Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69e662e9-4f04-437e-8d50-872b6ccc4fbd.roa
File:                     69e662e9-4f04-437e-8d50-872b6ccc4fbd.roa (raw, json)
Hash identifier:          TCOhR4AcubGA7PQztfj/W4ePkYWedDsT8PL87rFLiqs=
Subject key identifier:   00:9D:49:31:11:B8:51:80:57:77:E6:DE:E2:60:BA:11:61:CC:39:D7
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       68A9A87B005A802AF012347F9A4F3FF90552E1D1
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69e662e9-4f04-437e-8d50-872b6ccc4fbd.roa
Signing time:             Fri 07 Mar 2025 00:50:45 +0000
ROA not before:           Fri 07 Mar 2025 00:50:45 +0000
ROA not after:            Fri 11 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:30c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a9:a8:7b:00:5a:80:2a:f0:12:34:7f:9a:4f:3f:f9:05:52:e1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Mar  7 00:50:45 2025 GMT
            Not After : Apr 11 23:59:59 2025 GMT
        Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:03:90:98:f2:2e:63:de:58:5f:0a:1d:3f:f7:
                    9d:a7:6b:1b:28:0c:3d:f6:ee:21:df:d8:3c:f0:5f:
                    e2:c6:3c:32:e7:63:78:ff:f1:dd:b9:05:71:47:c7:
                    52:6c:45:cc:71:ac:3c:23:59:84:45:b4:03:b0:69:
                    0e:e1:93:fe:07:bd:5a:fb:15:c3:4a:c2:23:13:39:
                    d0:49:bd:38:76:67:af:75:2d:ba:ed:04:39:bb:25:
                    5c:b1:1d:ad:10:34:60:b5:e1:08:f2:b4:cb:69:1f:
                    d2:04:64:9b:5e:ef:e8:81:76:1f:bf:48:7d:e0:e3:
                    f0:a3:44:8b:94:75:d4:4b:15:79:b2:a5:52:61:ff:
                    d9:29:b4:16:c3:d3:bf:6f:cc:0d:39:a6:1d:f6:67:
                    a2:27:67:2e:d3:e3:5c:6a:b3:42:cd:78:43:8b:03:
                    21:79:52:c4:6d:16:a2:5e:1b:e8:70:4a:55:ba:08:
                    13:6e:84:1f:c0:71:e1:70:ec:dc:b2:ef:57:38:2d:
                    83:8f:67:8f:29:aa:7e:6d:7f:49:76:c2:50:fd:fc:
                    cd:2b:51:b5:4e:96:c4:8e:ff:a9:65:dd:58:0d:31:
                    ce:7f:34:9f:f9:43:01:dd:97:3c:e5:60:58:87:96:
                    5e:a0:66:79:73:fd:4b:26:70:27:a2:b4:ee:d0:a5:
                    1a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9D:49:31:11:B8:51:80:57:77:E6:DE:E2:60:BA:11:61:CC:39:D7
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69e662e9-4f04-437e-8d50-872b6ccc4fbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:30c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:b1:64:05:2a:3a:68:65:52:03:02:cf:4b:fd:c7:aa:09:4b:
         c2:35:8b:33:47:b8:0b:8d:34:5b:64:9e:48:16:ce:a1:a6:7e:
         9b:44:ab:9d:23:b5:ef:b2:a8:63:38:2e:f2:a4:1b:c8:00:76:
         2c:58:49:5b:bb:dd:ed:4e:52:95:0c:54:ea:6e:82:17:15:3c:
         a7:25:f7:17:85:7e:9f:65:26:b5:5c:73:2a:11:b1:59:6e:00:
         00:e7:1d:1e:42:3f:f7:4d:a4:ce:03:74:f1:16:82:43:db:e2:
         1e:b6:89:75:bb:4e:74:9c:4b:38:ee:a0:46:f6:f1:4a:02:53:
         20:c8:20:fe:f7:a5:f5:41:29:00:7f:1e:8d:3b:56:dc:13:8c:
         22:6a:6c:c9:4c:07:49:62:10:78:45:37:8a:ee:70:b4:c5:71:
         cf:e5:69:26:4f:bd:22:46:c7:6a:9b:c5:44:7c:a8:06:aa:36:
         4d:43:e6:06:77:cc:b5:43:d8:42:9d:02:f8:37:b1:fd:dc:9d:
         9e:86:08:90:e9:6b:78:56:d3:fa:5a:0d:86:78:34:86:8f:29:
         09:21:c8:c7:eb:f3:2b:30:86:76:99:c3:f8:df:7d:18:15:a2:
         7d:23:1f:7d:a1:3c:b4:f6:02:c8:f1:c2:8b:b7:0c:b4:41:aa:
         fd:97:cd:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----