Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6776af38-515d-4b33-bc1f-9f781cacf369.roa
File:                     6776af38-515d-4b33-bc1f-9f781cacf369.roa (raw, json)
Hash identifier:          kkQFiMMBhfBOAycGzIm0avv4kRsYxjOIUiQiKcGuiuk=
Subject key identifier:   58:17:6A:12:C5:08:76:C8:57:98:12:A2:46:22:E0:B2:50:43:ED:D4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22733EF27121521B7E445629199CE32134505497
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6776af38-515d-4b33-bc1f-9f781cacf369.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        107.20.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:73:3e:f2:71:21:52:1b:7e:44:56:29:19:9c:e3:21:34:50:54:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=3ec95a0f831bc862bb887387a386f5f9b68902e3adf0bf7f5b2b6bae06c5d938, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:e0:2e:81:11:54:03:72:1b:ee:ed:90:b1:
                    4b:29:24:55:ae:0c:61:92:9c:90:32:45:a6:2c:50:
                    9b:e2:a9:f9:62:12:e8:ec:4a:b8:2b:b3:d3:9d:6b:
                    94:73:5b:e7:7a:98:df:56:ab:2f:3a:e7:e6:8d:72:
                    06:9a:9b:3d:54:e7:4a:7c:48:dd:7e:03:0c:fa:09:
                    62:2f:d5:86:3f:f1:a0:9a:b2:35:fb:9d:0a:b1:9b:
                    04:98:74:df:ae:58:ce:92:1c:1c:e5:0f:01:b8:01:
                    be:fd:3e:70:36:01:03:71:6b:c9:e2:95:74:43:4f:
                    ec:82:d3:47:f8:8c:94:ef:68:12:cb:f4:9a:a9:1d:
                    c1:60:f9:4f:7c:78:de:38:5f:55:42:85:c4:4e:e2:
                    75:b7:a9:20:96:83:18:2b:fb:c1:60:9c:e6:db:9b:
                    6a:24:1f:45:0b:4d:42:1f:fe:f9:94:05:30:b3:b8:
                    73:d3:09:f1:cf:cb:04:04:6e:21:19:48:55:92:f0:
                    9c:cb:0c:93:ec:ec:58:84:bd:04:3f:3a:68:99:f0:
                    53:b8:86:a3:e3:c5:05:39:5b:57:5e:8f:62:35:f3:
                    c3:a5:ce:5b:90:a4:2d:55:6c:89:5a:a0:90:44:5b:
                    e3:ba:a0:6d:29:c2:bd:b6:04:a8:d6:5e:56:16:1a:
                    43:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:17:6A:12:C5:08:76:C8:57:98:12:A2:46:22:E0:B2:50:43:ED:D4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6776af38-515d-4b33-bc1f-9f781cacf369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.20.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d0:44:9a:aa:1b:5b:bd:4c:85:da:f3:0d:5c:f2:d5:7d:54:5c:
         b9:c4:fa:66:72:c6:3c:7a:2c:b1:8e:68:5d:9c:a7:8e:bc:b0:
         d6:44:10:d3:4e:92:59:d1:9e:ae:62:6a:d5:95:e1:39:e7:c9:
         9f:08:33:52:c7:31:89:71:fb:3d:32:89:6a:79:33:57:74:c8:
         bd:4c:6d:a0:2a:c2:34:eb:35:6d:5b:0f:16:78:f6:ee:20:73:
         bc:61:30:d3:66:5b:e5:1a:73:0c:55:83:71:b1:cf:75:e9:0c:
         1d:01:d9:ca:4f:d3:c3:fd:7f:e7:6a:96:23:ff:e0:da:ee:47:
         b6:e7:50:23:c7:7f:ac:31:a7:ba:7e:25:93:3f:99:ad:35:36:
         d9:68:f6:52:af:85:08:60:07:c9:ca:2a:96:38:0b:13:c7:1d:
         61:cc:ff:ad:39:07:a0:01:30:88:63:b2:02:3b:df:df:74:ba:
         97:1b:ea:a3:5c:3a:3d:b9:f8:61:47:49:76:fa:96:c7:8b:51:
         c2:d1:34:16:be:f1:87:84:a4:60:f1:e3:59:82:ff:83:e4:46:
         1b:e8:61:f4:a7:30:e7:9d:ad:84:4a:ae:9e:44:22:0b:4b:bc:
         47:8b:cf:3c:3f:63:4d:b4:2c:17:85:bd:a4:84:fc:a0:35:54:
         dc:5d:c9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----