Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/356faa82-a0da-4902-ac5d-0346855caaf1.roa
File:                     356faa82-a0da-4902-ac5d-0346855caaf1.roa (raw, json)
Hash identifier:          KoJtSJRjSP62fVinaI6Tt/8djmBzj+vT2Kv+j3zWGsk=
Subject key identifier:   3A:EC:03:E5:FB:76:83:63:DE:D2:4E:1C:72:B6:C3:EF:2D:FD:AD:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       19C9F070B4074D39D75CCF241E37BACD442C83FE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/356faa82-a0da-4902-ac5d-0346855caaf1.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.60.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c9:f0:70:b4:07:4d:39:d7:5c:cf:24:1e:37:ba:cd:44:2c:83:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=3dfd841e0a5da09eb827411257451f9a8479177748695e03ea22e6142ec00625, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:15:19:02:5c:b6:ff:f4:90:a8:fb:2e:5f:28:
                    89:e6:77:d3:74:6a:d2:76:16:fa:86:f2:45:2f:80:
                    1c:ba:88:fe:aa:c1:d2:eb:b5:b7:12:d8:22:e6:2d:
                    ee:6d:e6:41:57:33:7d:d2:5a:3f:16:e2:98:fd:26:
                    49:c9:ff:98:c8:73:fc:5a:9d:37:05:3e:94:ab:47:
                    22:6e:84:0c:f7:79:ee:e6:37:b1:bb:2c:2f:62:7d:
                    5a:05:c4:b9:40:19:95:bd:ab:f1:94:ae:83:c2:40:
                    13:c0:00:08:49:bc:e7:d9:79:91:83:fb:5d:a7:1d:
                    c6:cd:88:3a:4d:77:a8:b4:93:0d:5b:6b:6f:ad:51:
                    d0:91:6e:c7:ff:28:4e:5c:97:cd:ec:50:e5:ca:95:
                    0e:36:95:09:52:a2:9d:88:8e:22:16:6c:3d:78:a4:
                    04:22:12:9c:c4:ea:35:d2:5d:3f:61:e1:59:e2:1f:
                    a1:38:ca:21:70:e3:29:0a:f3:4d:87:fd:b9:01:be:
                    6d:0e:39:69:5a:63:f5:d6:1a:fe:44:68:65:be:64:
                    a0:29:97:27:16:7d:30:f1:7b:6e:7f:3e:04:67:bc:
                    d3:81:d1:b8:b3:88:9d:03:7b:d7:3b:84:76:44:e5:
                    11:b2:0e:91:64:d1:ce:d9:0d:e0:63:50:a6:b7:63:
                    de:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EC:03:E5:FB:76:83:63:DE:D2:4E:1C:72:B6:C3:EF:2D:FD:AD:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/356faa82-a0da-4902-ac5d-0346855caaf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.60.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         74:e1:83:57:ac:ab:a6:34:6e:20:db:14:96:98:56:b5:99:3a:
         c0:46:41:43:01:e8:70:46:6e:26:19:40:ba:8b:41:b3:58:5e:
         78:e8:f4:f5:5f:a4:b6:f3:b4:a4:9e:71:12:7a:77:76:bc:3e:
         7f:5b:cb:16:c6:ba:20:e2:ee:ff:ff:0e:16:f9:01:b2:ae:ba:
         26:92:b2:46:65:8d:e6:2f:ba:0c:23:06:86:63:8d:57:16:6b:
         59:39:04:10:c6:97:b2:37:f0:81:d5:67:26:c3:c6:22:9c:f0:
         57:e4:27:20:da:96:a2:40:f7:80:56:ba:dd:fb:6b:71:62:a5:
         ec:9b:eb:6e:64:b6:00:87:f7:2f:f7:0a:88:01:3b:9f:d4:88:
         be:f4:0e:5f:5e:e0:9f:26:6c:d2:d2:f6:e9:e7:cb:d3:f8:e0:
         91:9b:3e:97:ef:fc:a8:18:f8:ae:2a:94:2d:88:95:54:8b:3d:
         28:f7:e5:53:8c:0c:62:0b:dd:8b:f9:bb:68:85:94:3c:c8:d9:
         49:79:68:5d:bd:61:f5:4a:f0:70:35:cb:31:03:6c:57:40:ac:
         c0:60:43:40:27:e9:dc:6a:34:2c:79:9c:87:0a:11:f2:bf:61:
         92:f1:46:aa:a7:cd:4e:38:22:f1:bb:10:42:43:36:59:58:17:
         79:f9:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----