Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05d7f342-6157-48d6-afa9-e8e77d622676.roa
File:                     05d7f342-6157-48d6-afa9-e8e77d622676.roa (raw, json)
Hash identifier:          2mix9WA2YCh9DT67qys+YNNV31VNVQJ0XjoYa9gu++4=
Subject key identifier:   B9:9C:CB:10:6C:D1:AB:ED:DF:62:AD:8F:E9:68:DA:A2:7C:FE:CB:60
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E0F47DE1F9ED738C69F7A8452E4C9762A6A4201
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05d7f342-6157-48d6-afa9-e8e77d622676.roa
Signing time:             Mon 20 Jan 2025 00:00:00 +0000
ROA not before:           Mon 20 Jan 2025 00:00:00 +0000
ROA not after:            Mon 24 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0f:47:de:1f:9e:d7:38:c6:9f:7a:84:52:e4:c9:76:2a:6a:42:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 20 00:00:00 2025 GMT
            Not After : Feb 24 23:59:59 2025 GMT
        Subject: serialNumber=5756d1409df79d8db8b9ce39c0f4899d6c3244af74c75935b48e7eae9d822fcb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dc:e5:d4:a5:a9:13:92:62:0b:63:55:3f:e7:
                    0f:8a:67:6b:93:b5:db:1e:91:7c:cc:f5:2b:30:dc:
                    d0:9a:68:59:41:3a:e7:d0:f1:9c:ae:f9:2f:99:a3:
                    cb:15:10:86:1e:bd:21:ac:ed:89:dc:2f:23:cf:4c:
                    20:42:12:a1:31:13:21:33:7c:5c:ae:a0:c2:8b:f0:
                    e6:10:79:fd:77:a2:54:88:ee:0f:c9:dd:ce:d6:a3:
                    2c:f1:61:1d:69:cc:7f:06:b6:40:45:eb:e5:84:7c:
                    5d:f1:19:0d:b1:79:27:32:56:5c:df:18:7b:41:70:
                    17:61:45:b7:bd:b2:0e:29:c4:48:57:95:44:e6:70:
                    56:5a:fa:b6:e3:88:69:5e:49:cb:9d:de:05:c7:19:
                    61:b5:da:64:8e:1e:39:aa:18:24:84:c8:f1:58:f6:
                    03:bc:ab:75:34:fa:75:4d:69:95:76:e6:63:c1:60:
                    5a:cd:cb:3e:38:f4:c9:b2:86:43:d5:0c:6b:65:40:
                    be:7b:7d:76:28:e0:19:dc:27:c3:44:90:81:c5:21:
                    f9:65:4e:2a:32:81:f8:8f:5a:1f:84:08:bf:53:ad:
                    1d:a2:cf:46:85:73:dd:64:83:74:1d:cc:92:40:cb:
                    51:51:39:49:13:72:d0:46:f4:5d:2a:60:26:c0:f1:
                    73:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9C:CB:10:6C:D1:AB:ED:DF:62:AD:8F:E9:68:DA:A2:7C:FE:CB:60
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05d7f342-6157-48d6-afa9-e8e77d622676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:68:5b:21:05:fa:06:f2:60:8a:4a:ce:00:76:dc:5c:4e:37:
         61:18:17:84:ba:69:41:59:72:7b:88:30:55:50:04:11:9b:22:
         94:70:7e:e3:54:d6:8c:5c:1d:ff:7e:93:83:80:cf:f5:c4:8c:
         2a:53:21:9b:c8:16:7d:21:40:b4:a4:20:85:93:16:45:f2:0c:
         98:e9:d5:bf:21:60:35:3d:88:2c:07:4d:ca:f3:e6:a7:5c:35:
         68:4b:ba:e4:72:30:76:a1:b1:d0:7e:d7:7b:aa:1c:8a:2e:6b:
         8d:c5:46:ea:ee:19:3d:8a:70:98:6d:ae:2f:00:6e:62:19:9d:
         97:4a:7f:4a:41:49:39:c0:45:57:1d:86:3f:9c:d7:43:ae:ef:
         af:02:2f:f6:6f:cb:07:09:59:7c:97:e8:7d:9a:1f:47:5f:1b:
         bd:08:8f:fe:a5:07:60:9a:6e:d8:d8:a6:b1:c3:36:0b:38:f1:
         02:3a:55:d6:3b:cd:95:13:ff:19:58:e3:a8:80:56:a5:a2:e0:
         91:5b:f1:3a:c9:2c:08:3a:c0:8d:be:ba:72:6d:b9:45:89:5f:
         a7:79:5b:4c:d2:9e:4d:f8:03:cd:da:fb:fa:09:02:92:73:15:
         04:84:b7:a6:a6:5f:4c:aa:e8:ad:4a:d3:7a:bf:74:ad:ee:db:
         4e:49:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----