Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ec09901-70fe-41c3-8b4b-3f50242b9056.roa
File:                     1ec09901-70fe-41c3-8b4b-3f50242b9056.roa (raw, json)
Hash identifier:          ZVmvyuyXo30ItHqIv1fOITTqwoO20yTpPrZwwBIPoJU=
Subject key identifier:   36:34:76:45:F7:EC:C8:95:BD:DD:02:C7:42:36:96:C8:DA:EC:06:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B469CFE1AD5A4CDC4BFC8ECD40BDBBD678C125A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ec09901-70fe-41c3-8b4b-3f50242b9056.roa
Signing time:             Sat 18 Jan 2025 00:00:00 +0000
ROA not before:           Sat 18 Jan 2025 00:00:00 +0000
ROA not after:            Sat 22 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        96.0.16.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:46:9c:fe:1a:d5:a4:cd:c4:bf:c8:ec:d4:0b:db:bd:67:8c:12:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 18 00:00:00 2025 GMT
            Not After : Feb 22 23:59:59 2025 GMT
        Subject: serialNumber=3f3f8f925e18139e6c8fde9dbfb7ccaddfaafb46cd4a4f87ad9017b71ccddb8a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:a2:f5:c5:95:37:f1:c0:64:b1:a9:cd:44:
                    f0:6e:e7:b4:16:51:4a:45:58:b9:71:3d:0b:ea:df:
                    1b:25:5f:da:21:3f:40:25:10:88:50:1d:b1:f1:a8:
                    e4:25:69:eb:e3:70:06:6b:67:3d:1e:78:76:30:d7:
                    c3:f0:c9:ce:9a:16:8f:10:fa:33:47:82:84:94:e0:
                    5f:9d:f8:4d:bb:c5:b9:94:59:5e:ed:38:d2:54:d4:
                    a1:80:b5:c2:2d:86:65:a4:d4:de:d3:00:6a:a1:90:
                    1e:dd:d0:a0:2b:d9:43:f5:8b:e2:83:ee:5a:42:8c:
                    4b:8c:3f:7e:15:f1:d1:a4:51:1d:e1:e4:f1:fc:d4:
                    b8:e4:c1:34:16:f2:7e:f4:1d:fc:50:77:80:69:35:
                    df:9b:e9:59:e9:82:66:72:ee:1b:d3:c4:de:e1:e4:
                    df:27:0b:17:14:6e:c4:92:ec:a1:b3:bf:c1:4c:55:
                    00:02:ce:b6:d6:f5:e7:a0:7e:38:90:79:6f:1e:01:
                    81:d3:92:08:fe:bf:d8:84:25:da:ab:61:e9:a8:f4:
                    76:69:0f:cd:62:34:89:39:f4:dc:4a:0f:e8:7e:8e:
                    0b:b2:1a:a6:e6:91:35:5b:52:a9:00:32:e1:81:7f:
                    60:92:02:87:d1:e9:c9:29:ce:21:f8:85:52:64:9c:
                    ec:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:34:76:45:F7:EC:C8:95:BD:DD:02:C7:42:36:96:C8:DA:EC:06:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ec09901-70fe-41c3-8b4b-3f50242b9056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:9b:06:80:4a:1a:39:20:27:22:28:a5:6f:bb:3f:69:d8:f2:
         15:53:c2:a6:c5:57:47:8d:92:9a:a8:eb:76:53:42:1d:37:ef:
         85:ff:16:c8:e6:b6:68:81:d1:a8:87:ba:6d:52:b5:75:f3:94:
         a1:10:39:8e:2b:44:67:02:d9:fc:12:51:ab:83:d2:f1:74:cb:
         d5:38:69:e1:3d:0d:65:be:ba:82:3c:3e:31:2f:73:60:ab:95:
         b1:ed:cd:dd:29:7e:13:62:85:96:23:c0:d0:05:92:cc:12:74:
         ee:1c:65:a8:8a:b7:fa:c2:bf:ec:39:c0:87:96:11:05:e8:30:
         15:88:57:f6:5c:51:2f:31:fb:04:58:85:41:d0:4d:89:c4:1e:
         d6:03:65:7e:55:e5:c0:0e:2b:94:d2:94:f2:8f:5b:69:84:f9:
         a5:bb:2f:07:34:87:0b:67:b8:1a:12:c0:2f:de:08:dc:70:40:
         3c:32:0d:22:4e:5b:7e:07:b7:de:22:22:cf:8c:d6:32:ab:d5:
         7c:ce:e5:44:7f:ab:72:32:20:05:ae:53:3b:f7:ea:02:8a:26:
         b2:18:74:2e:a3:40:fc:9d:4a:7b:e3:01:e6:f7:81:60:4f:06:
         3d:64:5b:c4:ca:77:91:f8:63:c5:35:67:c3:6a:fb:7d:e2:91:
         01:c2:9a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----