Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/7b42a858-c151-4232-9c6a-fac95474a828.roa
File:                     7b42a858-c151-4232-9c6a-fac95474a828.roa (raw, json)
Hash identifier:          UddL8+WG18OoLxCJecf7NIaEzPUyfvZjb6iG5XQ8GN8=
Subject key identifier:   6C:95:14:76:2A:89:E0:3D:60:AA:B7:C1:FA:E0:D0:8B:17:9F:C0:54
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       585446199EBA1131E1BF84AC98166C6E13EF4D5C
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/7b42a858-c151-4232-9c6a-fac95474a828.roa
Signing time:             Tue 10 Dec 2024 00:00:00 +0000
ROA not before:           Tue 10 Dec 2024 00:00:00 +0000
ROA not after:            Tue 14 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:f40:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:54:46:19:9e:ba:11:31:e1:bf:84:ac:98:16:6c:6e:13:ef:4d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Dec 10 00:00:00 2024 GMT
            Not After : Jan 14 23:59:59 2025 GMT
        Subject: serialNumber=442414e37c3a524acf78f66840394f9add48cd4e36b7461112b4270ad09ae515, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:d8:fa:99:04:3d:b5:37:68:08:6b:f3:b1:
                    90:9e:76:b1:9e:ea:25:62:cd:47:86:36:ae:18:9f:
                    17:61:ff:09:a1:db:21:85:79:2f:06:bf:e5:e9:0f:
                    82:65:67:52:f5:8f:a4:5d:81:b0:1d:56:05:87:8b:
                    ed:70:37:78:17:5f:e8:c1:d4:0f:56:8f:5e:96:05:
                    84:5d:f1:52:6f:ff:2f:87:09:6f:9d:56:4e:2a:d3:
                    cf:21:47:16:d1:61:c0:94:66:4f:90:fb:e2:94:d0:
                    2f:f5:a8:da:0a:b1:c7:6c:d2:dd:28:49:16:2c:71:
                    d6:0e:3b:39:8d:3c:e6:9e:20:2c:61:26:44:05:f0:
                    5e:9c:77:52:54:91:7b:b1:e6:7f:d9:5c:3d:bb:3f:
                    3a:7e:bf:98:35:e9:4f:45:0a:8f:57:6d:c9:92:1e:
                    b6:fe:ad:13:38:d0:6a:25:13:82:e7:3c:67:18:a9:
                    a9:bc:ef:df:b1:bc:a9:1f:5f:b1:8e:67:bd:88:a3:
                    36:70:5c:bf:5c:65:55:36:02:15:c1:ad:1c:c7:37:
                    e7:1d:71:07:6d:8f:f8:fd:0d:9b:8b:b6:55:46:2d:
                    58:10:b3:4c:be:75:36:84:90:15:e5:6f:e9:72:92:
                    f6:fc:7b:80:9d:a9:e7:2c:95:4e:e3:ff:e3:29:54:
                    be:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:95:14:76:2A:89:E0:3D:60:AA:B7:C1:FA:E0:D0:8B:17:9F:C0:54
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/7b42a858-c151-4232-9c6a-fac95474a828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:0d:96:40:50:2a:48:21:27:6c:1a:5f:52:fc:c8:fc:c5:42:
         c5:2b:8b:aa:6c:fc:7a:5b:60:ee:85:58:c0:61:3f:2b:9f:2e:
         01:b9:ad:80:4e:73:bc:09:f5:04:d9:7b:b0:59:91:52:0b:72:
         9f:7a:c6:15:32:2f:95:40:40:52:9d:02:d2:b3:3e:fd:92:05:
         9c:6a:f5:4b:87:ed:e6:46:b0:93:24:78:63:96:11:65:2e:1f:
         98:82:e0:2b:01:b4:63:d2:4c:ce:f9:50:14:6a:a2:55:ee:1b:
         41:f8:ee:dc:35:0d:5e:8d:5a:c8:79:ae:20:13:06:f9:68:ee:
         90:82:07:33:5e:e5:20:c1:93:cc:35:7b:ea:d6:48:22:cd:95:
         f3:e0:b5:66:71:ec:42:3a:7a:e0:7b:1e:56:39:a3:d7:65:25:
         92:49:45:bf:9a:82:ac:5d:4b:cf:2a:d2:35:ca:78:c8:98:ba:
         db:9f:a2:cc:91:31:40:a9:57:e3:42:51:37:e6:4a:8a:c6:6c:
         ed:ce:77:08:ff:fd:32:76:d7:85:1f:5d:73:95:08:55:e3:43:
         1a:01:f9:ef:de:f9:79:f8:f0:f6:70:a7:28:4b:4c:d1:55:a9:
         a5:3f:36:dc:df:6b:1e:f1:00:5f:90:c0:0d:64:1a:74:88:4d:
         4e:23:a5:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----