Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/99405eb0-4160-4fa4-8459-f6adcb4cceb6.roa
File:                     99405eb0-4160-4fa4-8459-f6adcb4cceb6.roa (raw, json)
Hash identifier:          NRMXnFDiZqsQYbLSj5eQPXhio/t2Jqxk7FfIpFQg20w=
Subject key identifier:   08:EF:2F:B2:52:E6:5B:F5:F5:4A:84:FA:53:93:C3:25:31:79:B1:81
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       7A71383F355B0CB4D20522BA99CC09F8E87C83F4
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/99405eb0-4160-4fa4-8459-f6adcb4cceb6.roa
Signing time:             Fri 07 Mar 2025 15:00:54 +0000
ROA not before:           Fri 07 Mar 2025 15:00:54 +0000
ROA not after:            Fri 11 Apr 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:54a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:71:38:3f:35:5b:0c:b4:d2:05:22:ba:99:cc:09:f8:e8:7c:83:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Mar  7 15:00:54 2025 GMT
            Not After : Apr 11 23:59:59 2025 GMT
        Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:51:de:ab:06:61:d7:14:c4:ed:c1:13:3c:
                    ef:90:9c:13:8a:a2:c0:b5:83:18:bb:5e:f8:20:9b:
                    d8:15:40:3a:65:e7:14:01:4a:c3:38:3c:08:15:0c:
                    29:f0:3d:65:75:ca:97:ef:a1:36:be:d3:dc:31:37:
                    7d:d4:6a:a8:91:39:e2:9b:4c:aa:a9:ed:4b:37:6c:
                    67:6e:f9:9d:7a:b9:59:4c:a9:dc:43:ce:a2:f4:a4:
                    1b:22:64:6a:7b:e7:8d:35:e8:4a:49:ef:4f:80:6f:
                    a0:85:44:e5:06:ce:d5:85:77:8b:fe:02:ac:7e:7a:
                    01:29:05:c2:7f:72:5e:71:f9:b8:18:a9:bb:d6:e6:
                    94:5f:cd:6c:10:4f:6f:10:1c:de:21:35:a9:a4:a6:
                    ef:fd:25:b9:a9:a9:ac:e9:51:b7:25:6c:91:9b:60:
                    ec:6b:59:b3:2d:81:86:64:46:21:55:27:c6:d5:4b:
                    44:5f:09:d3:c8:a5:cf:03:c1:77:95:52:1d:0e:db:
                    79:9c:af:8e:cf:1b:d1:23:17:8a:03:dc:df:ab:27:
                    7e:fc:70:27:85:c1:b4:33:4e:2d:99:3e:26:95:7f:
                    35:64:3e:6f:bf:35:4b:82:c0:ff:39:30:de:01:1d:
                    9c:01:51:ef:2d:95:5c:59:23:38:03:33:1c:87:7a:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EF:2F:B2:52:E6:5B:F5:F5:4A:84:FA:53:93:C3:25:31:79:B1:81
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/99405eb0-4160-4fa4-8459-f6adcb4cceb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:54a::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:ea:d8:fe:ee:60:38:b3:17:3e:3a:b2:ba:87:70:8c:59:bb:
         d0:c4:67:8f:63:2e:90:7d:80:1a:51:bc:31:fe:b6:f6:02:f1:
         21:ef:b2:0d:d9:db:1c:fe:5e:68:6a:d0:37:2c:3c:eb:f1:94:
         dc:fe:bf:d0:32:36:ed:1c:73:bd:cf:04:5d:21:88:18:e3:f4:
         1f:73:30:34:5d:9b:0d:6c:e6:8c:6b:a2:3e:7d:fe:fc:e7:0f:
         01:18:8f:4c:69:37:54:1a:ac:c2:51:a3:7a:e1:c4:d9:db:ab:
         18:cf:0e:06:6d:6b:78:b2:fa:f0:47:c5:ef:5b:05:68:95:d4:
         d9:17:ff:ec:97:11:db:fb:87:e6:28:6e:57:3b:54:56:a3:68:
         91:64:8f:04:51:66:ed:8d:55:bb:ab:6f:2d:dc:1a:06:eb:10:
         18:52:10:8f:93:49:0b:28:a2:c8:6f:a4:7e:72:16:ab:8c:db:
         30:dd:1d:35:a0:c6:bd:f7:2b:32:5f:f9:9d:70:c1:38:18:3c:
         5e:48:76:e5:46:f5:42:9a:a0:fa:1f:a5:3d:bf:b0:96:38:d8:
         6f:64:c8:36:b8:9e:d5:29:6d:f1:a8:57:60:8c:84:3d:c4:71:
         37:76:eb:2f:8f:7e:d2:2c:b4:40:57:85:16:1c:2b:51:3a:1f:
         8a:d9:a8:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----