Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3118f1f1-38c4-427e-acff-1282cc7cb367.roa
File:                     3118f1f1-38c4-427e-acff-1282cc7cb367.roa (raw, json)
Hash identifier:          TgOYLNrok5A3vkzsS854CiYEE/Zv5917IqpWGUsy2is=
Subject key identifier:   C0:5A:4D:B2:CB:87:65:65:FB:18:E8:23:B0:C1:C8:64:7B:F4:03:9F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77D05771DA3B57A3E84E252414D086B4E542BDE7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3118f1f1-38c4-427e-acff-1282cc7cb367.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.101.168.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d0:57:71:da:3b:57:a3:e8:4e:25:24:14:d0:86:b4:e5:42:bd:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=33029159544abe6023d4637ba2793921b009156405b660f4b8c482b3d7926d1a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:70:19:36:1e:8e:f4:76:ed:93:66:66:6c:
                    9d:89:1b:88:98:64:fc:a6:c6:fa:10:27:e1:16:37:
                    7d:71:0f:ee:00:5d:a6:ab:69:67:bf:e4:28:75:f5:
                    1b:01:16:d2:46:ba:35:fe:b0:00:df:e0:f4:be:29:
                    43:e5:99:9f:b2:b2:2f:17:4b:87:b6:5c:d8:8f:8e:
                    2a:8a:84:14:e3:00:38:41:bc:26:1f:ad:e8:8b:b0:
                    0e:81:cc:81:da:d9:11:e4:38:17:a4:83:f0:27:86:
                    95:36:d8:19:70:78:f5:b7:86:51:47:f4:e5:be:b2:
                    bd:93:c8:ed:11:89:be:5c:57:c1:73:a4:81:43:96:
                    84:1b:6b:2a:86:04:40:d8:62:52:a1:5f:59:d4:17:
                    0c:c7:dc:55:a3:8f:50:dd:d6:c6:ed:25:3a:85:f7:
                    25:d9:f1:4c:05:28:4b:f4:af:df:04:7a:54:32:6b:
                    7d:ed:39:67:45:b3:de:1c:e3:83:24:2b:68:26:dd:
                    2a:b7:f1:f9:43:3d:59:ff:6c:88:ab:d8:40:fd:5f:
                    0a:56:fa:00:5e:ff:60:25:22:4b:87:d7:e0:19:f9:
                    b4:96:ba:74:ed:f2:55:1d:12:c6:21:6f:25:bf:ee:
                    b3:d1:f1:0a:5f:3d:1e:df:13:1f:37:47:49:2b:c5:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5A:4D:B2:CB:87:65:65:FB:18:E8:23:B0:C1:C8:64:7B:F4:03:9F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3118f1f1-38c4-427e-acff-1282cc7cb367.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:e7:23:ed:79:83:c9:02:e7:10:00:d0:42:5f:71:0f:b4:0f:
         82:50:e9:2b:16:65:36:f3:87:60:85:c0:a3:19:ab:10:da:9d:
         b5:3b:89:1c:20:56:23:8b:d5:5d:e5:87:52:23:6d:e2:3c:73:
         a9:02:93:f6:c8:86:39:b6:4d:c3:1d:6c:8c:e0:c5:ff:41:0d:
         7a:36:13:ac:b4:11:ac:95:ca:67:ef:d0:0c:40:39:3f:8f:83:
         70:62:36:bd:3e:59:bb:a6:b1:92:3c:95:00:36:b8:d6:dd:9b:
         f4:81:73:06:aa:9e:6c:42:98:0b:64:3b:bc:52:2d:30:d6:ff:
         a0:f2:4a:a9:ea:1c:c8:5e:b8:9e:12:92:a5:ef:0d:de:2b:e8:
         4c:b3:de:4d:32:93:51:4f:d4:9a:d4:b2:e7:b5:ff:c6:8c:1d:
         97:5b:68:06:7d:85:93:e1:f1:ce:4e:9d:ec:8d:4d:56:3f:d0:
         8d:21:2a:94:48:07:5b:a8:d9:3f:dc:c4:c3:66:c6:58:4e:ee:
         b9:4a:6e:3c:24:c3:43:c6:37:dd:17:4f:8b:4f:18:e3:64:b0:
         65:e3:e0:0b:22:6d:69:52:06:a9:40:dd:cd:3f:5a:16:47:12:
         67:d9:93:d0:99:8a:b9:c1:42:8b:ff:2d:69:db:a7:f7:44:74:
         3f:3d:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----