Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/3fd6117b-5f6b-43fe-bf0a-b66f8d35e456.roa
File:                     3fd6117b-5f6b-43fe-bf0a-b66f8d35e456.roa (raw, json)
Hash identifier:          HNRI20UfUIcgQlBk1fon0NBgny/lYCUCWT6EScl32Uc=
Subject key identifier:   68:A1:16:B8:5D:7D:59:5E:BD:DB:9A:E1:31:4F:C2:9D:72:C0:14:79
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       3D3A9848432EDE6815E130B421A7375EFB068472
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/3fd6117b-5f6b-43fe-bf0a-b66f8d35e456.roa
Signing time:             Mon 31 Mar 2025 16:11:16 +0000
ROA not before:           Mon 31 Mar 2025 16:11:16 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        96.127.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3a:98:48:43:2e:de:68:15:e1:30:b4:21:a7:37:5e:fb:06:84:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Mar 31 16:11:16 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=23f2ea11fe8849cc5428014ecd66ce8c7334c19f98a2db63b8d2f9b13a1a1ed5, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:d0:8e:f5:0e:9f:13:e5:20:2f:0b:4a:89:
                    ce:86:2e:79:3d:7b:cd:da:72:3d:5c:9a:9e:f2:7a:
                    c5:8e:fd:23:3b:d6:67:78:c8:80:6f:62:9c:c3:6a:
                    c4:8d:7b:65:26:33:8b:c2:df:52:43:1d:2e:6a:03:
                    0d:09:08:16:36:85:d1:b0:a9:93:3c:5d:76:42:e8:
                    86:d7:a6:13:28:6a:4f:68:21:d3:60:a0:57:e4:7e:
                    46:32:04:24:7a:16:2c:dd:d5:20:a6:4d:52:eb:4e:
                    c9:6d:91:27:f8:a9:48:b6:33:f2:cd:a5:33:7c:76:
                    05:37:4b:bb:11:f7:ef:e5:a5:d1:2b:c4:ab:d1:f8:
                    f5:06:20:7b:5b:b7:c7:aa:78:03:e6:05:c4:a6:b4:
                    cc:c0:80:c0:b2:a2:20:ea:5e:15:af:19:e8:19:23:
                    5c:fc:f6:21:ee:60:0f:7d:a8:54:92:83:44:a8:84:
                    3e:0c:af:1a:e1:aa:0d:09:7a:bb:82:e6:cd:75:a8:
                    b2:1a:0a:9a:68:05:59:3a:4a:72:b8:0a:29:07:29:
                    81:ae:e7:67:f0:12:17:2c:fa:b6:51:9c:e9:6b:c3:
                    b3:72:01:20:02:43:4a:89:dd:ff:99:12:b9:45:61:
                    9a:5d:17:d7:84:6f:30:64:6f:66:a7:2d:54:24:69:
                    26:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A1:16:B8:5D:7D:59:5E:BD:DB:9A:E1:31:4F:C2:9D:72:C0:14:79
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/3fd6117b-5f6b-43fe-bf0a-b66f8d35e456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5c:7c:88:58:7b:5a:4d:66:14:a9:6d:31:6e:38:46:05:94:d5:
         ea:1c:4c:8c:64:19:81:c3:07:ca:8d:cf:b5:27:58:ea:36:2e:
         f7:dd:c9:30:98:55:8a:91:9d:fc:09:3d:cc:2d:86:f8:fd:d3:
         8d:93:2f:d0:26:cc:78:9b:6a:c3:be:46:0e:32:b7:c1:af:ab:
         f5:ab:50:a8:e2:3a:d5:0e:bf:6c:10:d9:b8:71:9d:a2:22:07:
         be:64:f8:84:c8:20:64:71:23:c8:94:ad:26:80:39:fd:33:9e:
         e4:35:9e:33:0f:71:36:d0:a9:cc:5d:e3:24:e3:80:b1:9b:45:
         1a:44:d0:b3:12:b0:9c:65:bc:a8:04:02:85:cf:bd:a4:7e:1a:
         e1:bb:b9:f3:2a:15:b3:49:69:c6:d2:55:c1:94:95:34:ec:5a:
         c6:7d:38:72:7f:36:02:1c:d9:1c:8d:df:cf:05:b4:73:75:cd:
         34:82:85:2f:64:a2:a0:bd:c2:13:bc:8f:55:a6:e7:60:02:9b:
         1d:7c:77:b1:06:2f:88:c2:b7:e7:3d:6e:a4:fd:14:81:4f:f3:
         54:0c:7c:7f:16:19:82:ba:d3:fd:a1:82:b8:f4:3a:1b:b4:00:
         44:cc:7c:1e:04:6b:60:7f:4e:df:54:71:ff:07:f8:d5:0b:f3:
         88:dc:1e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----