Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23698cc0-0544-464f-bf24-b043449a56bb.roa
File:                     23698cc0-0544-464f-bf24-b043449a56bb.roa (raw, json)
Hash identifier:          a9JoeSORoGqyh/hv8FF10Jxcqt9A7q2SKxkat38y+5M=
Subject key identifier:   55:DC:45:DC:C0:93:23:6C:8D:74:22:C3:C5:2C:4A:30:3A:63:A7:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       41E4DAAEE6114486261E5041AB60395601CBD071
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23698cc0-0544-464f-bf24-b043449a56bb.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.74.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e4:da:ae:e6:11:44:86:26:1e:50:41:ab:60:39:56:01:cb:d0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=0659279981d813adc6b0ea855381250ec02e4a116d181012730db1c48d477910, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:c6:2a:3d:45:b3:7b:51:1b:46:cc:14:6d:
                    a0:96:95:e5:a5:ec:52:fe:25:09:45:f5:0d:2e:ff:
                    e1:f5:c7:f5:54:68:61:38:c4:85:cb:2e:05:43:20:
                    66:eb:70:82:8e:65:7e:47:a6:bf:0e:06:14:50:51:
                    a5:a9:31:44:80:dc:8b:95:02:b9:13:26:01:e2:7e:
                    53:59:2f:94:e0:17:e1:1b:3a:a0:85:fb:27:d4:f5:
                    7e:10:a1:6a:8c:a1:d8:bc:29:f8:7a:ed:61:0f:63:
                    25:4f:7f:64:00:4a:81:d4:57:ac:3e:64:f8:2e:10:
                    f2:13:f1:a7:f4:2d:af:0b:df:15:11:db:c3:7f:10:
                    09:27:19:a4:4e:23:02:bb:2a:da:65:c6:0e:0b:66:
                    d2:b0:9d:f7:96:69:95:0f:1c:ec:de:3a:99:d6:9c:
                    98:af:a6:5a:a9:4e:98:ef:f8:d0:7e:48:9b:a4:31:
                    2d:4a:b3:8f:ee:f7:4c:22:97:da:7e:4a:50:07:7d:
                    42:73:62:48:3b:87:46:64:87:55:32:82:d9:e9:0a:
                    2e:63:1f:a9:52:99:fa:b5:c0:90:fa:2e:68:be:d8:
                    b6:c2:6e:ed:77:17:e2:a2:e8:d5:1d:a3:1f:74:eb:
                    a7:67:ce:c4:05:43:d2:d1:cc:4f:c8:7d:2e:5a:84:
                    21:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DC:45:DC:C0:93:23:6C:8D:74:22:C3:C5:2C:4A:30:3A:63:A7:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23698cc0-0544-464f-bf24-b043449a56bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.74.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:a2:f9:df:91:3f:11:75:17:6f:b8:6b:d1:3c:48:4f:db:
         84:bf:68:66:3f:19:d9:9b:21:95:56:99:d2:11:e1:26:f7:06:
         08:83:e1:85:3d:bd:5f:36:be:9a:2d:8f:cb:4c:5b:fb:fa:8b:
         b4:d4:bc:0b:60:53:0a:e6:01:bb:7f:6b:be:55:be:9a:f4:ad:
         03:2a:60:03:c9:1e:75:5b:06:94:c1:5c:b9:21:3a:a0:89:6f:
         be:ce:aa:e5:eb:11:50:1b:77:ec:99:c8:8e:e2:8a:c6:33:b9:
         aa:3d:d2:5b:bd:55:08:8f:33:4d:63:a1:ff:02:08:aa:ec:03:
         86:77:e2:ab:6b:c5:ed:8b:8b:6a:49:b8:86:18:06:5b:21:93:
         6d:b3:7c:6b:46:25:a7:ac:c4:25:1e:b1:89:55:94:0d:e3:c0:
         02:79:a0:cc:08:e7:3b:51:47:22:66:bf:41:86:61:3b:1d:e5:
         e7:a6:2c:3b:a1:06:57:b2:39:68:23:53:8e:7b:72:cb:76:b9:
         dd:7f:d6:f3:6c:be:f6:5a:e8:52:52:ad:99:d4:28:61:11:7e:
         e1:96:15:a5:87:e7:c5:8e:41:5c:df:eb:54:fe:57:8a:e5:5c:
         c8:ed:6b:be:35:96:2b:2d:01:c9:b1:77:58:99:51:a1:74:ee:
         39:3a:af:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----