Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64cca42d-40a8-4dca-85f4-0ac6a32e6088.roa
File:                     64cca42d-40a8-4dca-85f4-0ac6a32e6088.roa (raw, json)
Hash identifier:          8RQiHxyB2s1v9uxUbL0vH6w6OOCNjcz2Ok4mCTV5nXg=
Subject key identifier:   9C:D7:84:15:CA:FE:68:B8:2D:DA:1B:E6:39:C0:A5:16:52:ED:D7:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55541F835A828C899AA29FC90039C8E5E251B6CE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64cca42d-40a8-4dca-85f4-0ac6a32e6088.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.22.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:54:1f:83:5a:82:8c:89:9a:a2:9f:c9:00:39:c8:e5:e2:51:b6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=6d57d7ddad4256913b19d3b4305e25bb5db1799dffd7a334cf0f3169ad708c8a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:70:9f:b0:e1:ff:b2:eb:ce:f5:12:2e:bd:
                    59:88:6c:3a:64:bf:af:9e:12:5f:b3:26:91:be:25:
                    1d:1d:63:54:66:3c:23:86:1f:41:eb:9a:f9:46:f3:
                    2b:32:99:ac:f9:8a:09:74:6a:f0:e3:cf:a9:e5:b5:
                    36:8d:1a:61:22:ea:ae:e3:82:9f:f2:37:91:62:98:
                    db:9b:ff:d2:70:7c:f4:1a:71:52:21:03:9c:10:fd:
                    1c:02:0b:ea:3e:ae:2e:25:64:cb:cc:b3:05:fb:cc:
                    15:07:e7:b1:6b:50:5e:e3:13:e6:9b:43:4a:cc:14:
                    b7:55:bf:b8:71:57:08:a9:a1:8d:dd:1f:30:7f:f9:
                    4b:19:10:09:82:16:61:67:69:6b:c3:e0:b8:a7:e6:
                    97:8c:0e:57:e3:df:7e:b9:a1:26:0a:02:f2:c3:ff:
                    08:e6:15:10:25:aa:50:a8:07:40:64:dc:3f:ed:98:
                    84:b7:fe:79:d5:5b:4c:77:c6:fb:ff:c0:26:b4:0e:
                    47:87:17:be:c5:27:88:8b:18:6d:a8:5a:38:a9:54:
                    c5:16:d6:60:fe:6b:bd:0b:f4:2e:5f:a2:1d:ce:d0:
                    27:94:81:10:6b:16:7b:1c:3e:f8:5b:65:c8:04:7d:
                    e9:7a:51:79:8d:73:7f:24:dc:7f:16:4f:51:f4:8d:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D7:84:15:CA:FE:68:B8:2D:DA:1B:E6:39:C0:A5:16:52:ED:D7:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64cca42d-40a8-4dca-85f4-0ac6a32e6088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.22.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:bc:8b:1a:d4:f9:a0:95:02:9d:7b:83:06:bd:13:dd:63:ee:
         90:54:92:63:fc:c1:7f:6b:05:60:2e:5c:21:43:27:61:a0:28:
         0a:f6:89:81:f3:76:40:f4:d3:b9:b4:4c:ee:72:56:7a:3c:93:
         8e:82:d7:e1:e4:33:f3:9c:08:72:a3:12:40:b6:1c:4b:8b:bc:
         69:ad:91:14:06:83:3e:be:78:e9:93:35:93:fe:e9:99:67:31:
         1e:05:4e:bd:0c:79:4e:3b:b4:3b:87:9b:cd:14:fa:20:22:41:
         3d:d5:05:8e:e9:f5:10:cf:19:79:0c:0b:bc:6e:41:fa:3e:90:
         89:8a:f9:ca:a7:1e:b9:8e:38:bc:7f:9f:ae:bf:db:7b:1c:45:
         6b:5c:75:eb:d6:5d:14:5d:df:55:73:97:42:39:33:f7:f3:2c:
         2b:51:ad:44:55:ba:8a:33:54:5b:d7:22:c2:b9:40:2f:0f:03:
         cc:8d:de:3d:f1:b5:21:28:6f:90:2e:fe:a3:d2:b5:3b:f3:f0:
         54:6f:d2:fc:92:b2:ff:a0:d9:8b:44:be:24:e4:b8:f4:2b:50:
         e8:f8:61:7e:6c:11:5e:07:b8:b0:44:34:eb:9b:3c:30:e4:77:
         c7:63:b7:6c:b4:6d:b1:c3:b5:81:91:e2:d0:41:70:c5:54:cf:
         d5:40:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----