Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13239bef-99a2-4202-9768-810481e289ea.roa
File:                     13239bef-99a2-4202-9768-810481e289ea.roa (raw, json)
Hash identifier:          NhJalOZbyRFF1eWrB58xQuS/3fAOQuJGDt3dSMsrscY=
Subject key identifier:   A8:24:B2:47:CB:C0:5C:0E:7E:54:0E:7E:3C:76:0F:EB:F6:46:0B:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       445ED70DBDC15FF803AF7374FD392C1D527D102B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13239bef-99a2-4202-9768-810481e289ea.roa
Signing time:             Sat 18 Jan 2025 00:00:00 +0000
ROA not before:           Sat 18 Jan 2025 00:00:00 +0000
ROA not after:            Sat 22 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.127.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5e:d7:0d:bd:c1:5f:f8:03:af:73:74:fd:39:2c:1d:52:7d:10:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 18 00:00:00 2025 GMT
            Not After : Feb 22 23:59:59 2025 GMT
        Subject: serialNumber=82fa9b78f991f2a765c079f2955606cf861e11d8a02f640b721b78d9c8f38131, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9e:cb:ab:5b:6e:18:07:97:b1:ea:8c:17:9c:
                    b8:dc:ff:46:ba:c4:f1:90:02:aa:9c:e5:50:05:1b:
                    c7:d3:25:00:c8:3a:23:73:f7:26:58:79:4c:04:21:
                    28:74:33:61:e4:52:9e:0b:6e:f3:f5:e9:fa:c0:82:
                    2a:d9:6b:83:0b:0c:be:fc:41:7f:0c:ce:a7:ef:66:
                    89:c9:b4:2c:e6:61:8e:9a:2a:a5:96:ae:fc:22:cd:
                    0c:a1:33:90:4d:c5:64:ad:96:be:ec:fc:54:ed:23:
                    eb:9e:34:0e:76:49:d4:97:d8:61:06:21:b2:36:bd:
                    70:83:e3:9c:26:bd:87:26:c9:66:33:76:68:d3:2a:
                    15:5c:74:dd:20:bc:2a:43:2b:19:cc:3b:d9:28:31:
                    4c:ab:73:32:54:8e:e8:41:23:db:2d:b5:76:23:d5:
                    84:24:f0:de:e9:66:63:45:90:40:5a:d8:1c:ee:20:
                    18:ba:f4:bf:a4:6a:c9:2d:18:64:c0:81:13:48:e9:
                    ed:bd:37:d6:9b:63:39:4d:d4:1d:e9:d4:6b:60:78:
                    58:e1:9d:c8:5d:1e:fa:30:88:e0:f0:cd:dd:2b:e5:
                    b4:24:69:2c:70:ba:c2:03:f9:eb:61:08:ca:08:b5:
                    4c:fd:f3:ca:e0:78:ac:ad:e9:6f:3c:dd:59:a5:45:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:24:B2:47:CB:C0:5C:0E:7E:54:0E:7E:3C:76:0F:EB:F6:46:0B:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13239bef-99a2-4202-9768-810481e289ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.127.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8f:db:f7:9a:3d:3b:8e:23:bf:e8:09:3a:78:8e:86:36:8e:19:
         f7:ee:05:9d:9d:5b:21:c3:9d:07:08:65:16:33:4d:9b:b8:d5:
         05:68:2a:01:f5:7f:8d:43:1c:ae:36:bc:1b:ee:bd:f3:74:00:
         dc:87:e5:2a:4c:b5:12:94:71:db:44:95:7b:4c:28:69:20:16:
         d4:b1:91:9d:ce:f2:36:cd:83:a2:5d:f7:33:64:f4:a2:d7:0b:
         38:ae:e4:1f:42:6b:33:37:3f:0f:41:6b:4e:88:a1:23:23:5c:
         0e:5b:bc:1b:c7:0c:2b:0a:9a:05:d8:a9:d1:22:cb:82:c6:f6:
         71:a5:c5:f0:f8:db:bc:ff:a6:66:2c:9d:b2:29:69:db:f2:4a:
         7e:9f:7e:03:3f:23:2e:1c:13:e5:66:5a:5f:53:a5:c1:c3:bc:
         52:97:d0:f2:c2:aa:7c:1d:26:91:62:03:5e:19:80:90:5a:1a:
         17:03:fe:1b:76:43:25:9b:fe:a8:13:1d:bd:22:03:d8:d3:43:
         5a:2f:68:c6:52:6f:6d:49:ce:a9:e9:c1:df:02:8f:11:47:7f:
         2d:a6:a2:05:c7:b2:d7:b1:1d:91:6f:9e:62:a7:0b:11:12:e9:
         c5:69:67:40:52:7a:4d:d5:c6:22:95:19:7a:4b:a0:35:e9:06:
         7f:11:3e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----