Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41cde9cf-c0ce-4562-a2a6-f324bc8811c8.roa
File:                     41cde9cf-c0ce-4562-a2a6-f324bc8811c8.roa (raw, json)
Hash identifier:          IOMqIp9ESr8pH0MJmazfg9UQOIbKmfm+/Yb97BpJzkc=
Subject key identifier:   26:CD:D9:5B:55:BB:57:EC:79:5F:70:06:AD:82:B9:EA:B5:64:3A:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44D205FCF11B82CF31B25CD87E809C36673EFBDD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41cde9cf-c0ce-4562-a2a6-f324bc8811c8.roa
Signing time:             Wed 29 Jan 2025 00:00:00 +0000
ROA not before:           Wed 29 Jan 2025 00:00:00 +0000
ROA not after:            Wed 05 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.19.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d2:05:fc:f1:1b:82:cf:31:b2:5c:d8:7e:80:9c:36:67:3e:fb:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 29 00:00:00 2025 GMT
            Not After : Mar  5 23:59:59 2025 GMT
        Subject: serialNumber=7b5dacfaedff6378ad2aa4e08f0386fdc2b936a536b1b0b6bd44c2ca6b309b7a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:61:07:03:c8:68:04:b7:53:f9:79:94:9a:68:
                    48:41:aa:fc:88:85:97:bb:da:7a:ec:02:81:9e:5c:
                    5c:06:fe:3a:69:66:14:58:03:c4:0f:49:90:44:e9:
                    75:fd:57:df:e9:ec:b7:f6:60:33:bd:6a:72:51:56:
                    86:16:37:9a:78:83:17:1e:26:dc:4f:77:da:38:74:
                    d6:4f:e6:10:18:45:20:34:27:0c:9a:62:3a:0e:0e:
                    6a:a7:8a:e7:52:da:c2:2c:08:8b:0b:9a:0b:fe:46:
                    2e:7a:06:b2:ba:0a:ff:3f:af:85:18:22:94:f5:80:
                    98:92:c1:fe:d9:09:1a:19:32:d7:67:bc:79:fe:4f:
                    56:3c:4c:03:af:44:d0:11:94:7d:8b:d3:5d:9a:5e:
                    07:58:f5:55:a8:1f:cb:5a:d2:ef:44:68:98:fe:96:
                    ee:8b:f6:1e:66:87:68:66:a1:21:17:c7:be:d9:e6:
                    08:07:7b:7c:fb:1a:5c:3c:b1:6a:bd:bf:2b:ee:fc:
                    b1:ce:ab:a3:92:8c:26:76:15:28:4a:5d:92:99:e3:
                    74:5f:a7:86:f2:fc:a3:3c:3f:06:fd:19:61:4a:eb:
                    ef:f1:03:b8:9c:00:b5:21:12:8a:0f:c9:ca:61:b9:
                    e3:53:ff:db:08:31:90:3e:3d:f3:50:a7:81:f0:75:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CD:D9:5B:55:BB:57:EC:79:5F:70:06:AD:82:B9:EA:B5:64:3A:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41cde9cf-c0ce-4562-a2a6-f324bc8811c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.19.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         82:a9:30:0d:b0:5f:5f:2e:9b:85:a3:ed:cb:46:05:42:79:51:
         f8:8c:06:45:69:c1:9f:51:6f:22:29:d9:66:fc:a9:61:d6:cd:
         bb:09:d3:69:9c:6d:44:c1:e4:73:64:35:d6:b3:97:a2:85:ef:
         c0:8d:03:e0:bc:f5:3a:9d:f0:2f:03:64:aa:91:24:de:0f:b1:
         26:d7:ef:c6:4c:d3:cc:88:fd:77:b1:52:37:3c:9b:fb:c3:92:
         89:7a:01:05:0e:64:9e:fa:da:03:ab:e9:fc:0a:05:cb:60:46:
         99:6d:41:29:c7:76:5b:9c:39:e1:8f:21:2b:51:35:d5:00:e8:
         9d:2a:79:c1:61:39:14:04:ec:af:64:1a:ab:dd:1a:3e:e4:a9:
         fd:84:53:78:99:f7:d1:0f:b1:0a:18:44:3e:22:8e:2f:e1:5e:
         23:40:a1:6d:43:33:e6:f5:bc:eb:f3:11:02:2a:9f:b5:2a:60:
         ff:0d:22:6b:64:8c:64:61:71:4c:ec:1f:f7:48:37:9f:ad:c9:
         8f:45:fd:0d:f3:30:66:d7:a3:03:83:07:b1:0a:ed:b7:1a:5a:
         0f:af:b0:db:63:8e:4c:d4:69:81:68:12:35:3c:95:f7:a2:7b:
         ea:ae:2e:2d:62:1a:6b:ea:84:01:da:32:0d:95:29:ef:fe:d3:
         a4:e7:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----