Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28fca7ae-36fc-4e84-901e-47a330661dda.roa
File:                     28fca7ae-36fc-4e84-901e-47a330661dda.roa (raw, json)
Hash identifier:          9L+3UsA3XbZ0Gxmvr9L8/LG8mXcIkBRbEULpPnk4RJE=
Subject key identifier:   B0:5E:12:55:B0:2A:5B:F4:E5:5E:95:E3:AD:71:53:AC:CE:F6:39:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       35DF39CB943819BF10ADEF8190397846E484A8E9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28fca7ae-36fc-4e84-901e-47a330661dda.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        107.22.144.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:df:39:cb:94:38:19:bf:10:ad:ef:81:90:39:78:46:e4:84:a8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=d7f76c1789c5f58895231071f01dbf629ee19a7f4a52acb6747d69e0128fffa5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:9b:f4:7b:dc:1d:96:12:ba:6b:0c:0e:3e:
                    76:9d:b1:48:c6:32:66:33:5e:7c:93:18:b9:62:0a:
                    10:cf:9a:b5:69:f6:d0:f3:0d:20:dc:8b:1c:e9:eb:
                    5f:2d:4b:0f:45:07:1b:f4:4e:9c:7c:bb:d5:80:b9:
                    89:54:9f:55:bf:42:e9:e2:92:23:e3:f4:04:76:09:
                    9f:71:c6:03:54:51:29:1e:95:d1:f3:b0:45:cd:cc:
                    9a:52:05:54:28:cc:c1:93:a9:ff:03:b6:eb:be:9f:
                    53:e1:59:d6:9f:fd:65:cc:de:44:bc:b8:21:89:38:
                    86:c4:31:b0:1f:bc:cd:56:27:01:ad:c5:32:fb:12:
                    ee:d1:a5:06:d6:e6:61:10:3f:3d:97:d6:c2:96:67:
                    a0:c8:71:a1:7c:a5:c2:7b:2a:c2:ef:db:68:85:b6:
                    b5:7e:03:08:8f:dd:7d:61:7d:a2:30:53:d8:b8:cb:
                    75:aa:a0:1c:93:0e:29:3d:ca:c8:b0:2e:93:71:58:
                    6c:f2:1d:41:87:df:a1:23:10:74:5e:cc:47:67:3c:
                    c3:b8:bf:90:dc:26:97:7b:2c:f4:dd:d2:67:40:2c:
                    6b:d2:8b:7e:6b:eb:f6:5f:c3:3a:2d:18:f3:91:bf:
                    91:3a:4a:08:01:1f:22:6a:70:cb:7a:76:91:37:d6:
                    41:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5E:12:55:B0:2A:5B:F4:E5:5E:95:E3:AD:71:53:AC:CE:F6:39:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28fca7ae-36fc-4e84-901e-47a330661dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.22.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         40:3c:3c:98:c2:83:a5:3e:e9:5b:7c:18:5b:88:de:da:f7:b3:
         44:f4:b9:1c:bd:d3:30:11:00:f7:43:b5:15:af:c3:2e:f7:9e:
         0b:fe:4a:fd:32:90:ec:f1:6e:20:0c:06:18:ed:1d:10:3f:7e:
         9c:11:19:9c:4b:72:77:1e:63:1d:97:15:f3:90:5f:84:26:42:
         82:14:13:ba:81:b8:0f:04:72:b6:cf:3b:2c:dd:c7:5f:21:ff:
         da:c0:d6:fc:c8:8d:09:23:30:69:b8:b9:dc:8c:90:74:bc:43:
         09:be:50:af:75:64:55:48:ea:d4:9e:ec:8c:42:7b:50:90:1c:
         ab:6e:72:c5:39:ea:d1:86:30:50:8d:08:26:2a:45:44:a1:ec:
         b4:d9:eb:90:46:6f:01:03:69:a8:da:97:82:b4:93:a0:79:f5:
         0e:7f:1f:59:13:f2:c5:d6:1b:bd:9b:cd:33:6b:27:76:a9:4e:
         32:60:b3:ba:2c:3f:da:49:18:1d:f6:83:4b:8a:90:23:cf:41:
         21:fe:fe:7c:fb:0b:31:39:b9:e7:1d:af:f7:50:e5:7e:e7:c7:
         7b:da:7c:9d:54:24:61:30:7a:9b:55:7a:0e:41:d5:3c:02:94:
         c2:0d:f5:85:8a:31:43:1f:41:ba:a6:4b:dd:32:5d:81:36:7a:
         fb:0f:87:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----