Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f057f6e-1993-42bd-b822-ce2db15710b8.roa
File:                     0f057f6e-1993-42bd-b822-ce2db15710b8.roa (raw, json)
Hash identifier:          o4ZL7QZP7DLee3xnqEqpsxMKHuOPLYd+Rlb3HO1/8/o=
Subject key identifier:   34:B7:E8:22:EA:F6:6E:F1:86:12:99:BB:AB:0D:7D:B1:88:D1:DA:7F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       01A475C55157EE66BCEC5E91B1F2C7D82F57E58D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f057f6e-1993-42bd-b822-ce2db15710b8.roa
Signing time:             Fri 18 Oct 2024 00:00:00 +0000
ROA not before:           Fri 18 Oct 2024 00:00:00 +0000
ROA not after:            Fri 22 Nov 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:ab00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a4:75:c5:51:57:ee:66:bc:ec:5e:91:b1:f2:c7:d8:2f:57:e5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 18 00:00:00 2024 GMT
            Not After : Nov 22 23:59:59 2024 GMT
        Subject: serialNumber=939f31f4a12502410ee206c94299f16c3d2d356e9dfbed78721921e4156a069b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:20:88:cf:1a:91:90:80:36:c1:10:87:ee:
                    a1:83:55:de:28:f1:a4:05:b4:6d:b2:22:9e:a4:d8:
                    de:c6:0b:f7:5a:14:41:36:55:77:2b:87:43:11:94:
                    d7:8e:25:7a:5a:b4:bc:ab:de:03:eb:7f:44:1d:ec:
                    1d:95:b1:9d:42:fe:ed:d6:3b:f5:2b:08:4c:3d:e0:
                    ff:61:f8:0e:89:51:62:23:4b:0c:b3:3f:33:88:d6:
                    5b:af:60:2f:3a:05:98:af:b5:83:ca:95:52:d8:a7:
                    c9:5e:8a:00:6f:aa:05:ca:4b:9d:de:9d:15:9f:83:
                    98:02:a8:82:90:b1:5c:c7:c1:54:d3:b2:88:c6:9b:
                    e3:c2:e0:65:9a:d2:25:a6:71:7e:cd:ce:13:f6:fe:
                    23:12:94:dc:b7:2b:d7:3b:ec:ff:d3:8a:79:4d:c0:
                    79:a2:02:21:ea:4c:35:3f:a5:65:b6:0a:89:3b:3e:
                    bc:d8:b3:55:76:95:ed:4e:e7:e1:a4:e8:99:60:42:
                    a2:1a:12:1c:7e:1b:0c:18:8a:14:94:95:1e:a5:40:
                    40:85:c1:f5:c1:83:f4:9a:95:24:bf:17:03:f2:56:
                    83:a5:65:90:de:65:a3:95:da:02:14:41:6a:36:59:
                    69:2e:fa:12:37:09:cc:9b:33:5d:92:8a:9a:fe:b8:
                    29:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B7:E8:22:EA:F6:6E:F1:86:12:99:BB:AB:0D:7D:B1:88:D1:DA:7F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f057f6e-1993-42bd-b822-ce2db15710b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:ab00::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:15:2b:4f:d2:d2:7d:1d:c7:a0:f1:19:60:f8:aa:9d:78:c9:
         4e:a4:55:8a:b6:9b:a8:4f:30:ae:43:be:08:f5:84:cf:7c:a5:
         8d:dc:5b:c8:bc:a0:3d:58:5d:8b:3d:a0:99:b4:ce:35:2d:70:
         bf:c1:aa:80:29:62:a8:35:ec:6a:50:a3:87:c1:be:e4:54:f9:
         bc:73:21:fd:29:98:fa:83:ca:57:95:66:9b:a6:d5:c3:38:cf:
         1e:14:9b:c6:15:45:25:22:69:f9:5c:49:15:9a:97:ae:4c:01:
         4d:a0:fd:a3:00:3e:9e:a7:63:6c:89:bc:29:4d:e1:77:77:6a:
         b2:3a:87:1d:62:b5:90:25:ce:d0:ad:e3:d5:64:bf:89:9e:35:
         62:59:09:64:ce:c2:86:84:c4:25:a2:a0:44:be:50:69:aa:b3:
         db:f7:04:8b:5c:0e:a3:98:ec:ca:5e:3c:da:68:10:62:1b:47:
         64:4c:30:2e:e4:f9:4b:9f:92:3b:44:5c:fc:9d:b9:7e:c5:5c:
         15:e1:31:ed:20:51:00:dc:83:d1:cc:82:ed:b9:66:be:f9:bf:
         74:3a:35:7b:91:d0:90:d3:ad:04:8b:46:01:86:e7:57:2a:f5:
         c3:cd:4f:35:b0:e4:59:f2:b1:4e:c3:8c:cb:ca:0f:75:e9:3b:
         a6:5a:ab:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----