Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c03bc6f-04a0-4eb8-ac31-85b84c3f29d9.roa
File:                     6c03bc6f-04a0-4eb8-ac31-85b84c3f29d9.roa (raw, json)
Hash identifier:          sm5dfSEThqVi8rv9RwtBPCgdVmKM0J/9bcUHvAc+5uY=
Subject key identifier:   06:E7:74:69:C6:AA:2F:47:53:42:F4:A3:F1:76:50:FB:A3:FE:A9:EC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       239834A7AD7E81DCDAE97F4ADD8F575B5E1318AE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c03bc6f-04a0-4eb8-ac31-85b84c3f29d9.roa
Signing time:             Mon 20 Jan 2025 00:00:00 +0000
ROA not before:           Mon 20 Jan 2025 00:00:00 +0000
ROA not after:            Mon 24 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.24.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:98:34:a7:ad:7e:81:dc:da:e9:7f:4a:dd:8f:57:5b:5e:13:18:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 20 00:00:00 2025 GMT
            Not After : Feb 24 23:59:59 2025 GMT
        Subject: serialNumber=4374bfb266ef74dd432b251abb392dc445b8501dd7e7944e05becac0f5660c0a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fc:b9:97:93:6f:15:dc:75:9e:87:b5:eb:cf:
                    34:2d:be:83:29:8c:c9:11:e2:29:d3:84:b0:43:2e:
                    ea:b1:d3:4a:dd:52:03:36:89:cd:f1:d7:0f:fe:5d:
                    0f:6e:ec:4e:0d:e7:87:ed:81:38:4b:09:e1:93:18:
                    a0:41:59:1d:39:d4:56:20:32:77:4c:e1:10:75:fe:
                    d1:69:74:9a:67:5b:03:f7:51:f5:64:7f:ba:87:6a:
                    3c:6a:7a:3a:a6:21:ee:50:6d:77:d7:c4:9f:6a:ad:
                    1a:71:47:57:44:19:6a:ba:8e:8a:26:d4:e8:a4:7a:
                    2a:d2:4f:ea:3f:65:9b:14:a4:64:46:01:72:43:e7:
                    92:fc:bd:1c:9a:48:fe:8c:a7:48:b0:2b:c8:7a:1b:
                    d3:31:cf:47:b8:22:4c:b5:d8:d6:6d:3e:96:c6:39:
                    fd:8e:12:c3:4d:c5:38:4a:7a:46:a1:fc:bc:a3:a6:
                    5e:d8:a0:e9:7e:39:72:6c:f0:a0:a5:e6:c2:5b:93:
                    84:fb:b4:31:55:41:52:6f:47:1d:0f:66:d1:44:61:
                    c7:e0:38:16:2d:53:b3:3e:6e:6e:a6:e9:47:42:2a:
                    85:59:ce:fd:51:0b:cc:c5:c7:71:1c:ad:04:43:e2:
                    22:ea:66:b7:ff:bb:d0:69:3f:31:57:36:93:06:a2:
                    94:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E7:74:69:C6:AA:2F:47:53:42:F4:A3:F1:76:50:FB:A3:FE:A9:EC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c03bc6f-04a0-4eb8-ac31-85b84c3f29d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:58:f5:18:1c:5b:87:a5:a9:1f:70:87:83:22:bc:75:02:a7:
         c6:44:dc:3d:64:f3:bc:ea:2c:8d:ef:ee:94:f5:68:0a:73:be:
         f5:19:13:97:60:23:75:50:e1:b6:36:73:34:d8:f8:61:95:59:
         24:80:78:83:0a:30:e8:b3:7e:6b:ac:0f:bb:b8:9c:f7:13:b9:
         ab:4c:f6:42:8e:90:2c:bf:bf:dc:68:c6:11:f1:e7:7f:a0:0b:
         7a:41:c4:0c:f1:ff:b7:17:c8:d4:ff:09:66:05:2f:6b:6a:cb:
         1b:79:65:af:71:93:1d:05:56:66:9f:02:eb:dd:12:ac:3f:4e:
         38:bb:7f:f9:74:d1:23:76:ed:c9:3b:66:8e:5c:a6:c7:18:7a:
         e1:95:5c:35:23:ec:f7:95:48:da:99:4b:b8:c5:80:88:9c:b2:
         73:94:c1:9c:c9:71:fb:85:f2:ed:fc:5f:61:f7:89:32:41:53:
         14:2b:7a:ee:46:41:37:4a:13:13:71:c0:ab:fb:ea:34:36:78:
         41:1a:4d:53:77:a5:d2:dc:16:3d:4a:2b:5d:e0:e0:4a:da:5d:
         bc:b8:c6:fe:a2:7c:49:c7:e3:9c:c2:d1:6a:59:37:0e:d8:29:
         4f:a9:42:07:59:b6:e9:28:7a:bc:a3:c6:cd:81:4f:2b:b1:3d:
         a7:33:74:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----