Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67a05120-4845-4b60-92db-2e9dac9efa8a.roa
File:                     67a05120-4845-4b60-92db-2e9dac9efa8a.roa (raw, json)
Hash identifier:          tBo4+JqAHqyCw3KKuwF6cOHGW9JYLW3iNdILwRZtLhU=
Subject key identifier:   4F:2E:C2:32:D9:C1:8F:E7:9D:9D:5F:3F:3D:D1:C7:3C:BD:1B:FA:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20F81C27C1C35A8AFF3CDD047865829E9D1F72
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67a05120-4845-4b60-92db-2e9dac9efa8a.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        199.183.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f8:1c:27:c1:c3:5a:8a:ff:3c:dd:04:78:65:82:9e:9d:1f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=9e970484bb5eec26e0d9c507046a315de063aed91f742afb3f80c34c22623ee7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:a9:a7:3e:5a:d4:9e:7e:46:bd:88:c7:4c:
                    9e:0a:22:74:05:23:c0:55:d2:0d:6c:e1:6d:ca:40:
                    e8:9f:f1:40:ab:bf:a3:6d:7c:c2:b2:4a:92:5b:af:
                    a6:35:2c:dd:ac:10:8a:d6:a8:fd:16:06:69:8b:bc:
                    9e:65:0f:41:ea:79:2c:a0:f6:a8:3d:ed:73:2a:f5:
                    10:1c:a7:2a:14:df:82:04:c2:19:3b:a9:22:a5:93:
                    da:e7:28:0d:4b:ee:8c:3a:45:b7:1b:85:10:99:42:
                    54:cc:37:69:a9:ba:c2:dd:68:03:75:a7:08:ae:be:
                    31:6d:31:f6:6f:3a:18:c3:2f:be:d9:de:93:ff:fa:
                    ae:4d:f2:ee:fc:c3:59:c9:d8:f3:af:26:bd:4a:73:
                    68:d9:e4:c5:7c:31:88:bb:8c:0f:12:2d:6f:9a:5f:
                    5d:27:50:da:76:c8:03:b4:38:19:3c:54:52:eb:02:
                    fc:95:4f:c5:a8:9d:20:1e:0a:b5:57:d5:d7:a5:48:
                    7d:ef:a8:e4:bd:61:de:b9:64:a3:4e:d0:0f:5a:15:
                    b1:35:e1:38:1f:41:db:9d:99:ee:92:9c:c7:44:d6:
                    04:b7:d5:da:e7:11:16:99:85:af:7d:6b:64:0e:70:
                    ae:32:5e:3f:09:55:76:0e:bd:1d:8e:e0:2b:96:50:
                    d7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2E:C2:32:D9:C1:8F:E7:9D:9D:5F:3F:3D:D1:C7:3C:BD:1B:FA:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67a05120-4845-4b60-92db-2e9dac9efa8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.183.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:d6:aa:1b:a7:2f:0d:4a:55:c7:a3:29:50:39:7b:8d:17:28:
         36:96:95:dc:70:4e:a3:ec:ce:b4:9d:db:0d:7c:8a:0b:55:ca:
         08:a3:a6:5a:16:bd:01:d9:85:8d:09:b7:e1:f7:9d:44:57:c9:
         e2:e3:2d:89:d6:0c:c2:cb:fa:29:43:aa:35:61:5f:07:32:05:
         d9:fb:62:c5:ab:c4:c2:c8:b5:44:03:e4:ba:ad:04:38:ec:72:
         4f:54:8a:8e:24:34:52:da:99:92:be:fa:df:9b:42:a1:48:d5:
         a4:5a:6b:05:13:f4:37:2e:23:21:f2:92:c4:c7:ec:0b:0c:86:
         26:89:ab:8f:b7:51:7c:c1:d9:7f:43:c4:25:02:97:9b:3e:39:
         9e:a3:ca:09:21:c4:9c:74:f3:54:68:b9:65:53:13:93:9f:1f:
         0c:65:7a:01:4d:62:8c:e2:db:da:a5:6f:01:72:7c:49:c2:e5:
         9c:85:c8:69:de:28:56:ab:00:50:f7:69:5c:54:a8:8d:a5:43:
         52:44:b3:89:40:37:ae:2f:73:c9:b4:44:36:2e:2d:70:b7:7f:
         9f:2c:32:8c:58:9a:db:7d:91:2d:e9:d0:83:1f:3e:ae:2c:b1:
         76:67:15:f6:3e:f8:bc:d5:bc:0d:ed:50:ac:9d:67:53:d4:26:
         e6:5d:a0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----