Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/7a1043c1-c73c-4a4a-9847-51bac031181c.roa
File:                     7a1043c1-c73c-4a4a-9847-51bac031181c.roa (raw, json)
Hash identifier:          YxBrJsV+zkgfzVsDw/VdH8yKO9P724jmWFv9DLDP9Zs=
Subject key identifier:   A9:A0:78:AC:3F:B2:B5:C9:DE:65:13:2A:81:3E:12:74:EE:AF:3E:FE
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       672A901EF27FBC020F4D98009978838EAD15C9AC
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/7a1043c1-c73c-4a4a-9847-51bac031181c.roa
Signing time:             Tue 17 Dec 2024 00:00:00 +0000
ROA not before:           Tue 17 Dec 2024 00:00:00 +0000
ROA not after:            Tue 21 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2620:107:3000::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2a:90:1e:f2:7f:bc:02:0f:4d:98:00:99:78:83:8e:ad:15:c9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Dec 17 00:00:00 2024 GMT
            Not After : Jan 21 23:59:59 2025 GMT
        Subject: CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:81:3b:70:86:a0:ef:9e:e0:3d:d3:21:4a:
                    6c:d4:65:cb:3f:20:26:b4:c9:37:15:af:e1:a4:bd:
                    36:fa:f3:1c:52:4c:cd:87:9e:cc:6f:45:84:b8:0e:
                    32:67:20:0b:c6:7f:68:e4:04:27:31:c1:b8:d5:6f:
                    26:46:a5:d1:c8:4f:49:d8:4d:93:fe:31:93:ab:dc:
                    65:16:9e:eb:6e:43:83:fc:a2:92:54:55:85:d6:18:
                    ef:e3:1e:82:3e:01:a5:b8:f0:26:ff:b5:f4:58:24:
                    bc:ba:d1:92:30:8b:75:82:c4:59:77:2e:b9:50:08:
                    ef:27:3c:2a:8d:12:be:2a:64:8b:03:43:1a:6a:47:
                    e3:5f:3d:ca:fc:aa:99:97:f0:73:84:90:eb:8f:4b:
                    59:30:1a:f2:a0:58:b3:c0:c0:fe:73:54:64:c8:94:
                    63:aa:b0:79:89:07:23:55:0d:41:a3:ad:ae:5b:25:
                    4f:15:86:53:83:7b:a3:2c:c6:e2:f1:78:e8:a5:03:
                    33:23:88:f1:a6:ea:a5:9a:69:e0:87:58:85:08:fc:
                    28:d2:39:f2:50:ef:e2:d6:ef:90:08:8d:64:c5:5f:
                    dc:d8:da:40:dc:53:27:6b:65:60:25:5f:e9:32:2a:
                    38:20:cf:4a:e7:e3:79:06:9f:51:7d:5c:48:88:13:
                    52:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A0:78:AC:3F:B2:B5:C9:DE:65:13:2A:81:3E:12:74:EE:AF:3E:FE
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/7a1043c1-c73c-4a4a-9847-51bac031181c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:3000::/44

    Signature Algorithm: sha256WithRSAEncryption
         a2:6f:4f:6c:da:65:4a:b5:ad:42:25:bb:48:8f:65:14:a3:38:
         76:54:11:e2:97:91:1d:cd:07:aa:ec:a2:80:d4:d6:a4:de:79:
         15:b5:d6:74:38:eb:ce:e4:bf:d3:9e:ab:dc:1b:d1:93:14:bd:
         fe:79:3c:c3:01:9d:5b:76:52:65:2b:e2:9d:dd:dc:e5:7c:6d:
         95:14:ae:70:4d:a1:84:a2:bd:21:e1:53:00:b6:91:69:77:20:
         52:73:8a:29:b5:18:fa:68:9d:ba:32:f8:29:93:1d:77:b8:84:
         15:c6:c1:0e:08:31:58:ed:6e:c6:80:04:8e:9a:ad:81:37:83:
         d1:cc:c7:39:61:5f:0f:e4:16:ff:b5:a6:a6:f9:6d:0d:52:84:
         87:a8:a7:d4:f7:5c:01:1c:c4:cb:46:af:96:6a:2d:f8:76:48:
         08:76:4d:c2:9a:36:79:69:2f:c3:1b:77:20:66:63:12:36:e7:
         7f:27:73:bb:6d:df:4b:aa:7d:ab:15:96:2e:86:c7:3f:7f:29:
         9f:5d:a1:a1:3e:bb:cc:78:cc:b5:b7:e7:59:93:dd:3a:12:69:
         1b:d6:ca:41:2a:1f:71:2f:18:43:d6:e8:1d:b5:2c:0e:8c:89:
         ed:ad:db:24:7b:4d:72:df:33:a5:b5:9a:fb:ea:d5:ff:ea:23:
         16:c1:e0:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----