Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c8560206-4c68-46a6-834e-4971768d50f8.roa
File:                     c8560206-4c68-46a6-834e-4971768d50f8.roa (raw, json)
Hash identifier:          SFVR3kCCJ2OPZRUhrTf8sdqu7VLZ7b5SqBdrMNLa2QQ=
Subject key identifier:   F0:AB:77:CC:25:96:B6:AB:41:9F:12:55:A9:A4:FC:6C:6F:C1:AB:E8
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       47413441518D801995ED683F28E74BE5FBF08944
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c8560206-4c68-46a6-834e-4971768d50f8.roa
Signing time:             Sat 18 Jan 2025 00:00:00 +0000
ROA not before:           Sat 18 Jan 2025 00:00:00 +0000
ROA not after:            Sat 22 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:7b40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:41:34:41:51:8d:80:19:95:ed:68:3f:28:e7:4b:e5:fb:f0:89:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Jan 18 00:00:00 2025 GMT
            Not After : Feb 22 23:59:59 2025 GMT
        Subject: serialNumber=0e52b915aa6fe42495ef6324ace479f442084be238e153fefe19716d70cd6656, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:7e:c1:9c:15:e8:f1:ee:d4:61:9d:e7:7f:
                    71:99:c2:6e:e6:3e:04:f0:99:38:51:15:ca:07:29:
                    2e:04:b8:e2:e0:bb:3d:ce:0e:71:32:da:ee:57:99:
                    13:0f:cf:e4:f0:b3:33:28:0b:20:5e:c7:e6:82:bf:
                    3d:7f:1c:6e:c1:50:e1:11:2d:03:dd:e0:28:03:81:
                    e3:ca:f9:b6:e2:d9:08:cb:33:59:5a:4d:d6:b1:53:
                    59:29:b0:e1:e2:73:18:80:57:cb:1e:7d:c4:77:24:
                    a3:c9:6b:e1:1f:46:aa:98:1b:32:7e:1f:36:cb:51:
                    e5:52:f2:e8:d1:42:e7:cd:b9:d7:9c:16:07:cc:35:
                    31:c3:8c:e5:2b:1f:38:3e:0b:10:07:a1:01:f1:64:
                    2e:d1:ff:06:b1:a4:2d:63:f6:4a:3d:a0:b4:6b:dd:
                    06:57:22:19:4f:5e:fe:33:51:ca:de:81:6d:93:d2:
                    ca:f7:9f:d9:f6:81:33:9b:26:ea:7c:b6:61:2e:dc:
                    ec:e6:5e:e2:44:be:63:f2:f8:30:48:9d:e9:c7:a0:
                    64:b5:11:e0:11:6e:e5:05:0b:69:89:1e:03:2b:35:
                    97:5f:3c:e0:8f:64:f9:77:a3:09:86:ac:be:ef:6d:
                    d3:09:1f:3b:49:42:43:e5:63:72:ef:6c:22:6e:fe:
                    cd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AB:77:CC:25:96:B6:AB:41:9F:12:55:A9:A4:FC:6C:6F:C1:AB:E8
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c8560206-4c68-46a6-834e-4971768d50f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:66:ce:e4:c2:b2:38:ad:96:7a:33:fa:9b:7d:30:83:cd:ce:
         8c:1c:4f:37:5f:c3:c6:a1:06:f2:e8:97:37:f6:61:f1:5e:f4:
         1a:38:86:df:8b:14:cd:34:a5:27:cb:16:3e:ae:23:35:17:56:
         ce:a9:b5:6c:d5:e6:88:94:5d:7e:ae:7a:35:48:b2:47:52:9c:
         e3:ca:99:94:b6:90:4d:98:17:86:25:91:b2:22:fa:b2:c3:6c:
         45:de:87:ab:72:bf:8e:0a:3f:dd:04:b1:f8:3a:42:cd:f6:f4:
         92:3e:12:c4:1a:52:e1:f2:e1:70:e0:ee:ff:38:75:d0:e8:12:
         16:a8:35:97:c6:ea:79:03:63:50:72:51:4a:16:b4:20:e4:f7:
         5f:7b:43:e9:ff:37:c0:2b:66:7b:4f:6b:57:e0:4b:b2:54:ae:
         49:53:94:35:ec:e1:e6:ed:26:c2:99:d0:39:57:44:10:47:6d:
         15:df:99:ac:2c:7a:5f:cb:5a:ae:1b:fd:22:fb:54:5b:c4:cd:
         6a:8f:3d:59:ba:22:e4:ff:16:04:3c:d8:41:30:0a:8a:fb:65:
         29:e8:3a:bf:78:5a:37:be:4d:f1:fa:9d:26:4e:80:2d:67:cd:
         84:78:7e:ab:ca:19:62:f1:b6:2c:a7:df:e6:53:e9:e3:bf:cc:
         69:96:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----