Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/2f44b632-2720-4ef0-917c-4b1813ed903f.roa
File:                     2f44b632-2720-4ef0-917c-4b1813ed903f.roa (raw, json)
Hash identifier:          leu572qS0yFj5pwOqL2s0PoDO3JGwjmmDu1N2FNvbxY=
Subject key identifier:   C5:B0:E4:8C:9D:ED:C5:26:8A:B3:45:78:99:4F:85:4F:21:A0:30:53
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       0972A0BC48430B6DD244EC03CA2D14114AEBA502
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/2f44b632-2720-4ef0-917c-4b1813ed903f.roa
Signing time:             Mon 31 Mar 2025 16:11:33 +0000
ROA not before:           Mon 31 Mar 2025 16:11:33 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        96.127.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:72:a0:bc:48:43:0b:6d:d2:44:ec:03:ca:2d:14:11:4a:eb:a5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Mar 31 16:11:33 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=a780f7d8639a6243b5a60a70995e0c96db0e63331183d15b8348feb88c41479c, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:f3:e7:40:2c:17:0d:82:1e:02:7f:c4:dd:
                    5a:0b:d2:3d:5e:65:9b:1b:1b:a2:c4:b8:0d:79:b6:
                    b1:d4:f6:b8:b4:3d:51:56:3d:29:92:82:91:0c:57:
                    00:74:25:b0:4e:47:46:90:66:21:50:85:e4:a8:18:
                    13:04:66:a8:53:d9:45:33:5d:e6:3b:be:ed:37:da:
                    4a:ac:26:cd:b3:c1:57:4d:36:5d:d6:d3:d0:c9:35:
                    93:db:43:58:00:01:c7:ca:25:e0:4a:9e:47:da:5e:
                    2a:4e:42:63:8c:02:61:5a:b0:c2:30:40:eb:8f:6a:
                    5d:8e:f0:aa:c2:33:d8:df:91:8f:4c:2a:90:ad:d6:
                    f8:2d:52:d6:97:50:06:37:d7:1b:4b:bf:97:49:4d:
                    bd:6b:25:a4:0b:e8:cd:e7:3c:8a:e3:53:43:35:6f:
                    ab:b7:20:60:5d:e2:84:8b:20:f9:d0:eb:21:be:b8:
                    7f:f6:60:68:28:1d:1e:41:a9:96:5e:38:e6:4c:39:
                    92:bf:cd:6a:d1:62:d5:77:42:68:16:aa:86:a8:7f:
                    0c:fb:94:c0:12:c6:bb:be:b5:25:5b:13:a1:8c:74:
                    44:f4:3b:65:82:79:a5:e6:0d:1f:7e:63:0a:1f:3d:
                    01:48:98:14:04:9d:32:f3:b7:0f:09:25:e0:8b:83:
                    c8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B0:E4:8C:9D:ED:C5:26:8A:B3:45:78:99:4F:85:4F:21:A0:30:53
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/2f44b632-2720-4ef0-917c-4b1813ed903f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         79:e1:ba:6b:9d:d6:e0:7d:b2:1c:94:45:72:de:2c:bc:2f:8e:
         2d:66:c8:9b:66:f4:73:95:68:fc:35:74:e9:85:d5:c8:e5:c9:
         b3:ff:7f:8b:18:30:99:c6:57:da:ac:9a:d1:f7:c3:97:b3:2f:
         79:e5:7f:9f:73:58:a7:1a:a6:ad:6f:8f:02:02:92:99:f6:bf:
         83:c1:f0:cc:17:e1:e2:27:bb:70:02:45:7b:22:19:38:40:6d:
         87:44:b7:27:36:20:c0:d3:05:96:69:be:51:e7:cd:fa:84:7b:
         5c:49:44:31:17:aa:6f:3f:be:5a:31:a7:84:59:f9:80:89:71:
         0d:4e:26:05:50:8d:97:50:b7:2a:b9:29:4d:8a:6f:c0:8d:fe:
         db:2e:1b:69:a8:8f:b4:9c:7d:29:f7:e0:c0:2b:e0:15:a5:34:
         4f:28:70:cb:f9:17:1c:3b:8c:4b:19:5b:82:8e:d2:bc:6d:04:
         16:97:59:30:f3:37:27:9b:a2:73:51:ee:67:1d:50:44:1c:57:
         db:01:ad:0a:66:94:d7:8b:91:e7:bc:94:ea:03:26:1b:cd:7e:
         7e:ca:cc:a6:35:16:c2:65:6e:69:fd:37:09:db:79:1a:c7:ce:
         b3:db:e9:2e:5b:46:61:f3:75:45:aa:29:0c:c5:0e:7f:7c:62:
         52:e4:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----