Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa
File:                     05767c0c-a51a-4724-8188-24d099c58bd8.roa (raw, json)
Hash identifier:          KrXdgOwekVo1G5VsPENTeVRYQGBZkvcTSkfl9ZDXvso=
Subject key identifier:   B0:80:E6:13:45:40:55:55:68:4A:59:87:ED:CC:4E:B1:4E:20:C9:2D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       72853FA6E798B5D7723CC3865C1106150B547DF0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.190.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:85:3f:a6:e7:98:b5:d7:72:3c:c3:86:5c:11:06:15:0b:54:7d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=18432f8fc69b8e6858bc3bc87f58d9189bd80208768c304c5194be8953ccab43, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:c2:2f:5f:67:99:87:40:42:e0:84:d1:7c:
                    fd:0e:7e:8d:d1:ed:37:3b:33:ad:5c:69:c9:4a:7c:
                    dc:a1:3d:4d:28:ac:cc:c7:08:54:72:a7:a8:7f:97:
                    fc:09:db:90:26:ee:85:f7:f8:45:da:67:38:10:ea:
                    44:0e:8f:3d:77:97:46:9e:33:bc:39:65:94:8b:e0:
                    e4:95:dc:ff:8a:1a:91:9f:23:d2:34:c9:04:5e:67:
                    7d:a5:63:08:a2:6f:dc:6d:53:45:cd:70:8c:75:57:
                    4d:77:95:3a:0a:dd:ce:ea:a5:47:f2:ff:64:ec:f6:
                    0b:f7:78:2e:c2:25:8d:d3:6f:33:68:8c:1a:63:06:
                    44:05:3b:2d:95:2e:9d:d8:8d:ef:13:3a:9b:28:97:
                    5a:ad:8e:47:23:53:aa:88:d9:1d:44:ee:44:be:59:
                    30:c9:06:6a:b0:cf:d5:fe:dd:5e:33:1f:b1:b6:b4:
                    df:09:2f:83:14:38:a5:6c:90:cd:e6:06:54:fe:91:
                    ad:8e:e9:63:63:9c:58:96:fb:64:8f:4e:72:17:bd:
                    0c:d7:2f:35:33:c2:4b:17:65:8b:fa:17:3d:7c:d1:
                    38:d5:26:8e:de:2c:17:9a:9e:b4:ae:8c:ca:49:c6:
                    53:e6:2f:bf:e1:2d:73:4d:d8:87:b5:46:af:27:7d:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:80:E6:13:45:40:55:55:68:4A:59:87:ED:CC:4E:B1:4E:20:C9:2D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         82:19:5d:59:cb:9e:e1:a8:09:f9:95:c3:f6:32:a4:fe:15:00:
         7d:92:53:dc:44:d3:f8:23:25:ae:88:46:a9:83:b0:e9:8e:5c:
         8d:bd:b1:26:04:17:98:52:16:00:69:ff:c0:40:85:dd:8e:05:
         9d:31:04:c4:f9:c5:5b:99:37:a9:58:7d:6c:57:bd:3f:2f:a7:
         78:87:2b:2d:fb:00:d0:82:36:5e:ba:0b:98:8f:65:76:d9:e4:
         ce:bf:2f:b0:76:b3:3f:bc:4e:d0:fa:32:7e:b7:b2:d1:00:b4:
         40:ab:18:83:40:c2:86:8e:c2:c4:bc:aa:dd:f2:16:9d:33:58:
         8f:4f:a2:ad:e1:d9:74:73:7b:8b:d4:e3:f0:24:16:c5:3c:af:
         94:24:0a:8c:74:59:bd:7f:78:51:f4:b8:08:e4:47:14:8c:1a:
         7c:eb:f5:e0:ed:f0:1a:19:8a:d7:3b:4a:05:92:d0:46:c2:0e:
         30:c9:65:af:17:5a:d3:8b:a1:4f:e0:09:4b:f4:47:6e:37:ce:
         2e:fd:21:f6:e7:ba:41:c6:e6:66:11:c7:e2:15:d9:9c:6a:d6:
         20:a9:c9:75:4a:31:5a:a3:dd:43:8a:6f:a4:66:db:09:75:4a:
         49:43:85:a8:c4:d2:3e:f4:0e:dc:f3:cd:f8:4c:98:50:4d:12:
         be:d0:62:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----