Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38424e51-d3cc-4fe9-af24-6c48066f7436.roa
File:                     38424e51-d3cc-4fe9-af24-6c48066f7436.roa (raw, json)
Hash identifier:          nsMZihDvsGKZjjgp3wUBLECXSpXrUVpStIKCDnQkFMM=
Subject key identifier:   1B:2B:21:F9:B5:4A:A8:44:18:2E:EA:EA:57:B9:54:A5:FD:41:EC:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F6C6774887E6C2EB92050893EE0044DF8B377A4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38424e51-d3cc-4fe9-af24-6c48066f7436.roa
Signing time:             Fri 24 Jan 2025 00:00:00 +0000
ROA not before:           Fri 24 Jan 2025 00:00:00 +0000
ROA not after:            Fri 28 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        70.232.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6c:67:74:88:7e:6c:2e:b9:20:50:89:3e:e0:04:4d:f8:b3:77:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 24 00:00:00 2025 GMT
            Not After : Feb 28 23:59:59 2025 GMT
        Subject: serialNumber=ac422e2fecf8a1e51b3d28f790cb15ee06f119cebd8f2b2713ffae873df56298, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9b:20:e3:e1:43:b1:9d:72:f7:9e:66:2d:02:
                    d7:b4:0d:e6:70:c2:87:fd:17:0d:68:39:50:a6:24:
                    6d:95:da:32:ae:ef:a3:eb:e8:84:59:44:14:16:81:
                    1b:24:87:0c:14:55:d0:ba:3d:a4:a2:17:95:f7:64:
                    1a:01:5f:a2:ac:1b:32:73:bc:a7:44:ff:3a:58:f9:
                    40:05:17:b9:36:57:b0:3f:93:fe:6f:20:59:43:be:
                    d5:b2:c9:d1:a4:d3:81:a9:97:d6:55:93:88:76:2b:
                    95:70:88:da:32:63:bc:61:23:8e:22:4f:e8:31:be:
                    84:3a:91:e4:07:15:db:b3:28:ad:c5:10:4c:8e:13:
                    03:58:69:c1:8c:85:ff:c0:82:c9:dd:8f:58:f8:7f:
                    72:b6:e4:63:a8:4b:62:0b:b3:55:4a:d2:6b:59:72:
                    dd:85:e2:70:79:89:3b:e1:df:9a:13:18:17:8f:a2:
                    c8:e6:cc:7b:14:80:2d:aa:17:dd:d8:99:78:c1:f1:
                    55:df:ba:0b:08:0d:87:9e:f8:75:f7:7d:36:70:b5:
                    fd:9d:f7:4e:f6:ef:48:72:33:f3:18:6e:11:53:ce:
                    8d:fc:b3:5a:8b:e9:d7:e4:7d:6c:ca:05:a0:a6:4b:
                    ca:df:eb:0a:e3:d0:11:ca:8a:9d:38:1d:45:8d:88:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2B:21:F9:B5:4A:A8:44:18:2E:EA:EA:57:B9:54:A5:FD:41:EC:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38424e51-d3cc-4fe9-af24-6c48066f7436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.232.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b4:69:04:3a:bd:8c:9c:2e:f1:34:bc:94:60:42:1d:48:ae:c0:
         60:75:4f:cc:be:07:d0:29:92:78:0c:12:02:2e:04:92:ca:dc:
         27:c3:65:69:3e:df:d1:4a:c8:1d:b3:66:94:8e:95:56:39:27:
         87:c0:fe:23:a8:7d:11:58:69:cc:96:6a:11:a5:51:20:8e:74:
         a1:af:20:74:fd:50:56:a1:74:61:91:ed:be:39:59:db:e2:40:
         b6:b8:1b:cf:dc:76:57:20:a2:34:30:e7:3d:cb:6a:fe:50:69:
         c1:f1:d1:11:ab:ae:27:e4:54:c5:09:e4:28:6a:65:75:de:47:
         b3:7f:e4:86:79:f3:44:76:89:fb:c1:10:1b:c6:0c:9f:8b:fa:
         ee:8e:2a:b3:58:24:b5:d0:29:d3:a9:20:62:1d:b4:25:19:7e:
         7d:03:c4:46:f9:69:db:43:bb:56:f5:2f:3a:4e:95:b1:51:5b:
         9a:09:3b:2d:6d:81:ea:64:1f:16:04:b0:2a:43:f7:84:97:5e:
         fd:e8:68:bb:df:8f:94:4b:44:ec:76:19:83:75:33:d6:b9:11:
         71:1a:6c:7e:7a:f9:3e:2e:91:ab:06:ab:b5:30:c7:02:b7:6c:
         3e:e7:22:2f:a2:75:4f:60:a3:6e:e4:75:92:45:e1:86:6a:c3:
         10:14:de:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----