Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e687fa1-9b29-455d-9b8f-48a1ec23d39b.roa
File:                     4e687fa1-9b29-455d-9b8f-48a1ec23d39b.roa (raw, json)
Hash identifier:          V1f0YkFSTRmy76kzt4Z2rYDVp4rc3nqkr+0wB2ykPDg=
Subject key identifier:   19:CC:49:70:8E:F6:8B:9C:33:E4:E1:D4:98:FE:C1:C7:C7:60:CC:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F746559E66EE0A424FD3D03DD3044BD35AFFC90
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e687fa1-9b29-455d-9b8f-48a1ec23d39b.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.164.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:74:65:59:e6:6e:e0:a4:24:fd:3d:03:dd:30:44:bd:35:af:fc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=033900d4361bf82aa10a5b7a1dd82e162c29e60da545ce777a61106a6b13e7ae, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b5:96:46:b9:f0:7c:ad:78:b4:60:ef:61:2c:
                    86:d0:56:d9:a6:db:50:66:24:fb:4e:20:17:dd:23:
                    46:99:93:e7:10:7e:01:b4:d4:75:ed:dc:38:ed:aa:
                    83:e0:8c:61:42:4a:93:ff:66:e7:1d:b8:37:a9:91:
                    af:21:e1:0d:41:26:5c:a4:8d:50:71:5c:65:97:84:
                    3f:32:bc:e6:67:5a:33:6d:06:38:fa:7b:b0:f5:3e:
                    bf:77:7d:8a:f2:5a:7e:ca:47:fe:dd:cb:5c:f0:a4:
                    f7:b1:72:c6:42:cf:96:48:fa:40:fc:e5:d9:3c:47:
                    e1:0a:74:d6:a9:b3:3d:de:b0:65:97:d5:63:ab:3f:
                    17:91:3a:b6:00:f2:79:6d:7a:ca:ea:c3:4c:bf:bf:
                    15:58:4e:3d:10:37:66:6d:b4:c2:64:8d:7f:a9:9e:
                    91:19:0f:b1:01:93:7f:b1:d7:03:9e:56:c1:5f:54:
                    1b:fd:d8:ef:9f:7c:c5:8c:b7:81:af:9f:e7:e9:0b:
                    d4:10:3a:76:2b:63:44:0c:9b:d3:ac:1f:5e:4f:f1:
                    09:ad:dd:da:b6:67:62:21:25:44:4b:43:f2:88:aa:
                    15:a8:6a:04:3d:44:48:eb:a1:93:f2:18:18:cf:32:
                    cf:ca:26:4d:ba:3c:13:63:66:c4:7f:89:26:f7:ce:
                    f7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CC:49:70:8E:F6:8B:9C:33:E4:E1:D4:98:FE:C1:C7:C7:60:CC:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e687fa1-9b29-455d-9b8f-48a1ec23d39b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.164.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:91:4e:7e:78:5b:b9:84:e8:94:11:b3:f5:e9:1f:a8:ff:46:
         d3:9c:c2:87:aa:04:00:aa:24:48:15:c5:9f:c8:88:44:43:f1:
         b3:53:e8:38:fc:70:e6:61:87:98:64:fd:a7:d6:c6:4f:cf:0c:
         21:41:84:80:d2:6c:b5:ed:4d:d8:90:af:2f:bd:9a:16:49:06:
         01:e2:89:42:79:7f:42:c6:02:0d:07:df:28:87:79:12:10:6e:
         40:42:f1:6c:51:3e:57:55:74:a4:76:ae:df:d3:b1:ff:5e:f2:
         24:79:ce:9b:40:03:df:3f:93:12:bb:f0:81:b6:56:15:e8:47:
         61:0b:24:fe:f0:e0:d5:0d:f0:b6:97:1a:56:4b:2f:13:fa:35:
         fa:b4:af:c8:72:0c:61:f8:da:d1:3d:b0:86:b7:32:0c:56:57:
         8b:c6:89:f7:79:10:ff:b1:06:c8:48:47:84:6d:a0:be:d3:09:
         19:5e:56:f1:e1:9f:54:29:b9:9c:57:81:8c:7b:80:f2:44:36:
         05:2b:c7:73:bb:6f:fa:bc:3f:44:a9:8f:f6:21:1d:f7:c9:f8:
         0e:4b:50:17:13:fe:68:5a:22:3c:ea:77:dc:79:8b:64:b3:8f:
         fc:f1:75:e7:df:b9:b5:05:8b:dd:f4:d3:26:41:f4:ed:65:5c:
         1b:4f:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----