Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/2592ade6-505a-4e24-928b-9a1e71b309ae.roa
File:                     2592ade6-505a-4e24-928b-9a1e71b309ae.roa (raw, json)
Hash identifier:          74plVZscH1xrlwGb0fPwz524ybYyBngZftFzTj2PlNw=
Subject key identifier:   9B:98:BE:47:F1:4C:FD:C8:E1:10:82:36:DC:CE:AE:86:AB:0F:BC:81
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       01CDFCA2BF1AF10C40D802511D1972F8AB77469E
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/2592ade6-505a-4e24-928b-9a1e71b309ae.roa
Signing time:             Mon 31 Mar 2025 18:30:08 +0000
ROA not before:           Mon 31 Mar 2025 18:30:08 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:cd:fc:a2:bf:1a:f1:0c:40:d8:02:51:1d:19:72:f8:ab:77:46:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Mar 31 18:30:08 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=ca9a90b39296810a35d92f280f1b6d214caacbfcef814b16dc9b34539049b48d, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:28:d6:c4:40:26:ec:c3:4f:59:93:10:52:
                    e4:d3:47:6f:1f:c0:90:29:1d:a4:cf:27:f0:75:40:
                    39:b2:78:fe:38:53:15:55:e1:4b:4b:9a:c8:ab:80:
                    45:5b:0c:40:92:68:c9:06:67:54:f4:3d:0a:28:c4:
                    01:dd:9e:c2:41:af:d2:25:de:34:18:ef:84:39:a5:
                    46:c6:27:d1:d8:c3:1c:0a:b0:be:84:e4:a0:50:ba:
                    3f:30:23:fb:40:6a:79:95:ca:ca:bb:ce:52:3e:24:
                    7a:42:14:1e:c7:34:76:53:04:bd:01:af:b7:ad:37:
                    c8:2e:54:91:c9:11:fd:1a:39:82:97:0f:2f:30:5d:
                    c7:9a:ef:8a:fb:33:f2:25:19:c1:a0:74:13:d1:60:
                    3d:d7:87:9d:60:93:be:80:a0:a7:cb:c9:54:a8:5c:
                    9d:b6:52:3e:1a:e1:7d:75:1b:ce:73:16:e9:b6:79:
                    09:b9:3d:33:28:8e:0c:39:ae:3a:95:c6:86:21:62:
                    50:32:3a:7c:40:6f:53:8c:1d:48:54:66:02:58:44:
                    56:cf:4c:0b:b0:ef:fb:37:12:88:9c:01:84:69:58:
                    fe:3f:f8:30:8e:e8:72:49:92:44:54:02:40:b1:1d:
                    99:12:b7:52:ac:88:3e:c6:d6:e6:de:98:c3:70:bd:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:98:BE:47:F1:4C:FD:C8:E1:10:82:36:DC:CE:AE:86:AB:0F:BC:81
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/2592ade6-505a-4e24-928b-9a1e71b309ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:a2:ea:3b:3e:e4:76:ac:72:9e:92:d0:3c:69:35:de:16:d8:
         0f:bf:36:43:db:cd:8e:e6:41:08:5b:f3:bb:6b:c3:29:de:e6:
         33:41:0f:ba:7a:ae:d9:fc:38:41:06:8f:02:f2:6a:3a:68:63:
         0a:cd:bd:bc:bc:2c:cb:63:72:80:19:89:3e:b5:df:8c:a4:62:
         f9:a0:f5:dc:5b:bf:94:f5:4c:5c:ad:4c:73:5e:b2:5f:48:6f:
         58:fb:c2:26:f4:4e:1b:46:ee:37:b7:79:fe:94:90:95:ae:6f:
         7a:d4:1b:39:55:d2:22:e7:cd:23:f3:0d:9e:3b:68:2b:5b:5b:
         e6:0a:c9:05:8a:6b:f2:20:33:e1:a0:39:c1:31:e0:85:fd:39:
         c1:b9:a2:78:02:b1:4a:24:1d:fd:94:80:be:33:a7:b1:b4:27:
         15:b5:4d:9c:16:03:3b:ee:83:10:b2:96:bc:28:f3:39:a8:df:
         74:f6:89:a4:50:6c:5e:66:b3:0f:3b:bf:59:4e:c2:70:c5:7e:
         d7:6b:7f:9d:18:20:e1:22:d8:17:03:50:cc:c3:7e:3d:e9:a0:
         52:2e:57:f6:36:03:62:68:76:e9:f0:18:f4:e0:ec:a6:59:ba:
         b6:7a:6c:e4:66:50:5a:46:ce:e0:4f:a3:f3:6d:21:0e:9a:ff:
         d8:75:30:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----