Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/845ded7d-c662-40e3-8568-64e43ad8874b.roa
File:                     845ded7d-c662-40e3-8568-64e43ad8874b.roa (raw, json)
Hash identifier:          Hr4xqNhunqAoFm4hPnK+wr5nFyoz+k0HIGu6tIQO8dM=
Subject key identifier:   CC:DE:1B:D7:0C:B1:CF:F7:82:B7:1D:0F:AC:D8:75:7C:B0:30:2D:52
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       231AC0AA451AACF9E7706F14245C3BC1A87F71B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/845ded7d-c662-40e3-8568-64e43ad8874b.roa
Signing time:             Sat 11 Jan 2025 00:00:00 +0000
ROA not before:           Sat 11 Jan 2025 00:00:00 +0000
ROA not after:            Sat 15 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.198.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1a:c0:aa:45:1a:ac:f9:e7:70:6f:14:24:5c:3b:c1:a8:7f:71:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 11 00:00:00 2025 GMT
            Not After : Feb 15 23:59:59 2025 GMT
        Subject: serialNumber=8c37cef4a65fc29143066ed884557661dd6c79075a981afa971fe0f33678030e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3d:cb:39:33:aa:35:03:00:71:4e:c3:f8:9f:
                    c0:7c:07:90:fa:e7:10:55:ee:8b:07:72:de:82:d6:
                    ec:60:2b:ce:52:89:3e:93:7d:0e:81:bf:5a:4f:da:
                    33:4e:3b:f4:9f:b1:33:05:aa:db:85:dc:38:ed:e2:
                    06:01:4c:30:3d:e0:df:49:08:8c:78:b7:20:7c:82:
                    ac:6e:7b:09:ed:bc:5b:fc:c5:e4:09:b2:c1:37:13:
                    44:41:fc:dd:e8:ad:41:c6:9c:c1:8d:1c:14:a0:e8:
                    a8:97:ed:43:ee:61:2b:18:dd:77:14:70:32:4c:83:
                    41:57:a2:ac:b5:8b:52:e8:80:f6:f6:35:b8:59:33:
                    af:60:a1:a3:a2:38:34:5f:bb:97:37:4e:d5:2f:29:
                    3d:05:ca:16:88:ad:39:b9:ab:c6:a3:2f:a4:d9:84:
                    7e:1c:d0:dc:b8:e6:2b:4d:49:0a:57:5e:d2:a6:8c:
                    64:e6:7e:fc:de:49:aa:ea:b5:e1:49:c1:d8:d8:7e:
                    b5:cf:14:4a:5e:10:ad:b4:44:eb:2f:16:0b:2a:5a:
                    12:3b:99:11:40:02:a7:f5:e7:9d:73:14:a3:bb:ec:
                    ad:50:0c:a8:11:fc:c8:c4:2f:c4:71:67:81:10:d4:
                    06:07:a6:71:c6:89:fd:c1:9e:a1:b5:d8:04:42:38:
                    00:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DE:1B:D7:0C:B1:CF:F7:82:B7:1D:0F:AC:D8:75:7C:B0:30:2D:52
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/845ded7d-c662-40e3-8568-64e43ad8874b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.198.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d7:7d:67:84:bc:d9:70:ae:29:0a:1d:bc:b2:dd:ad:73:e4:ae:
         98:72:21:5c:9e:66:e7:a1:ab:45:e1:4e:16:88:a8:db:59:76:
         59:3f:f5:7b:3a:b2:96:49:91:22:1b:9f:ea:bb:94:22:04:53:
         18:01:27:95:dd:b6:b2:55:4e:3f:ec:4b:41:48:a0:8e:e5:b5:
         d2:f9:a8:84:df:a7:6e:32:67:30:97:2c:c9:24:3e:88:5e:f1:
         b9:8c:58:65:97:d1:2d:f3:76:f5:f0:14:9b:46:60:dd:46:c2:
         11:39:27:65:4d:20:7e:7f:3a:dd:d7:d3:f7:31:8d:95:af:a8:
         23:87:6c:67:f1:4d:e0:7c:ee:bf:ee:31:ad:70:a4:e4:0e:03:
         ed:5c:12:69:7a:db:da:07:18:e3:54:cf:62:a3:82:0b:71:f2:
         51:87:f5:3b:54:c4:db:e9:a1:bb:cb:85:a7:f8:31:ac:5e:65:
         29:6f:cb:10:66:f7:f0:da:28:ef:41:2a:50:74:17:a5:3e:22:
         86:e5:93:26:db:0c:00:1f:04:40:b1:a4:d5:ce:aa:29:85:33:
         c3:5b:07:16:32:84:a1:84:8c:13:da:5e:cc:47:9e:fb:fc:cd:
         a6:e0:83:95:56:41:ba:7f:bd:be:56:db:2a:6d:e1:70:2f:25:
         59:38:e0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----