Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c7c07ee-0917-41f8-997b-d5253ad56cb3.roa
File:                     7c7c07ee-0917-41f8-997b-d5253ad56cb3.roa (raw, json)
Hash identifier:          bSGKsQ8GLj42xMoEF8CYr02PteuqN9Ru+zRs1xbONwk=
Subject key identifier:   4B:A2:0D:28:EE:03:28:CB:53:2B:F9:FC:8F:83:E1:08:E0:EC:B8:DA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62971127F45C0FA13AB55BF946323B22A5B11829
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c7c07ee-0917-41f8-997b-d5253ad56cb3.roa
Signing time:             Mon 20 Jan 2025 00:00:00 +0000
ROA not before:           Mon 20 Jan 2025 00:00:00 +0000
ROA not after:            Mon 24 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        137.160.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:97:11:27:f4:5c:0f:a1:3a:b5:5b:f9:46:32:3b:22:a5:b1:18:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 20 00:00:00 2025 GMT
            Not After : Feb 24 23:59:59 2025 GMT
        Subject: serialNumber=bb885793dfe92239fce760a1e6d31c1eebda04b0e0e933efa0d61e6efb262972, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:39:0b:ab:26:a4:a0:15:3c:6f:8a:19:9d:
                    3b:18:12:c1:ea:11:87:e8:55:5b:7e:0f:95:36:76:
                    4f:69:62:76:fd:e0:49:62:49:26:6a:64:31:31:47:
                    b2:21:ce:24:c9:05:c0:20:8f:5d:52:cd:83:15:66:
                    d4:2d:ea:e5:1d:2b:ec:85:f3:d7:80:53:77:b7:f2:
                    08:01:c3:c2:98:07:c8:62:dd:0d:ed:53:84:99:e1:
                    b0:a5:9e:ab:10:bb:b2:8b:3d:c8:a8:61:62:af:fb:
                    b3:43:0a:88:7a:08:f8:b8:c1:ba:a2:0b:20:c8:18:
                    64:f4:63:91:32:90:c5:3a:17:14:98:c8:a4:b6:7b:
                    1c:9b:68:7f:38:a6:1c:55:f9:fc:4e:46:21:71:23:
                    f3:37:80:4a:49:d0:c0:11:82:c6:77:99:2f:11:d0:
                    25:12:69:3a:7e:6d:99:da:39:29:ea:f3:14:49:69:
                    19:65:80:81:c0:62:db:83:fd:97:0b:3a:e9:99:a9:
                    1c:1b:c5:62:4f:b0:6d:a4:84:fc:38:43:c6:14:34:
                    39:ad:94:72:69:39:2e:be:f5:52:09:3e:7a:dc:2b:
                    39:3d:a2:c7:bb:b6:15:b8:dc:2a:00:23:b3:79:10:
                    26:52:e8:15:d6:03:37:7a:bb:bb:59:af:4a:25:35:
                    88:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A2:0D:28:EE:03:28:CB:53:2B:F9:FC:8F:83:E1:08:E0:EC:B8:DA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c7c07ee-0917-41f8-997b-d5253ad56cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:ea:cf:16:44:3f:9e:98:58:ee:8d:a7:39:5f:e8:45:70:9b:
         df:da:63:83:ea:e1:e1:11:9a:d6:9b:b6:de:ae:b5:d5:75:be:
         80:af:ba:46:86:fc:8a:ef:0e:21:d0:9d:66:1d:86:e2:19:80:
         f1:e6:20:32:3d:15:e1:0f:34:03:c0:8b:c2:c5:45:c2:f4:70:
         9c:9b:d1:44:c8:7e:98:00:99:b0:bd:14:49:7e:37:2f:e3:e7:
         b4:ac:d6:d5:1e:3d:0f:f6:5f:bc:b9:3b:04:b8:ef:7b:6b:72:
         b1:76:24:a1:ba:00:f0:ae:db:ea:d2:8d:36:f2:83:3e:43:78:
         d5:16:19:71:56:d4:be:c1:e1:7a:96:75:93:ee:30:69:85:b0:
         40:a2:46:05:d9:63:79:b8:ab:a0:c3:b6:a4:02:21:f1:39:43:
         f6:6c:25:41:a0:c1:08:82:fd:21:de:4d:23:97:37:30:ca:5c:
         26:27:bf:36:b9:e3:ac:a7:a3:e7:1d:16:d3:06:bd:8d:46:2b:
         18:3f:d1:fc:3d:d8:66:e9:65:a3:61:2e:f4:51:56:f7:39:45:
         fb:22:9a:ca:8b:38:aa:94:54:45:f4:d1:1b:ee:23:b4:13:e5:
         bd:e3:64:6c:b9:e4:13:52:ca:15:cb:9a:9b:de:a7:60:23:8e:
         54:3e:ed:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----