Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa
File:                     7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (raw, json)
Hash identifier:          6PW0UDzetC62OeR/GXwr2Bhq0PM7zpdg83oYm6j09n8=
Subject key identifier:   80:5D:FA:AE:EF:41:82:83:AE:2B:73:57:30:DA:29:CF:A0:F4:17:20
Certificate issuer:       /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial:       27538BC12B07990216C1C2D3164EA17E89029620
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa
Signing time:             Sat 22 Mar 2025 00:10:34 +0000
ROA not before:           Sat 22 Mar 2025 00:10:34 +0000
ROA not after:            Sat 26 Apr 2025 23:59:59 +0000
asID:                     62785
IP address blocks:        2605:b140::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:53:8b:c1:2b:07:99:02:16:c1:c2:d3:16:4e:a1:7e:89:02:96:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
        Validity
            Not Before: Mar 22 00:10:34 2025 GMT
            Not After : Apr 26 23:59:59 2025 GMT
        Subject: serialNumber=1e5f3b28e8790951eb2758812a481c2a734b85b9b6c0e1a80cc374257e134d03, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:73:35:16:01:cb:91:03:a8:20:15:1f:bb:2d:
                    6c:68:6a:b6:48:6c:f7:f4:7e:31:1c:83:bf:eb:b7:
                    d9:33:bf:6d:f9:af:43:f9:67:ac:48:cc:18:c7:b0:
                    2a:dc:41:96:a2:49:e3:61:a4:37:27:94:5c:e5:bc:
                    fb:ac:9b:37:1b:bb:bd:32:09:47:fd:75:52:f2:69:
                    95:6c:6a:79:2c:32:2c:2b:b6:96:5e:ba:82:65:a8:
                    54:ba:f2:5b:f7:2e:ce:c1:19:bc:e9:81:89:0b:7d:
                    58:5b:17:74:50:c8:92:b3:4b:3d:33:91:bd:44:63:
                    64:b0:6e:21:e2:48:91:39:55:ca:00:fe:23:d6:e1:
                    fa:69:aa:2c:d2:c4:d0:26:52:4a:4c:20:5c:37:96:
                    56:37:fd:b1:5e:1f:a1:8a:5c:c3:a2:8b:5b:b4:70:
                    ad:0e:2f:1b:4a:c8:52:0d:3a:5f:56:87:4e:92:5d:
                    23:70:f6:dd:62:35:46:e5:a4:f6:43:dc:6e:70:07:
                    77:4c:cf:22:06:fd:07:75:de:49:03:cb:c1:1c:24:
                    5b:1d:1c:f4:86:06:8e:27:d2:50:47:03:20:b9:37:
                    62:65:c1:44:b6:b5:b0:fa:b3:ee:39:2b:ee:05:44:
                    83:56:3b:71:fe:40:cd:be:26:b1:b0:00:47:30:31:
                    50:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5D:FA:AE:EF:41:82:83:AE:2B:73:57:30:DA:29:CF:A0:F4:17:20
            X509v3 Authority Key Identifier:
                keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:d9:e0:2a:2d:5b:30:57:31:07:5d:33:f1:bf:52:6a:10:66:
         ab:6f:ac:ce:c8:dc:02:5f:80:a7:aa:54:66:a7:18:c4:8f:b6:
         d5:d2:d0:fb:f8:04:75:58:84:b7:5c:e8:47:74:9f:74:b7:3f:
         8d:b7:e5:75:76:be:fc:7f:a8:d8:2e:d2:99:1a:99:8c:2b:db:
         2f:61:97:61:f9:72:af:ad:5a:27:e9:e7:1e:d8:b0:11:66:7d:
         0f:35:14:0c:d3:df:75:35:e4:31:2b:31:bd:be:12:fa:a6:bf:
         a0:87:15:09:00:0d:6c:48:b7:57:40:1c:89:6f:c6:05:8b:46:
         0d:26:ea:84:5f:77:cf:67:1b:c3:36:36:83:3a:19:41:23:a4:
         34:a0:e9:c6:46:ff:1e:72:58:63:3a:9b:2f:d5:8a:bf:dc:ec:
         93:1d:da:73:0a:bc:ee:35:6f:24:fd:5f:2b:ea:aa:1b:e9:50:
         f7:78:bc:b2:bf:e5:b2:68:2c:82:8d:5d:87:df:61:67:b0:e3:
         b6:90:d2:21:6f:e0:4f:1e:b8:72:47:23:d8:72:4b:8b:a3:77:
         9d:ca:f7:66:76:fe:56:7b:f3:9c:15:c9:f3:0a:92:bb:6d:e2:
         e4:f4:78:f9:3e:8c:49:e0:e2:eb:90:ff:2c:00:76:35:83:16:
         58:4b:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----