Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dbdebba-e361-477e-ae11-d68def64ccc4.roa
File:                     6dbdebba-e361-477e-ae11-d68def64ccc4.roa (raw, json)
Hash identifier:          lOKecSWncuhqAjAIMuSD73Al4ZiWOhhkuS4CEOQRGh8=
Subject key identifier:   B9:FB:56:08:3E:2C:EA:2B:C2:BB:04:29:98:AF:17:B4:B4:4B:2B:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       14106D24A51D1509890A1AC8E818908D1200D2A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dbdebba-e361-477e-ae11-d68def64ccc4.roa
Signing time:             Mon 20 Jan 2025 00:00:00 +0000
ROA not before:           Mon 20 Jan 2025 00:00:00 +0000
ROA not after:            Mon 24 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.17.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:10:6d:24:a5:1d:15:09:89:0a:1a:c8:e8:18:90:8d:12:00:d2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 20 00:00:00 2025 GMT
            Not After : Feb 24 23:59:59 2025 GMT
        Subject: serialNumber=59ad34ad8241f283e770c2ea0d534e3a8bdbcf48b2053627f35830e7cc5ddb38, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:34:8d:d4:20:6c:dd:da:1c:0d:c3:8e:ab:
                    27:d6:e0:b2:0b:f0:0e:6b:fb:e1:dd:21:5a:c4:23:
                    d6:a3:79:f6:d3:6b:fa:cb:86:89:ec:5f:7a:38:b8:
                    f7:cc:66:58:53:a5:de:a8:88:d9:62:e5:f6:2b:50:
                    68:fd:8a:59:55:29:7d:65:64:a6:f7:fe:34:41:40:
                    77:0c:86:5e:ad:99:79:7f:ce:14:6e:6d:54:ff:11:
                    e9:b0:0f:d6:04:07:fe:45:36:4c:97:76:18:8d:5d:
                    cb:9f:eb:b7:0e:26:11:57:20:b3:63:0c:0f:37:2e:
                    8b:4b:53:d9:cf:b3:9f:3b:bd:7d:4c:6d:5b:e8:9f:
                    a0:bb:b2:ae:f7:72:b5:57:9e:c4:1c:11:90:0a:74:
                    b0:5e:d8:c3:a9:1b:4a:fd:57:77:9a:71:90:3a:7f:
                    10:92:0f:3d:58:bb:d2:55:74:b3:c3:03:28:59:cc:
                    8f:d0:3b:88:48:a9:e2:67:ef:6c:3f:0b:2a:3a:c2:
                    13:56:3c:5b:c5:d0:63:1b:9f:5c:26:59:cd:ad:4c:
                    ee:c8:ae:54:4e:62:f6:d3:a6:11:f6:1b:3d:9f:15:
                    49:a7:16:b0:bb:56:ad:56:74:4f:3c:d4:4e:d9:68:
                    40:e1:ad:12:70:74:19:2a:e8:2a:37:4b:55:74:4a:
                    d4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FB:56:08:3E:2C:EA:2B:C2:BB:04:29:98:AF:17:B4:B4:4B:2B:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dbdebba-e361-477e-ae11-d68def64ccc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:e8:01:a8:6b:32:be:30:e1:92:86:f4:36:22:9e:09:f1:04:
         f6:cd:2a:4e:dd:7f:44:f1:82:c8:dc:e4:70:50:5c:57:ce:56:
         b6:3c:4a:a9:2f:4a:0f:b4:5a:63:31:bc:d7:52:0b:28:ba:19:
         b5:ec:56:13:ab:85:5e:10:52:2a:66:69:6e:84:b3:84:46:4e:
         13:87:25:95:06:5a:ef:f6:22:9a:a9:fe:f1:c5:ec:c1:c7:a3:
         80:99:7b:97:74:0b:f7:a2:a5:15:8a:c5:23:9c:61:94:03:2a:
         8c:63:f8:22:10:0f:9c:2e:ab:8f:67:1d:31:7b:6c:2c:d5:75:
         39:34:bc:9f:f2:bf:08:3f:41:26:b8:6d:ca:5d:20:ec:7a:80:
         16:b9:ea:1e:fa:6b:02:01:ee:48:63:ea:29:f7:f5:0a:8e:85:
         2e:e9:0d:73:ff:56:44:07:87:59:ca:a3:58:cb:b2:2d:dc:62:
         3d:a5:fa:03:00:0e:0c:63:a9:cb:13:eb:1d:2d:1e:39:25:f5:
         20:fc:12:3d:c9:a9:fe:5d:f8:d0:19:f3:c4:cd:09:16:31:70:
         53:55:33:eb:22:19:79:f5:c4:94:95:35:02:8b:01:c0:21:fb:
         70:47:a9:8a:bc:33:1c:7a:e0:7b:fe:87:98:0c:f9:cc:fd:30:
         52:0d:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----