtBGVyN6/POlwF+FC32IdKjoWitSi
-----END CERTIFICATE-----