Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1e269d38-4454-4adc-9773-b958fab1020e.roa
File:                     1e269d38-4454-4adc-9773-b958fab1020e.roa (raw, json)
Hash identifier:          ALoF0rAanQyz+vVnYtz9zqrwhpOtZmG66+2YDa6+Um4=
Subject key identifier:   6B:E0:CC:2E:80:37:E9:6A:A9:32:CB:87:67:6C:FC:F9:08:1B:B7:20
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       755364CDA9A50CC90FE5141779737ADA05CC5B6B
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1e269d38-4454-4adc-9773-b958fab1020e.roa
Signing time:             Mon 09 Dec 2024 00:00:00 +0000
ROA not before:           Mon 09 Dec 2024 00:00:00 +0000
ROA not after:            Mon 13 Jan 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2620:108:d000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:53:64:cd:a9:a5:0c:c9:0f:e5:14:17:79:73:7a:da:05:cc:5b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Dec  9 00:00:00 2024 GMT
            Not After : Jan 13 23:59:59 2025 GMT
        Subject: serialNumber=1a753c676279156340019dddc46126c2b8355af7c177c273f4af71886ec0e536, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:0f:67:0c:a7:b9:40:7f:84:55:c3:a4:d5:
                    61:9c:ca:f1:35:56:9b:76:bd:75:40:d9:11:37:8b:
                    f2:74:df:f1:17:ce:d1:73:f7:71:a8:8f:4f:cc:ec:
                    bc:8e:f1:4c:b3:e8:a8:5d:91:92:d8:ed:09:33:8a:
                    2a:c8:81:a0:5b:f9:a1:8e:5a:ae:bc:54:3f:a5:30:
                    cd:29:a9:21:17:3c:21:b4:d2:e0:58:a1:20:2c:60:
                    51:57:e7:dc:ca:bb:55:80:d0:5f:fa:f5:c9:d2:f1:
                    a9:71:0a:56:d3:73:80:1e:8a:95:3a:59:20:dd:99:
                    8f:22:d7:60:50:1d:52:3f:9f:ad:99:57:b1:06:3c:
                    6e:29:50:df:04:cb:2e:ca:ca:af:c6:bd:1f:6f:08:
                    11:2e:b3:0a:26:64:aa:47:98:d3:9d:15:88:8e:4f:
                    77:81:bd:78:99:d5:6d:2b:3e:00:52:c0:ef:db:6b:
                    93:40:dd:b7:3a:ba:ac:14:32:38:dc:18:28:a5:23:
                    60:62:c2:f1:8a:5f:9b:c9:40:b6:33:79:ea:c9:f2:
                    cb:b0:20:65:5c:a4:ab:2b:eb:79:27:cf:32:0f:8e:
                    9d:d2:2f:09:63:7c:73:82:19:ee:22:ae:3e:de:ff:
                    0e:2d:6f:12:00:e3:eb:2d:e3:c9:2a:a9:4b:4d:a9:
                    8c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E0:CC:2E:80:37:E9:6A:A9:32:CB:87:67:6C:FC:F9:08:1B:B7:20
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1e269d38-4454-4adc-9773-b958fab1020e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:d000::/44

    Signature Algorithm: sha256WithRSAEncryption
         61:35:78:c6:48:47:e7:46:c9:90:fe:b6:fe:70:65:dd:0f:c4:
         50:c5:06:f4:f0:2b:8a:57:80:af:57:97:51:73:2b:51:17:f3:
         5f:9d:a4:be:66:7a:cc:3e:36:a2:7b:85:35:bd:65:e1:9d:3a:
         cf:ff:1b:e7:d3:f1:90:b0:a4:83:22:eb:44:68:54:3d:34:dd:
         c6:12:5d:81:b3:ad:f2:cc:ef:2c:02:11:c3:d7:61:75:db:b5:
         25:ce:81:d2:61:ec:61:35:25:c1:2b:6c:1e:fe:76:8f:74:33:
         37:43:72:5e:a2:6b:c0:3e:84:8e:d9:e0:d2:50:08:1b:0a:b4:
         ab:ca:07:b5:c0:7e:d5:c4:b4:b5:af:f5:8c:0e:a5:f5:e5:f0:
         9a:e0:f0:8d:6c:2a:ae:ca:c4:24:ef:df:6d:0b:ab:2f:36:b9:
         33:11:e9:ce:ef:c3:a1:67:83:f6:69:88:19:11:d4:d7:8a:03:
         15:8c:9c:55:de:4f:60:b1:7d:43:57:76:1f:7a:5c:ce:5c:3b:
         8a:ba:d6:82:e8:4b:55:c7:32:3f:58:98:a9:08:d7:07:90:28:
         34:ff:8c:80:7a:91:e9:9e:2d:c5:79:09:29:5b:92:da:61:3d:
         d5:f1:8c:0b:67:1b:e2:e1:d9:1f:23:dd:04:9c:e1:f5:83:24:
         ac:66:6b:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----