Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa
File:                     7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa (raw, json)
Hash identifier:          lp/KfkwkH84ji9geZc7CBEdJ+iEgRKXp+oRi5VuxoiE=
Subject key identifier:   C2:BC:C1:DC:A3:D8:89:11:1E:3F:CD:26:2B:D6:C4:52:12:56:6C:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       190162950DFCD3F0027D17EE7825485295472099
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa
Signing time:             Fri 24 Jan 2025 00:00:00 +0000
ROA not before:           Fri 24 Jan 2025 00:00:00 +0000
ROA not after:            Fri 28 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:01:62:95:0d:fc:d3:f0:02:7d:17:ee:78:25:48:52:95:47:20:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 24 00:00:00 2025 GMT
            Not After : Feb 28 23:59:59 2025 GMT
        Subject: serialNumber=2c19f6cd4c1297017dbea1edac4c53fb156dbf24e61765e6c7001fee7775d1c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:1f:70:4a:ae:d3:ac:f1:eb:0e:ab:44:3f:
                    cc:0c:6c:70:f1:4c:a5:a2:fa:33:fa:12:27:2e:f7:
                    1b:9a:fa:13:31:88:14:45:14:45:01:bd:04:69:aa:
                    1c:96:54:6e:af:1f:56:94:a3:3b:cb:e1:ab:0a:46:
                    ae:3a:8d:14:81:e0:27:3e:b7:1b:13:df:95:19:7a:
                    fb:a0:4c:f2:e5:79:99:67:9a:8d:9a:2b:f5:0e:ce:
                    4c:4c:18:22:00:3a:f7:8c:48:45:f3:1b:d0:2a:4b:
                    12:40:4f:d9:3f:36:4d:b2:cd:d4:3b:d4:0f:77:43:
                    ac:99:cd:15:1f:0a:2a:cf:86:cd:64:15:b3:e2:8a:
                    f9:3e:40:4e:73:fa:03:e5:0f:a4:2e:b0:df:7d:fd:
                    f0:47:10:14:d9:70:33:08:0d:ee:6b:e2:92:f2:d4:
                    8f:76:24:e3:cb:80:45:09:5e:00:f4:13:4c:eb:12:
                    16:b9:77:d9:d5:0a:dc:a7:a1:ed:18:0c:36:e7:53:
                    fd:d1:3c:dd:85:fb:a6:da:3c:75:d1:e7:88:03:f8:
                    70:4d:e1:25:4a:12:09:b1:ed:eb:64:47:14:5b:cb:
                    28:ce:46:5d:02:a0:34:d4:fe:50:ac:aa:50:76:0f:
                    ed:af:70:2e:f2:ed:58:a6:a5:67:8a:1b:78:bb:47:
                    0b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BC:C1:DC:A3:D8:89:11:1E:3F:CD:26:2B:D6:C4:52:12:56:6C:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:b7:64:80:55:79:23:c2:7a:91:9f:14:45:90:56:e3:dc:6d:
         7c:87:9d:48:4b:f9:50:76:b4:a4:a5:0e:28:81:15:16:ca:cd:
         2f:d2:09:37:27:71:19:af:58:2a:23:33:7b:10:ed:40:f3:83:
         4b:44:c8:cf:d2:8b:32:05:e2:74:ee:61:13:94:54:79:f1:a0:
         2a:00:0b:88:20:43:9f:64:4b:2c:98:d5:56:d4:25:f8:30:4a:
         d6:8e:a3:28:c6:25:d4:dc:17:36:10:8e:79:b8:9d:dd:02:b3:
         16:08:ba:84:c8:9f:c3:36:ad:b0:02:49:c3:8e:de:f7:94:e2:
         6a:e1:a3:67:5c:ed:9a:d9:df:48:11:1d:a6:a7:83:23:a3:97:
         6d:a5:bd:8b:00:fc:76:51:6b:83:76:04:3c:07:8e:d4:31:33:
         5a:9f:22:19:14:4b:02:af:22:ec:0d:55:b8:4a:a5:b6:11:7f:
         ea:bf:cc:21:07:d8:74:3f:c4:42:51:ee:8f:3b:a6:6c:41:71:
         6e:93:8b:3c:bb:1a:fb:c0:7f:34:2e:0f:5f:51:a4:63:0c:28:
         ca:84:de:10:83:f5:36:44:8b:f9:af:3a:2f:01:59:39:de:55:
         5a:9b:5e:7e:8a:4b:fe:93:af:43:ac:9d:33:ef:8b:3e:83:2f:
         28:54:ba:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----