Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20eac0c1-044c-4d7c-96cc-5e378621a09e.roa
File:                     20eac0c1-044c-4d7c-96cc-5e378621a09e.roa (raw, json)
Hash identifier:          Q017zI/rYqowUFb8nOsgMR+/SqCmjd/eMv3sUMUM/kw=
Subject key identifier:   DF:FE:5E:75:9D:96:A9:A0:B0:D0:9E:57:90:3C:98:E5:DE:D8:AF:0E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0F6A22F316A61ACEA9ABBB27DF2DFC88E7B180B6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20eac0c1-044c-4d7c-96cc-5e378621a09e.roa
Signing time:             Fri 18 Oct 2024 00:00:00 +0000
ROA not before:           Fri 18 Oct 2024 00:00:00 +0000
ROA not after:            Fri 22 Nov 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:a900::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6a:22:f3:16:a6:1a:ce:a9:ab:bb:27:df:2d:fc:88:e7:b1:80:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 18 00:00:00 2024 GMT
            Not After : Nov 22 23:59:59 2024 GMT
        Subject: serialNumber=c5e8dec7efe58b7977de0fbcdae7b304af497e6276d404692a362f67520fb2ae, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f0:f4:7a:11:b5:cc:15:07:37:de:e8:87:f5:
                    83:5f:52:31:dc:42:43:c8:ef:11:ee:09:94:f4:09:
                    68:15:f9:5e:c4:27:55:2e:06:dd:17:aa:8a:a3:58:
                    5f:47:d4:2a:13:45:81:4f:24:2c:c4:0b:e2:63:67:
                    64:93:13:7c:16:4d:2a:d5:1e:ee:13:52:d4:5d:3e:
                    e9:54:09:a9:06:30:82:f5:c4:60:be:3e:7b:73:1a:
                    ac:76:5c:aa:e5:e8:6c:8d:78:4c:22:06:b2:fc:9c:
                    c3:1a:9b:0c:c5:bb:82:1f:18:12:81:94:df:2c:77:
                    28:ab:26:6b:2a:a0:7a:86:f4:82:19:89:aa:5e:33:
                    25:45:37:73:c0:3c:62:e2:01:cf:7b:ca:be:03:2e:
                    40:bb:30:de:cd:e4:d7:ad:57:64:33:8f:f5:3f:19:
                    68:2b:65:af:7d:32:50:b9:e1:a1:6e:68:36:fa:51:
                    99:d4:88:59:96:0c:68:85:2f:af:5f:56:c0:24:c3:
                    b0:f9:83:20:fd:1d:23:1c:db:ff:ba:cc:01:17:db:
                    80:84:60:83:63:15:32:6c:a1:07:a0:81:42:c0:a5:
                    4e:5e:7a:e5:eb:b3:78:6f:a6:71:e6:54:24:f9:d0:
                    3c:7d:8f:5d:42:e2:48:35:38:1c:f4:be:6f:0b:98:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FE:5E:75:9D:96:A9:A0:B0:D0:9E:57:90:3C:98:E5:DE:D8:AF:0E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20eac0c1-044c-4d7c-96cc-5e378621a09e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:a900::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:35:d0:54:19:81:cf:de:61:d2:e2:d4:09:12:25:56:ca:47:
         92:34:fc:27:47:49:76:97:ff:e7:30:8c:04:6a:5e:d2:4f:44:
         7f:9d:7d:e5:56:2e:27:5c:21:40:e9:01:cc:70:fa:4a:52:8e:
         33:44:9f:b7:c4:54:5b:59:03:4d:0e:45:c4:0b:2b:03:dd:f7:
         1f:02:ac:34:ab:e6:2e:30:c9:cf:e8:3e:a0:81:21:ee:da:7b:
         c2:7c:89:f7:11:91:53:e9:e6:4e:a6:92:1a:ee:b9:60:d4:5f:
         22:a1:ef:d2:26:9b:8b:2b:fb:f3:ce:8f:2a:06:0c:25:0f:ba:
         98:7d:f9:80:18:bb:f3:d3:ac:03:07:a4:8d:25:49:57:79:5a:
         c7:24:cf:2e:28:71:90:fd:20:6b:5e:5d:8f:41:86:06:34:53:
         c6:ef:54:9d:ac:45:20:43:5b:af:97:6f:a9:6d:54:af:99:5d:
         91:ad:ba:15:a1:60:fb:97:60:3c:be:f4:24:62:f5:93:fe:86:
         d6:f4:86:fc:86:7d:de:0b:96:b9:25:dc:11:de:ce:77:b9:1b:
         d5:ce:76:ed:52:0a:55:83:46:66:2d:14:d8:83:c7:59:91:4f:
         b6:54:34:0e:94:7b:71:56:14:d0:0a:56:0c:8d:2d:e6:9f:13:
         68:1e:24:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----