Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba899484-5882-499b-8b7f-4bcbdb569b44.roa
File:                     ba899484-5882-499b-8b7f-4bcbdb569b44.roa (raw, json)
Hash identifier:          h2b+iuQRnHssiWLRWMxLj3X9ebsD5tq36MnJ5DlWkvc=
Subject key identifier:   7E:FC:CB:1C:D0:8A:BA:C3:E9:F5:45:35:0B:13:CE:E6:8F:9A:6F:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       04DED85178C56D3583717BB47F0A5549830B3943
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba899484-5882-499b-8b7f-4bcbdb569b44.roa
Signing time:             Fri 17 Jan 2025 00:00:00 +0000
ROA not before:           Fri 17 Jan 2025 00:00:00 +0000
ROA not after:            Fri 21 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        45.57.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:de:d8:51:78:c5:6d:35:83:71:7b:b4:7f:0a:55:49:83:0b:39:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 17 00:00:00 2025 GMT
            Not After : Feb 21 23:59:59 2025 GMT
        Subject: serialNumber=fcfc733e910c10ebc4f66be56a4400f1c746a1b9e76a22807711d8e335f7f8f8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c5:4d:e2:f3:b8:27:c8:9d:f7:4f:64:e4:01:
                    a5:f8:df:fa:61:be:05:87:8d:db:c2:65:a0:9e:b7:
                    a2:03:95:40:e0:9c:01:ea:91:11:df:41:02:ec:13:
                    9f:aa:9c:d2:6b:b5:b1:2e:a9:05:0d:25:ec:cc:87:
                    3f:5f:7a:f7:99:f5:02:af:69:be:1b:65:33:b5:10:
                    88:0c:ee:92:13:c0:b2:da:39:29:2a:b2:81:22:c2:
                    4f:b1:3e:7c:69:dd:0c:96:6d:33:6d:82:28:59:da:
                    c0:28:02:a2:83:1f:ef:d0:a1:15:a6:ac:ea:75:8a:
                    38:60:fd:5a:14:18:44:ed:74:61:ca:81:ea:ab:87:
                    b3:d8:c8:f7:7d:69:17:4f:d8:6d:b5:a9:24:15:28:
                    be:f5:bc:52:e8:5c:2e:96:2b:2e:7f:cf:6c:17:06:
                    2c:1e:33:5c:27:e2:e4:1a:b6:2c:52:23:ad:04:20:
                    01:87:f0:d6:43:e9:83:d6:51:7d:21:94:81:48:73:
                    86:ed:88:c8:76:a1:a1:8d:12:8f:80:76:00:0e:49:
                    5a:0d:6d:1f:6b:af:3d:3c:e8:0c:14:f0:78:d2:87:
                    66:65:24:21:5b:4d:52:df:a5:99:9f:91:19:27:62:
                    c9:13:24:c0:a6:7a:7c:aa:8a:7d:01:b9:22:55:98:
                    d2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FC:CB:1C:D0:8A:BA:C3:E9:F5:45:35:0B:13:CE:E6:8F:9A:6F:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba899484-5882-499b-8b7f-4bcbdb569b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.57.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         95:ad:62:eb:5c:d9:8b:97:49:79:f8:fa:ef:9f:8c:27:3d:48:
         f2:15:4a:70:7b:82:3a:08:cc:9d:2a:70:09:4d:85:7e:51:e3:
         a9:42:ac:cf:e5:69:8d:cd:67:0a:c0:24:4f:a9:af:15:20:a1:
         71:8f:68:68:d0:02:aa:5e:a0:bf:90:ed:75:b1:0b:5f:61:57:
         c6:46:39:82:ac:e5:90:16:25:13:e5:66:c0:d5:70:83:da:8a:
         ba:a8:67:c0:ad:ed:bb:5e:46:26:30:9b:5d:b1:82:70:01:11:
         1b:27:d7:99:1d:79:84:f4:5f:ea:75:43:1e:bc:91:4b:68:d5:
         70:7a:ac:fc:4c:00:8a:bc:a9:93:ae:8f:f8:10:08:58:48:a7:
         6b:b0:6c:3c:c2:5d:4e:ee:d3:42:b9:2f:eb:88:73:40:96:dc:
         c0:0c:32:75:c3:48:d5:7b:1c:da:17:8f:6f:d5:aa:79:f7:05:
         71:ab:9d:92:50:c4:97:9f:a9:33:1d:ca:fd:30:65:ad:e3:01:
         14:3e:c1:d2:80:e2:ff:62:17:1e:a6:31:40:8a:90:75:86:83:
         a3:f5:0b:78:ac:14:33:c1:8a:1a:73:dd:67:25:09:37:c2:ca:
         86:63:8c:93:a9:1e:a8:c8:a3:3e:53:40:af:80:7b:99:05:22:
         d1:d1:15:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----