Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa
File:                     2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa (raw, json)
Hash identifier:          UBWsAv8QWh2cEHPXHwcd4XCoO0Ujl1vthN6yDQzPHak=
Subject key identifier:   54:AD:49:4F:12:F3:32:CF:32:87:A2:8D:82:38:63:14:6D:37:05:C8
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       1C505000EF7F7293B57F42E7FA9F5E7D87E0DEDD
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa
Signing time:             Sat 18 Jan 2025 00:00:00 +0000
ROA not before:           Sat 18 Jan 2025 00:00:00 +0000
ROA not after:            Sat 22 Feb 2025 23:59:59 +0000
asID:                     699
IP address blocks:        2606:7b40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:50:50:00:ef:7f:72:93:b5:7f:42:e7:fa:9f:5e:7d:87:e0:de:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Jan 18 00:00:00 2025 GMT
            Not After : Feb 22 23:59:59 2025 GMT
        Subject: serialNumber=a37ff42870a25844c24b287383fdaf34c6fc76c6efcfcda45d488f6cb4affbe0, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:1f:fd:10:cd:10:c0:94:a4:64:75:76:46:
                    89:63:02:b5:b6:c7:1e:e8:19:ad:fe:64:2a:45:af:
                    c8:89:41:32:eb:aa:3f:38:f9:88:5e:43:70:9f:4a:
                    9a:94:82:ed:a8:14:be:e7:6c:0c:5c:53:f0:63:5c:
                    b4:19:fc:84:de:d6:3a:2a:df:dd:e0:c3:20:42:e7:
                    41:83:b2:3f:d6:59:c3:ce:10:90:93:2e:81:a9:b0:
                    2a:2c:c9:a6:5c:e6:c3:f5:4b:76:3e:2f:27:b2:f5:
                    3e:1a:78:22:09:e3:b8:9f:25:7d:e1:e0:42:4d:fd:
                    e7:92:f3:09:05:c3:34:30:e5:62:bd:76:95:fb:87:
                    01:57:3a:4f:b8:70:37:a3:22:f4:62:cb:5a:04:14:
                    01:58:9f:21:f0:66:67:3a:7b:ad:ca:93:a9:8c:4b:
                    8a:20:a0:5f:c3:c4:41:f9:e0:f0:bf:4d:56:82:39:
                    65:ae:7b:ba:33:b5:92:15:71:9d:1b:64:d2:b6:01:
                    b8:fd:c8:bb:4d:88:96:18:a2:b5:61:f9:7b:81:79:
                    0a:27:c2:9b:ed:83:4f:ca:5e:f3:61:64:51:25:f4:
                    4c:3f:11:65:12:d5:4f:30:90:a3:55:8a:e8:b6:73:
                    d4:45:5d:8d:06:ce:c5:03:7a:ec:e7:22:60:5a:bb:
                    3b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AD:49:4F:12:F3:32:CF:32:87:A2:8D:82:38:63:14:6D:37:05:C8
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:51:0d:be:70:03:b9:aa:ad:1a:97:a1:e3:cb:1e:1c:8a:3c:
         71:bb:77:36:d9:71:bf:c9:23:eb:b8:40:6f:41:82:c9:cb:41:
         c1:ab:a6:73:1c:db:0b:7e:43:5b:c1:eb:cd:59:f8:49:6d:84:
         bf:86:1f:17:fe:bd:a1:7c:b1:80:b3:3c:23:49:57:2a:33:b4:
         bb:d6:80:c2:d2:ee:1e:a7:9f:ed:fc:87:09:a5:ca:48:ac:60:
         2d:8f:3b:06:12:bc:a1:60:4d:d6:f6:89:1a:96:48:86:12:d5:
         46:20:4b:ad:50:5f:d9:4d:f2:10:61:75:ee:05:8b:93:6e:89:
         b5:f7:2a:08:42:01:41:09:e0:52:e5:03:ae:b7:1d:39:fa:76:
         3f:5f:be:4d:65:db:7f:99:5a:e8:15:aa:02:fb:71:da:a8:fb:
         e3:48:54:04:1a:2a:e1:88:a0:f6:58:71:cc:83:f9:4d:e7:f4:
         eb:2c:40:14:34:e4:4a:60:ee:99:c4:e3:90:40:ad:c0:92:d6:
         64:7d:c3:0a:07:65:c1:f0:e2:fc:1e:55:f1:15:05:8d:de:61:
         40:ba:a7:cf:4a:5d:96:c1:0d:a0:db:92:0a:ca:c6:6a:77:a9:
         39:29:ac:cd:bd:1c:69:0b:d4:62:9c:07:f3:f2:b5:59:7d:18:
         71:59:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----