Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c8703a1-34ff-445a-83d6-9423df90d41e.roa
File:                     2c8703a1-34ff-445a-83d6-9423df90d41e.roa (raw, json)
Hash identifier:          cZpGPZMSW2pIAX4vHntWWs+bfiQUaE4XpO9KE0kAMzQ=
Subject key identifier:   6A:CF:49:4C:AD:8D:3D:16:EE:D4:2F:D9:E9:23:E1:33:FE:1C:9D:E4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       198D0A3E7F0A7A566717DCA41EF87783EA3A6213
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c8703a1-34ff-445a-83d6-9423df90d41e.roa
Signing time:             Tue 28 Jan 2025 00:00:00 +0000
ROA not before:           Tue 28 Jan 2025 00:00:00 +0000
ROA not after:            Tue 04 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.0.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8d:0a:3e:7f:0a:7a:56:67:17:dc:a4:1e:f8:77:83:ea:3a:62:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 28 00:00:00 2025 GMT
            Not After : Mar  4 23:59:59 2025 GMT
        Subject: serialNumber=24d0d669d0c93e93ad266519852f12ef3d915c0f47cd4abfe95f5729154574df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:4f:02:67:70:e6:f6:1a:b5:63:06:a1:8e:
                    21:cf:df:80:d0:0c:2e:a0:05:fd:a4:51:fb:75:e8:
                    f7:f5:d6:02:90:40:ca:3b:53:da:44:81:ca:0d:64:
                    da:1a:dd:38:66:a9:e7:c1:bb:11:3f:51:63:eb:cf:
                    e0:fc:fd:b3:d7:88:d5:13:85:a2:3b:b0:c0:93:fd:
                    0d:d2:31:a1:fe:33:48:db:b0:9a:67:62:d5:6b:f8:
                    2d:c5:c7:38:4b:7f:60:51:cf:13:74:7f:f4:48:11:
                    ac:2e:66:88:c2:03:d7:25:82:c6:da:fa:e6:12:50:
                    60:bd:80:25:8d:65:ba:0e:f4:02:53:7d:fa:1c:fa:
                    43:33:e5:3c:ea:a3:eb:38:64:db:73:85:68:a8:b7:
                    62:c0:7e:b0:7f:e0:4f:83:d9:0d:34:40:15:01:81:
                    a9:de:1b:4d:a8:84:15:2f:0e:fb:c6:03:7f:b7:17:
                    5b:9d:12:8d:a2:cf:8d:87:04:8a:ea:bf:56:0d:d9:
                    b7:23:02:72:fe:d4:56:e9:97:cd:64:02:07:61:8a:
                    75:d3:58:39:52:f2:da:19:22:2b:90:1c:c9:44:3d:
                    01:7c:d4:9e:11:f8:a8:8b:53:68:b6:85:c8:aa:f9:
                    c0:a0:c9:a8:ab:88:b3:4a:10:01:5c:a3:14:84:7b:
                    44:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CF:49:4C:AD:8D:3D:16:EE:D4:2F:D9:E9:23:E1:33:FE:1C:9D:E4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c8703a1-34ff-445a-83d6-9423df90d41e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:62:9b:2f:5b:72:a7:db:24:b2:fc:89:70:00:b5:4e:9e:0c:
         bd:a5:87:b1:2e:7f:82:c2:12:b4:95:cc:5d:ba:45:83:f2:c2:
         02:eb:e5:c0:49:23:be:17:fe:ea:ac:6f:75:a7:dc:89:1d:20:
         82:69:65:f5:a1:02:0a:70:58:82:5b:31:67:1c:6a:88:5c:d2:
         3d:fe:c9:9b:3c:c7:5d:4d:1d:89:44:52:45:59:c1:3e:da:f6:
         0d:d8:54:8a:66:6f:d4:ba:b2:50:65:2c:94:9f:5c:02:d8:51:
         ee:45:25:e6:44:a9:db:21:b6:db:27:ef:94:34:09:3f:8c:39:
         75:0f:75:09:5a:c9:54:78:9b:93:26:26:c0:f4:d6:f2:53:25:
         6e:a9:cb:eb:1a:89:4c:95:03:9d:7d:fc:27:22:bf:36:54:d7:
         24:46:2b:0e:cf:37:c9:f9:0a:25:3a:ed:10:61:62:47:86:a8:
         5f:0a:a8:e7:c2:06:ac:a6:d9:af:f1:e2:33:63:23:98:ec:de:
         aa:28:f6:dd:64:29:cd:dd:29:17:15:a6:cb:fd:4e:b6:38:28:
         b6:6d:c1:bf:1e:8b:96:44:cb:c1:2d:1a:fa:d0:f5:81:e9:b4:
         3c:4a:97:d5:8b:04:05:c7:1b:57:d3:c1:09:f9:ef:26:bf:31:
         2a:29:18:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----