Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4773b746-c511-41ce-a8da-8491af8ea281.roa
File:                     4773b746-c511-41ce-a8da-8491af8ea281.roa (raw, json)
Hash identifier:          22nJTpfpEirTS8RJeU+G4W/9rh6FyhPrQ4PM9Ih3lqY=
Subject key identifier:   07:AA:D9:8E:3A:A3:2F:FE:78:DB:85:0D:07:A9:EC:4F:AE:48:09:DF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0548FC029E9F84E4F884BEC44DC1C966116E83DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4773b746-c511-41ce-a8da-8491af8ea281.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        161.178.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:48:fc:02:9e:9f:84:e4:f8:84:be:c4:4d:c1:c9:66:11:6e:83:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=a32c9f5b44f9b302f6589e28319ea99ee95de5122fd1925f787b785b9e037951, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:36:55:a8:f1:5c:a1:56:51:a6:1d:09:c5:
                    a9:63:a3:25:26:fa:65:b1:08:1e:6d:02:09:d7:5f:
                    65:b6:ee:46:4f:4b:4d:da:75:66:89:24:d1:a1:cb:
                    ed:af:e1:d8:72:7f:d5:8b:9e:47:dc:a4:fb:c3:62:
                    0a:d4:e8:5d:d7:f3:5f:66:11:e3:ee:81:67:84:d4:
                    e8:9c:9c:7b:76:15:eb:dc:ec:09:97:5b:5a:b5:2d:
                    02:4c:5f:c6:b9:f6:ab:b9:7f:33:48:24:8f:64:17:
                    b3:0b:e0:e8:73:56:d5:fb:48:97:ad:47:cd:b5:26:
                    d9:1f:38:11:db:e9:87:36:62:72:d7:00:17:07:1f:
                    c3:30:79:92:4b:49:6a:07:84:07:94:73:4e:f9:6f:
                    df:16:af:56:a2:68:33:91:2e:ff:9c:f8:fb:e1:2d:
                    0b:3b:42:4f:82:a1:54:40:6d:72:4b:43:c4:6b:c3:
                    6f:22:64:9d:67:e1:c1:43:18:a3:33:9e:4d:87:1d:
                    c3:82:17:a6:40:7a:20:a0:ba:8f:33:db:10:67:34:
                    a2:36:0e:d0:bf:56:23:68:61:40:6c:7f:4b:65:6a:
                    a0:26:ed:a0:e9:78:5a:8f:27:48:49:4d:f7:2b:06:
                    50:51:bf:70:69:2e:34:5a:6a:1f:7c:d2:fd:8e:44:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AA:D9:8E:3A:A3:2F:FE:78:DB:85:0D:07:A9:EC:4F:AE:48:09:DF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4773b746-c511-41ce-a8da-8491af8ea281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:3e:b4:12:d6:92:5c:be:78:41:04:29:e7:4e:1a:23:ba:0e:
         83:da:46:62:c3:bf:96:76:d7:6d:e6:f9:65:32:db:ed:37:4d:
         e3:a8:f0:24:a0:df:36:6f:c8:fb:6f:69:64:21:8a:ce:39:0d:
         41:55:22:ed:0c:03:19:0e:2e:e7:34:39:f2:26:1c:b7:e1:f2:
         91:39:92:0d:72:75:d2:c9:e4:3c:42:f2:89:43:2d:b8:45:5f:
         bc:a2:c2:36:22:41:1c:08:5e:81:5f:79:5e:0e:d2:04:17:54:
         7f:91:a2:4f:03:2f:07:3d:df:60:d2:5c:c6:d1:a6:a2:0b:e0:
         4b:8c:39:7f:50:50:d1:8a:d5:e3:78:d7:61:30:2a:2f:12:3f:
         b9:c2:80:ba:74:ff:58:18:ed:d5:46:cf:90:19:07:06:28:1e:
         d5:71:6c:d4:e1:66:75:2c:e5:42:8c:ce:08:42:8f:68:b8:83:
         24:53:56:f4:95:95:74:22:0b:13:27:43:70:26:71:8d:d8:20:
         5a:4a:02:fc:5f:9a:12:e3:d9:46:c0:d6:bc:00:0c:64:6e:16:
         1f:f9:c1:33:8f:e6:fd:e6:88:5e:e5:88:0a:fa:46:d7:0e:39:
         66:be:75:86:48:b5:a2:71:a8:b1:0f:f3:cc:fe:1f:f0:9f:07:
         89:b4:93:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----