Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/280150a9-28cf-4a60-ae68-8c0cf3fe64df.roa
File:                     280150a9-28cf-4a60-ae68-8c0cf3fe64df.roa (raw, json)
Hash identifier:          pe2mxSyW32dtu3JFMxidtPstWWBQfcLVQBhnnhmsGPU=
Subject key identifier:   32:54:52:D0:77:F8:3B:DF:A5:0E:E2:75:64:2B:8A:65:A9:CB:8B:2E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27C6483F4E1A10F64615ED65736BAD241D26B0A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/280150a9-28cf-4a60-ae68-8c0cf3fe64df.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        174.129.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c6:48:3f:4e:1a:10:f6:46:15:ed:65:73:6b:ad:24:1d:26:b0:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=530d41b374280f46034a927e89131e40ee0df8d65e438734d1b1cdeebe926fc2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:65:2b:03:a2:ba:dd:6f:41:b7:c3:57:bd:
                    1d:bc:30:0e:84:a2:bf:94:2d:83:f0:3f:bb:1e:25:
                    35:85:2c:c0:50:ff:80:9d:9f:c0:2c:5e:e1:dc:99:
                    3c:c7:1c:f6:fa:94:d5:eb:01:0b:fd:1e:39:ac:06:
                    8f:94:2e:1c:f0:03:de:20:0e:ef:32:4d:b7:8f:25:
                    d2:68:bd:0a:fd:c9:1a:15:d3:47:9e:49:3a:e3:5b:
                    5f:de:e2:17:d5:8a:3b:68:10:9d:1a:44:54:2b:54:
                    7c:99:a2:2d:27:10:15:eb:05:b4:54:3c:62:60:8d:
                    c4:e7:78:f0:74:2c:e6:ac:42:a7:d4:14:3f:4c:e8:
                    7b:58:94:a7:4b:ba:01:07:b0:0f:45:b8:dd:28:fb:
                    9a:20:91:80:7b:2e:d0:e5:37:cd:33:fb:ae:f3:07:
                    59:6c:ba:92:01:a8:bb:93:97:d2:4a:3a:ee:5a:be:
                    76:24:6f:a1:49:46:ab:ee:7f:d4:c7:78:f4:70:82:
                    cb:f3:15:a3:05:d2:ff:ac:85:30:8b:7b:71:68:57:
                    c5:18:17:60:02:e9:08:5c:2b:2a:98:6e:50:51:a9:
                    18:96:f1:c8:8f:c9:34:ad:55:fe:d5:57:f0:e5:aa:
                    12:d7:d7:75:4a:ab:b2:dc:9d:4c:1a:d8:e7:45:32:
                    03:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:54:52:D0:77:F8:3B:DF:A5:0E:E2:75:64:2B:8A:65:A9:CB:8B:2E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/280150a9-28cf-4a60-ae68-8c0cf3fe64df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.129.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1c:ce:6c:7d:f8:55:70:81:14:db:f8:92:ce:c6:c5:30:83:c7:
         1f:c7:8f:fc:21:2b:53:09:df:f3:eb:25:06:cc:37:e2:0d:6b:
         a1:a0:74:e5:02:69:ce:bc:dd:5b:ab:65:88:32:2a:f7:7b:1e:
         45:7e:17:ec:16:67:54:e3:e9:4c:9f:2f:95:94:32:ac:c5:76:
         11:2d:36:25:3b:a7:f8:a3:65:34:27:74:64:db:92:9d:23:8f:
         9e:25:c2:b9:bf:4a:54:fd:bc:8b:ea:1b:f9:d1:39:0d:e0:52:
         30:b2:12:9e:0b:f7:84:1f:ea:29:73:ae:07:a7:0c:c7:fd:80:
         1d:07:54:11:13:15:bc:35:aa:36:d5:8b:b1:f9:cb:65:b9:44:
         c7:25:5a:46:58:93:b2:1e:71:37:a0:c1:91:dc:5a:2b:f5:d3:
         e2:28:51:25:3d:8d:2b:82:f0:8a:24:45:34:75:b7:4e:4b:44:
         51:48:28:f3:2e:8c:66:c2:b7:98:71:09:35:a7:64:33:95:a1:
         49:c1:38:c2:21:7d:d7:ef:ff:ef:d6:bb:92:4b:c4:2b:24:8e:
         33:b6:6c:b8:76:71:6c:9c:c3:62:86:f6:12:fc:14:6e:7b:4a:
         6e:f9:ce:23:60:bf:ec:a1:a1:b6:b1:d0:45:50:fb:ba:86:e4:
         97:9c:3a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----