Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/183b2359-812f-4db8-b13a-b849330f3651.roa
File:                     183b2359-812f-4db8-b13a-b849330f3651.roa (raw, json)
Hash identifier:          Yq6FiXwuITcOAwmm7GmQlbimVOA1cj4DiwNFoFDrZv0=
Subject key identifier:   F0:09:0D:6F:0D:AC:66:9C:6B:47:7E:7D:6F:7A:E9:D2:86:A4:40:C5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49C83B021D1E4F989A5329C9771D88165D5FA490
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/183b2359-812f-4db8-b13a-b849330f3651.roa
Signing time:             Wed 15 Jan 2025 00:00:00 +0000
ROA not before:           Wed 15 Jan 2025 00:00:00 +0000
ROA not after:            Wed 19 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.254.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c8:3b:02:1d:1e:4f:98:9a:53:29:c9:77:1d:88:16:5d:5f:a4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 15 00:00:00 2025 GMT
            Not After : Feb 19 23:59:59 2025 GMT
        Subject: serialNumber=7fcd59fdc727228f9d11ae6d68b859603c0567db756090b69de0acb97b23c263, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:09:9c:46:4e:78:b2:10:4f:fa:3c:e2:f7:
                    c7:2a:42:e7:7b:d3:78:34:ef:7b:aa:cf:26:9b:1a:
                    95:ef:19:3a:06:bc:d2:c0:5f:85:47:bd:fa:58:95:
                    44:7b:71:ac:5f:4c:77:81:ff:3c:5a:d5:d3:9b:4e:
                    61:02:b4:0f:ec:4b:1d:c5:40:d1:09:1a:72:ef:a1:
                    c2:40:07:f5:c1:1e:c2:a6:8d:7a:77:7a:0d:a6:c7:
                    3c:86:73:ee:8b:1d:e4:5d:d7:3c:d3:49:ac:d1:cb:
                    d2:78:45:68:f9:a5:86:1c:b8:39:df:5b:86:ea:94:
                    1e:8a:6c:74:14:db:60:0a:32:1a:79:c1:68:8c:15:
                    e6:74:84:31:76:da:36:48:68:9f:b5:50:af:97:c2:
                    98:1c:f1:18:a5:bf:7b:e6:98:d2:d0:38:55:b8:ca:
                    7e:37:cb:1f:05:a9:1b:09:ae:90:91:f1:d7:f9:bb:
                    b2:23:9d:04:96:5a:3b:84:92:86:a9:5e:3a:6a:6b:
                    b1:38:d4:b4:84:91:27:7b:48:24:8b:54:f2:c9:2d:
                    65:21:f3:7b:53:26:0e:8d:7a:52:13:eb:c1:d7:f9:
                    1f:85:40:e3:47:b4:75:ba:ea:41:ad:30:67:c4:e8:
                    5d:0d:64:a6:22:c0:ba:a2:2e:92:1a:22:c9:85:46:
                    0a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:09:0D:6F:0D:AC:66:9C:6B:47:7E:7D:6F:7A:E9:D2:86:A4:40:C5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/183b2359-812f-4db8-b13a-b849330f3651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.254.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ca:35:39:c1:93:97:4c:dd:58:a1:07:80:ad:a8:ec:c2:5d:10:
         33:57:6f:6c:68:cf:fd:9e:08:35:57:e4:b1:89:b3:e3:fc:97:
         4a:6c:b6:c3:21:a5:78:b2:cb:1f:b9:87:d8:50:db:03:db:d7:
         ae:4a:b5:3a:b9:a9:b4:9c:0f:b7:e9:df:6f:90:de:bd:e9:60:
         45:26:8d:c7:a1:27:c1:d1:f1:62:03:08:52:fa:3e:ab:be:db:
         c5:06:13:88:a1:2b:82:5f:6a:75:dd:79:76:ce:65:19:05:50:
         82:b7:a0:37:41:95:7f:0c:1b:f3:97:97:d1:b9:4c:36:2c:cd:
         f7:38:f7:19:12:b7:48:0c:ff:5b:c0:9a:55:a4:37:0d:bf:13:
         17:ff:6c:af:b6:da:44:79:15:15:2b:9d:70:a0:cb:76:7d:3e:
         15:a8:e2:ee:42:b2:4a:81:e7:9e:14:57:72:88:93:7c:ee:c4:
         8a:97:b4:9c:e0:9e:13:6e:d6:e2:3d:32:61:ca:49:2b:18:f0:
         e9:d9:cf:dd:1a:15:23:31:e7:85:b8:d3:96:4a:00:ab:ca:32:
         fa:e8:f6:1c:76:90:90:55:4f:ff:03:d9:43:ee:24:f3:66:a9:
         6f:ce:8b:8e:f8:d0:a7:2f:1a:95:8d:3a:bf:6e:65:8f:95:d3:
         ff:ac:da:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----