Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/a9bb901a-d78e-4bc0-bcc6-e4f964a9aba9.roa
File:                     a9bb901a-d78e-4bc0-bcc6-e4f964a9aba9.roa (raw, json)
Hash identifier:          v2ZReXsVjxENZNadWMC6Sjapruk7CCti/qUnFu8GMzo=
Subject key identifier:   DD:9E:5F:F1:75:FC:E9:68:F3:35:A2:8B:63:1B:D0:81:CC:51:C8:ED
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       73FCFFA0CDCDF0EFDD0D704BF7719D14B64B1E47
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/a9bb901a-d78e-4bc0-bcc6-e4f964a9aba9.roa
Signing time:             Fri 03 Jan 2025 00:00:00 +0000
ROA not before:           Fri 03 Jan 2025 00:00:00 +0000
ROA not after:            Fri 07 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2620:108:7000::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:fc:ff:a0:cd:cd:f0:ef:dd:0d:70:4b:f7:71:9d:14:b6:4b:1e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Jan  3 00:00:00 2025 GMT
            Not After : Feb  7 23:59:59 2025 GMT
        Subject: CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:d9:e2:33:d3:c9:7b:70:7d:50:2c:d5:e5:
                    04:8f:b8:1c:cf:68:88:74:cb:ef:a1:0a:7d:0c:59:
                    14:c0:7b:40:08:02:f3:59:45:03:82:95:e3:09:e6:
                    1c:a9:5d:2a:94:9f:4b:1b:3c:1a:6d:20:e2:15:61:
                    1e:2e:4e:09:0a:43:84:87:39:73:8a:da:d8:9d:a5:
                    0d:a4:b7:a5:c1:44:09:b3:3a:e0:d6:69:16:11:a6:
                    f7:54:7a:d4:52:8f:39:68:39:ec:e6:cd:14:d6:a5:
                    90:6a:50:79:cc:f5:81:d9:4e:2b:57:d8:21:3b:40:
                    a0:ff:e6:7f:f3:a4:ed:b2:e1:8d:18:c4:b4:50:ba:
                    8f:3b:45:11:24:c5:b7:91:e9:fe:78:44:91:20:b7:
                    1c:f8:f9:3f:b3:37:85:14:8e:f5:06:43:23:57:af:
                    b3:c1:43:3f:37:d7:da:d7:83:7d:2d:15:cc:3c:79:
                    64:9e:f8:46:6b:1e:fc:6d:68:54:63:f0:2e:3c:ff:
                    77:2e:bd:36:f7:21:69:f6:de:d9:57:3c:a1:66:5b:
                    16:ed:75:60:69:4b:7d:48:7b:37:fc:78:26:f8:7e:
                    94:a4:e0:27:41:f1:42:47:ef:7c:f4:bf:68:dd:e6:
                    a5:c7:89:61:a7:47:de:f5:10:5f:66:1b:58:97:a6:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9E:5F:F1:75:FC:E9:68:F3:35:A2:8B:63:1B:D0:81:CC:51:C8:ED
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/a9bb901a-d78e-4bc0-bcc6-e4f964a9aba9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:7000::/44

    Signature Algorithm: sha256WithRSAEncryption
         10:a6:a3:3a:6a:07:b6:15:eb:fe:1f:2f:cc:ff:fb:b4:2f:17:
         b6:c6:aa:ac:ad:01:66:38:f7:c0:5f:31:45:8f:8a:ea:c9:1e:
         0e:ce:e7:50:3e:1b:24:05:02:3a:00:84:9d:aa:58:ac:e3:fb:
         74:43:eb:1f:fc:0c:08:a6:f4:61:80:2b:95:0c:99:eb:5e:a2:
         d9:da:42:fb:4a:db:3e:7b:0c:24:20:d0:d5:ac:aa:15:91:5e:
         6b:6f:47:af:26:dc:7d:8e:07:c0:ad:99:8d:c6:79:b7:a2:4d:
         79:4b:4e:cc:28:bd:93:f6:d3:8b:8d:7d:ae:cf:24:bc:41:ed:
         1e:db:78:1c:a0:e7:76:1b:76:91:20:6c:f6:c9:66:36:83:4d:
         9e:68:76:bb:f2:e9:1f:b5:e8:22:fe:d6:b1:f9:1d:4c:9c:d8:
         49:ad:3e:2b:77:ed:64:95:30:c4:fa:56:5a:92:9b:c8:14:9e:
         6e:cf:db:2d:f5:db:3a:a2:92:80:0c:87:c9:cb:f6:9a:ce:a4:
         95:e3:e0:b2:c2:39:59:c5:89:91:b1:86:ec:5c:50:79:6e:68:
         f7:83:2e:6c:66:33:b9:c7:a8:08:a1:af:e6:28:62:54:3c:7b:
         75:be:af:0b:c7:99:01:d1:70:c1:fe:c1:61:df:3c:33:63:5e:
         75:d8:ec:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----