Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/65ea263d-892a-4498-ad3d-884b258d30d6.roa
File:                     65ea263d-892a-4498-ad3d-884b258d30d6.roa (raw, json)
Hash identifier:          dx51Pt9YXlz7kTUv+zNUYSzjI0AwXItKmpbUWZAx278=
Subject key identifier:   05:1D:4A:73:0B:BB:DF:08:58:FA:CA:38:2B:73:D0:87:2A:01:E9:E9
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5407121EB1635A8F3BC803C5D851AD9FD860EB39
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/65ea263d-892a-4498-ad3d-884b258d30d6.roa
Signing time:             Mon 17 Mar 2025 15:31:04 +0000
ROA not before:           Mon 17 Mar 2025 15:31:04 +0000
ROA not after:            Mon 21 Apr 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:c0c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:07:12:1e:b1:63:5a:8f:3b:c8:03:c5:d8:51:ad:9f:d8:60:eb:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Mar 17 15:31:04 2025 GMT
            Not After : Apr 21 23:59:59 2025 GMT
        Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8a:8f:9a:ad:e2:08:b3:0f:55:56:16:c3:40:
                    31:3b:5e:cb:d2:d3:b3:df:1a:4e:8e:80:1f:6f:85:
                    39:5e:f4:e2:b7:26:3c:0a:c7:15:e1:17:90:4e:40:
                    5e:d5:c3:da:3c:c6:e9:cf:e4:ff:22:5d:5d:38:0c:
                    9b:a7:cc:5a:bb:31:fa:b7:6a:43:7e:fb:10:b5:09:
                    fc:49:de:26:b8:ca:f3:de:88:6d:6c:eb:1f:05:00:
                    0a:c9:21:02:72:01:da:3a:48:4e:f8:f9:45:6e:24:
                    94:8f:95:1e:1d:19:c3:d5:00:ba:09:46:ac:65:49:
                    d3:c1:c1:5f:62:8b:54:51:06:88:a2:ab:c9:93:82:
                    69:47:6c:37:90:20:db:99:a6:38:3c:5e:b1:ad:90:
                    00:06:e7:b2:5b:b1:a0:73:47:3a:09:94:89:48:8f:
                    cc:c2:bb:c1:86:f3:f0:18:31:40:81:ae:7d:b7:fe:
                    75:ff:a4:b6:3c:5a:b4:43:b0:c5:b7:d2:7c:de:f9:
                    dc:63:fb:14:d3:03:39:00:e9:de:b4:ff:09:0d:9f:
                    a7:18:61:c7:b5:0e:78:7f:6d:05:20:1b:2d:2c:b2:
                    6f:b6:a8:95:4d:ea:fa:4a:fe:9e:8f:ff:0f:cb:1b:
                    bb:14:be:46:a1:36:4c:12:79:d3:c7:17:d7:f7:ef:
                    78:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1D:4A:73:0B:BB:DF:08:58:FA:CA:38:2B:73:D0:87:2A:01:E9:E9
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/65ea263d-892a-4498-ad3d-884b258d30d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:6b:cd:b6:9d:b9:34:6f:e4:1a:59:de:4f:4c:f3:10:86:ed:
         31:2c:84:bd:49:01:d6:ab:72:0b:7c:33:6d:c1:34:aa:7d:e9:
         f1:49:49:a8:0d:00:c6:92:ab:2e:ff:4e:3c:86:fd:5d:48:4e:
         c7:18:a8:d3:db:e3:f6:ab:11:f3:ed:e3:57:07:a7:73:4e:84:
         a8:01:9c:c2:e4:06:0d:81:11:9a:e0:cc:d0:f0:84:de:42:51:
         b8:2c:90:0a:12:a3:d1:22:b4:40:43:08:c3:91:92:c7:85:2a:
         5d:bf:87:00:27:53:6b:a5:e5:29:de:15:a1:f7:9e:41:4f:35:
         37:07:a5:b0:15:a3:c6:3e:e7:0f:bf:68:c3:8e:1e:77:e2:aa:
         5d:03:fd:a8:3b:a9:20:bf:3b:b8:56:ba:d0:19:23:93:9a:04:
         6a:91:58:93:9e:f2:46:49:c5:2b:d1:f0:00:f8:0e:9e:29:a0:
         26:19:fa:78:88:51:54:fe:b5:61:ca:18:9b:18:63:50:4f:89:
         78:7c:b3:a9:02:ee:db:26:e9:ab:7e:c3:38:f6:8f:1b:bf:af:
         8d:7a:61:e4:bd:2e:56:46:74:e0:2d:9b:23:7e:63:fd:a2:b4:
         d7:d0:57:f4:39:8e:ac:02:6a:f3:b0:8e:44:a8:23:01:c7:57:
         a7:bf:88:43
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVAcSHrFjWo87yAPF2FGtn9hg6zkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzE3MTUzMTA0WhcNMjUwNDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MjFjMWUzMTFiMmIzZTMyMmY1MTU5M2Q2YTkyODljOTcy
N2VhMTZjMjgzZjNjNzcwYTZkN2UzMmMzMGI2NjI1MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCGio+areIIsw9VVhbDQDE7XsvS07PfGk6OgB9vhTle9OK3
JjwKxxXhF5BOQF7Vw9o8xunP5P8iXV04DJunzFq7Mfq3akN++xC1CfxJ3ia4yvPe
iG1s6x8FAArJIQJyAdo6SE74+UVuJJSPlR4dGcPVALoJRqxlSdPBwV9ii1RRBoii
q8mTgmlHbDeQINuZpjg8XrGtkAAG57JbsaBzRzoJlIlIj8zCu8GG8/AYMUCBrn23
/nX/pLY8WrRDsMW30nze+dxj+xTTAzkA6d60/wkNn6cYYce1Dnh/bQUgGy0ssm+2
qJVN6vpK/p6P/w/LG7sUvkahNkwSedPHF9f373jbAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUBR1Kcwu73whY+so4K3PQhyoB6ekwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzY1ZWEyNjNkLTg5MmEtNDQ5OC1hZDNkLTg4NGIyNThkMzBkNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzADAwwDQYJKoZIhvcNAQELBQADggEBAKxrzbaduTRv5BpZ3k9M8xCG
7TEshL1JAdarcgt8M23BNKp96fFJSagNAMaSqy7/TjyG/V1ITscYqNPb4/arEfPt
41cHp3NOhKgBnMLkBg2BEZrgzNDwhN5CUbgskAoSo9EitEBDCMORkseFKl2/hwAn
U2ul5SneFaH3nkFPNTcHpbAVo8Y+5w+/aMOOHnfiql0D/ag7qSC/O7hWutAZI5Oa
BGqRWJOe8kZJxSvR8AD4Dp4poCYZ+niIUVT+tWHKGJsYY1BPiXh8s6kC7tsm6at+
wzj2jxu/r416YeS9LlZGdOAtmyN+Y/2itNfQV/Q5jqwCavOwjkSoIwHHV6e/iEM=
-----END CERTIFICATE-----