Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2db9ede0-09fd-41cb-b644-7eb13b4f297d.roa
File:                     2db9ede0-09fd-41cb-b644-7eb13b4f297d.roa (raw, json)
Hash identifier:          Fvu765ZV3VCUbln8BgmusHbSaKs1WS6qSNKBckOkD5Y=
Subject key identifier:   48:2B:E9:D5:A4:2C:DF:1B:44:9B:1C:40:BD:84:05:95:A2:12:4A:27
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4181956B026FD8EBBD285E98356E2D2F54EB9CB1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2db9ede0-09fd-41cb-b644-7eb13b4f297d.roa
Signing time:             Fri 24 Jan 2025 00:00:00 +0000
ROA not before:           Fri 24 Jan 2025 00:00:00 +0000
ROA not after:            Fri 28 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        199.183.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:81:95:6b:02:6f:d8:eb:bd:28:5e:98:35:6e:2d:2f:54:eb:9c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 24 00:00:00 2025 GMT
            Not After : Feb 28 23:59:59 2025 GMT
        Subject: serialNumber=cd11ab15a545ed94345c381618a8f43d453fe9966b28cd5742013ce829c98c7b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:90:8b:4f:fc:a8:95:6a:99:9a:f4:2b:1a:25:
                    22:b4:ac:9c:d1:ad:14:8c:29:f9:c6:54:a8:33:ef:
                    1f:af:d8:54:b6:03:62:ce:95:de:27:23:b6:db:52:
                    8d:34:69:26:7c:bd:3f:e2:cc:09:3a:f7:05:fe:e8:
                    55:8d:a2:bd:4f:94:ca:af:01:31:f6:df:77:fd:64:
                    8a:83:ec:d7:c2:bc:a6:27:b9:f4:fc:e6:de:97:55:
                    81:c2:75:4f:1a:03:96:8f:94:a9:00:c2:c9:bf:da:
                    a3:25:ea:fe:5b:2b:b5:da:31:52:aa:b8:70:aa:8b:
                    95:f8:c7:e7:10:f9:04:cd:86:67:87:da:77:6b:a5:
                    36:f1:8c:86:9f:51:60:00:03:9a:b1:2e:74:4f:ea:
                    b1:7c:b3:ea:11:02:8f:2e:35:73:c6:96:ca:fd:ee:
                    3a:fe:18:70:8a:18:30:25:88:13:34:1c:f0:f1:c8:
                    a1:b8:52:f0:09:07:f7:9b:1a:02:80:bb:61:80:5d:
                    58:b3:1a:e8:b3:6f:06:67:d1:e7:59:f7:42:2f:80:
                    1b:15:5d:c7:61:cf:8d:9a:53:65:93:16:03:91:1e:
                    1c:10:4f:e9:ab:68:06:c9:fe:17:7c:8d:57:f0:46:
                    74:68:51:8c:cc:38:0d:f1:49:f2:92:58:41:a7:2f:
                    44:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2B:E9:D5:A4:2C:DF:1B:44:9B:1C:40:BD:84:05:95:A2:12:4A:27
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2db9ede0-09fd-41cb-b644-7eb13b4f297d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.183.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:b7:c3:fa:a2:e3:35:df:06:6d:78:e8:7f:54:ad:92:f3:53:
         2c:68:2e:96:9b:92:8a:fc:3c:a2:aa:23:0b:d0:aa:7f:36:71:
         d9:82:5f:0e:8a:62:a7:ce:e0:70:3d:3a:ce:7c:3f:79:76:98:
         bc:c3:2b:0b:76:45:bd:aa:dc:4c:6e:04:c6:27:d7:d4:32:48:
         48:36:f7:10:7a:44:d8:36:f9:94:b3:86:67:7b:62:89:db:c0:
         64:0c:c7:9d:34:a1:a2:a2:be:8f:24:52:e4:7f:47:bf:8a:8c:
         aa:2d:b7:af:82:76:e3:2e:57:ea:bf:e5:79:00:cf:65:b3:0c:
         b4:73:8c:24:ea:6c:a9:7d:3d:1e:d1:55:2d:36:be:94:d2:a1:
         d1:ec:d8:96:bb:55:b6:14:6d:ce:2e:1b:47:31:ba:e6:4d:cc:
         6b:03:84:5f:5a:c4:eb:e4:8a:19:b0:db:be:64:5f:b7:43:60:
         a1:67:a3:5c:6a:95:65:b5:de:cc:0d:c7:5e:4d:b6:6c:bb:25:
         11:55:01:82:d2:f6:89:2f:db:a8:a7:2e:bb:c0:be:70:d6:74:
         a7:7d:22:50:6f:91:cc:ca:56:ad:87:30:28:90:bf:4d:cb:80:
         9b:0c:93:ce:ef:d0:20:d9:1f:61:c1:ff:e0:93:73:63:50:93:
         cc:5f:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----