Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fcfdeea-70f8-42a9-a49e-446a3af72d8c.roa
File:                     2fcfdeea-70f8-42a9-a49e-446a3af72d8c.roa (raw, json)
Hash identifier:          2BSNy6v/2gU55gKhfRjNWUECVPNfUVw0nlO0pr4o7mA=
Subject key identifier:   02:1D:43:65:BB:EC:7B:26:72:68:20:C6:ED:17:0F:47:33:D1:C9:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D47E1A3151F369984A1ABFBD28E6C7286824C28
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fcfdeea-70f8-42a9-a49e-446a3af72d8c.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        198.13.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:47:e1:a3:15:1f:36:99:84:a1:ab:fb:d2:8e:6c:72:86:82:4c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=de6d648f2e89e58b0ab60f8113968ab3100acc905a5cae1f027df7fd2977b77d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:da:d5:2e:9c:47:1e:e7:7b:92:1c:87:54:
                    8a:18:b7:41:a6:72:48:49:d3:20:87:22:07:ab:76:
                    b9:ac:63:0a:0c:6a:b1:92:e0:c9:3d:ea:d9:f2:6e:
                    98:8c:1e:2d:c1:e7:b8:3e:eb:03:09:5a:be:7d:87:
                    f9:b4:b6:64:c4:27:e3:a8:01:4e:ba:ea:89:8b:ad:
                    d3:0c:0b:cd:ec:ae:33:85:1c:66:71:1f:5c:8d:86:
                    3e:5c:b5:a6:13:8e:6a:9d:cc:e5:42:7a:29:e0:a1:
                    74:fe:a3:68:23:ef:6f:2f:bd:92:fd:7a:d5:aa:06:
                    7a:c2:1a:5e:ac:f9:5a:00:96:1b:3b:47:1b:e6:80:
                    a3:fd:9d:61:b2:b6:b9:b8:b6:c5:1b:9a:61:45:e8:
                    a2:65:e3:a1:24:98:bf:94:cc:05:d6:00:a4:1c:72:
                    cd:85:ab:27:97:ca:b3:7a:0f:95:e0:0b:d1:34:85:
                    db:44:78:4b:88:80:e0:fd:82:45:2d:86:ac:c2:8d:
                    ab:75:aa:d9:24:c1:2f:26:93:5a:13:6c:fc:08:0f:
                    52:b1:c5:5d:39:89:d9:4f:e6:38:52:65:18:8f:db:
                    20:2d:9c:4f:58:a1:e1:20:3c:a5:2a:ee:14:33:34:
                    c2:4e:35:fd:68:7b:b6:1f:f5:1b:f0:ca:38:8b:8b:
                    49:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1D:43:65:BB:EC:7B:26:72:68:20:C6:ED:17:0F:47:33:D1:C9:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fcfdeea-70f8-42a9-a49e-446a3af72d8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.13.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:33:a4:d0:85:7c:e5:4d:b2:f2:22:65:fa:d9:08:48:2d:bb:
         c3:2b:f2:25:6d:07:38:0c:2d:41:79:4c:ca:6e:70:f8:69:7e:
         7a:7b:51:62:8b:cd:13:b1:61:5b:29:94:dd:03:b6:0a:d2:93:
         53:2d:1a:57:fc:3b:7b:01:c6:de:2e:8f:18:0b:53:3d:6c:f2:
         a9:c7:05:83:3d:c9:7a:93:99:c6:1b:6f:d4:b7:d8:66:a4:1a:
         3c:0b:e7:3a:45:8f:70:05:49:7d:e6:a2:9e:a4:47:46:f8:a3:
         bc:2a:67:05:86:42:00:15:60:71:61:24:03:57:01:5f:4c:d6:
         5e:53:c8:74:01:14:e3:39:0d:03:7f:da:36:55:f5:da:cf:e9:
         17:2a:36:ae:bc:7b:8b:5c:da:02:94:1b:b7:8a:3c:50:77:b1:
         20:af:e5:cc:0b:58:a6:23:11:27:0c:55:c7:cf:be:24:04:69:
         56:83:29:81:da:1c:d4:1d:41:f4:a2:75:eb:bd:0c:09:45:9c:
         fd:20:80:7c:87:4c:5e:e1:b2:47:c0:ce:a9:2a:66:e9:f8:36:
         d1:8c:10:0f:2c:36:8a:39:62:b5:b0:8c:71:67:5a:65:85:b1:
         1f:03:2a:e5:f1:94:5b:08:0c:2d:cb:0c:03:75:d5:87:38:9f:
         07:e9:f0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----