Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13aae7f4-cc38-450a-8fe2-e98223497aef.roa
File:                     13aae7f4-cc38-450a-8fe2-e98223497aef.roa (raw, json)
Hash identifier:          RNKsD0SQgClw7+OqcRH15euMNSSnUhqP1GM3EkZBE9k=
Subject key identifier:   1E:39:EE:B0:5B:13:D8:EE:B4:8D:2A:AD:3D:84:35:55:AE:65:B6:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       272433B101B57B19283C51B3C426002E715C55A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13aae7f4-cc38-450a-8fe2-e98223497aef.roa
Signing time:             Sat 18 Jan 2025 00:00:00 +0000
ROA not before:           Sat 18 Jan 2025 00:00:00 +0000
ROA not after:            Sat 22 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.6.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:24:33:b1:01:b5:7b:19:28:3c:51:b3:c4:26:00:2e:71:5c:55:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 18 00:00:00 2025 GMT
            Not After : Feb 22 23:59:59 2025 GMT
        Subject: serialNumber=b0668c8a2c266834c856c1d6fafff28218f04177bc755f7440a0d544f3d1a2b4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:52:62:7b:7b:12:31:56:c1:3a:c2:55:e5:03:
                    e7:03:e1:d3:36:21:f2:28:68:dd:0d:ed:62:f5:61:
                    46:8c:ee:29:be:d6:4e:38:e5:e6:3d:27:92:fc:67:
                    b5:ef:a9:01:d5:1f:32:da:36:97:9b:c6:02:bb:f1:
                    59:6d:55:02:59:05:5d:f8:8a:bd:30:ed:ef:8a:43:
                    48:b8:ff:30:43:31:7b:53:b2:21:19:71:da:87:7c:
                    4b:cc:a0:18:16:a4:55:b1:06:fe:9c:1b:ff:df:d4:
                    58:69:d8:11:34:6d:d3:20:eb:72:02:36:b3:9a:12:
                    f3:6f:54:f6:18:20:62:d0:cc:c6:df:cd:95:c4:fe:
                    6d:b4:28:94:1e:d5:ea:5f:8b:14:b2:0f:54:a6:cb:
                    b6:39:ff:b5:3d:e4:f9:c6:91:12:d0:15:ec:e6:df:
                    5b:b5:05:07:7b:ac:65:85:3f:74:52:9a:39:d7:b5:
                    19:e3:dc:a7:7e:cf:e5:32:7f:6d:02:4a:74:03:ad:
                    57:f9:ce:14:bc:de:12:bf:c4:d1:68:db:10:d0:3c:
                    a4:80:29:a1:15:f9:20:8f:67:e2:d7:3d:2c:b6:80:
                    4a:a4:cc:1b:bc:84:4b:60:a3:1a:c4:8e:f9:a2:9e:
                    38:28:aa:7a:14:73:d6:29:38:08:5e:da:0c:89:2a:
                    87:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:39:EE:B0:5B:13:D8:EE:B4:8D:2A:AD:3D:84:35:55:AE:65:B6:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13aae7f4-cc38-450a-8fe2-e98223497aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         82:73:bd:58:f6:74:0a:dc:b2:7b:44:bb:4f:1c:75:66:d6:9d:
         62:b1:bc:38:2c:a4:e1:02:a3:e7:69:6f:23:99:58:5d:a6:91:
         1a:c9:7b:09:f7:ca:91:7e:99:37:db:67:d7:74:2c:70:4c:d3:
         16:b2:17:91:5f:bb:a0:72:ed:52:37:61:e7:31:de:28:b5:71:
         15:00:2d:bf:5d:52:83:f0:d7:48:8b:89:23:6c:d3:5e:7d:a3:
         85:6f:42:9e:68:df:42:12:3c:fb:95:34:09:11:18:33:58:0f:
         27:74:45:4b:5b:ef:5a:03:bd:a3:03:19:f6:1b:74:e5:62:e5:
         e5:7b:c7:84:f7:66:fa:c9:97:3c:b4:e5:8a:ec:49:87:e6:dd:
         6c:48:0d:fb:07:c1:e0:47:56:7d:34:bc:ca:4a:5c:0a:9e:59:
         47:60:0d:a7:6d:20:2e:e9:96:76:cd:66:db:c2:f8:a2:d0:d3:
         db:f2:c9:e8:6d:6b:f0:06:06:92:0b:80:55:0c:ba:21:b0:fb:
         e6:cb:01:8a:75:6f:a0:4c:43:29:b4:84:33:22:40:a8:d0:c8:
         2b:a7:eb:76:0b:c4:c9:7f:66:8c:f4:ba:b1:4e:42:23:58:07:
         52:c3:58:b4:04:01:c5:76:9d:31:11:b4:53:6e:40:3e:76:f8:
         9c:d3:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----