Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c31b78e4-cc18-4088-ba24-402ac961b359.roa
File:                     c31b78e4-cc18-4088-ba24-402ac961b359.roa (raw, json)
Hash identifier:          p6kqswJoGCldTwA9qu4yqLRBmQ0Tl6PzPoUsUbOTqjA=
Subject key identifier:   99:2D:07:CB:81:48:57:09:55:18:38:FA:AB:D3:10:4C:F1:80:EE:D9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3B9390740AFEC6172CFCA64A9A3929D9BF9EE223
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c31b78e4-cc18-4088-ba24-402ac961b359.roa
Signing time:             Wed 30 Oct 2024 00:00:00 +0000
ROA not before:           Wed 30 Oct 2024 00:00:00 +0000
ROA not after:            Wed 04 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:9000::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:93:90:74:0a:fe:c6:17:2c:fc:a6:4a:9a:39:29:d9:bf:9e:e2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 00:00:00 2024 GMT
            Not After : Dec  4 23:59:59 2024 GMT
        Subject: serialNumber=87dd1d485d653865d12a6a2a1b3c6cab6343a1148a57c1bbe1d2c7856474b163, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:39:32:3c:ad:e2:1f:64:b7:6d:cd:e8:2d:
                    2e:1e:6a:9f:7d:6d:39:d4:22:5a:f3:8d:1b:6c:2d:
                    70:81:ac:05:7b:93:2b:74:13:32:3a:cd:1b:03:02:
                    2a:d1:07:ed:b8:b9:68:18:a6:8f:20:a9:fa:31:91:
                    f0:d0:d4:68:17:36:39:32:d4:3e:ba:be:cc:ae:ec:
                    2f:68:ba:5c:45:e6:19:d6:55:cb:01:c5:93:f5:f5:
                    87:19:6e:8c:2c:63:ed:5b:aa:9b:3e:98:0e:e0:d4:
                    85:a5:7d:e6:a6:a1:11:5b:33:a5:cf:6c:e1:19:6a:
                    4c:f3:69:1b:e6:df:ab:4a:27:56:6d:25:50:43:63:
                    08:ec:10:ed:02:25:75:d0:91:51:41:0c:9a:f3:25:
                    42:a9:5c:71:c2:1d:7d:e4:50:34:63:09:85:33:f3:
                    e7:c6:5e:9c:ab:f4:4e:8f:aa:0b:2e:2a:1c:31:fa:
                    9e:19:bb:e8:9b:2a:a4:c4:49:ed:d9:39:75:3e:d9:
                    79:c8:43:5b:5f:9e:e7:7b:37:6f:5d:fd:0e:bb:e8:
                    55:b4:ed:1a:78:9d:30:ba:a6:71:60:e9:bd:02:0c:
                    e9:92:ac:c8:f5:c3:9b:4c:6a:a9:46:c0:b9:e5:92:
                    7f:f6:de:c8:2f:43:0d:06:94:9b:29:0d:c3:19:d6:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2D:07:CB:81:48:57:09:55:18:38:FA:AB:D3:10:4C:F1:80:EE:D9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c31b78e4-cc18-4088-ba24-402ac961b359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000::/28

    Signature Algorithm: sha256WithRSAEncryption
         91:c9:dc:51:1c:fe:dd:2c:f1:cd:1f:06:ec:b0:57:12:33:53:
         1b:7e:bd:bb:3b:7e:0e:a1:66:62:70:bf:8a:dc:d3:e5:7a:90:
         42:88:92:da:99:98:4d:c0:20:b8:b2:bb:ef:81:98:41:9f:6f:
         ad:45:7c:45:d0:23:c7:b4:8c:62:04:9b:bc:1b:4d:cb:a9:2c:
         8f:b2:2e:36:c3:f9:ee:c9:74:1f:eb:68:f3:2b:af:4f:86:9f:
         ce:b9:3a:59:36:96:4e:71:00:05:21:c9:69:10:c5:94:c8:6d:
         74:53:d4:e7:16:40:70:74:7c:5b:88:3f:41:6a:c5:87:9d:85:
         5a:a2:c1:7c:9c:e3:d5:a8:17:e1:14:f0:e5:f4:94:d6:17:75:
         ca:b6:70:ec:8f:40:74:af:5c:65:2e:e6:9e:4c:8c:a3:da:73:
         19:97:4c:af:92:73:40:fa:50:66:94:11:27:37:22:2b:3a:99:
         02:c1:0b:a6:06:32:b4:57:9c:8c:98:a0:a4:70:8c:7c:f3:50:
         6c:bb:03:ff:ef:9d:e2:95:01:f4:30:d3:1f:92:8a:1c:34:80:
         75:6e:f0:2a:c2:1d:19:d9:b0:65:58:ff:90:0f:18:4a:a3:ab:
         63:51:e0:5b:41:47:b2:03:e6:c8:d7:f2:8b:12:8f:a2:8f:94:
         42:23:a9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----