Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c02005ce-d6d3-4f26-9b46-4355b12a47b1.roa
File:                     c02005ce-d6d3-4f26-9b46-4355b12a47b1.roa (raw, json)
Hash identifier:          gk5m4kIc8bzX+riBe+6UGIA4Cf5pOGq1rMOQhttfles=
Subject key identifier:   93:89:4F:00:2A:BD:D9:EA:1D:99:4B:2F:03:67:AE:F4:25:B7:A1:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B9133E4E85D0A51F4AC84AAF601F0EE84A6B7B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c02005ce-d6d3-4f26-9b46-4355b12a47b1.roa
Signing time:             Tue 28 Jan 2025 00:00:00 +0000
ROA not before:           Tue 28 Jan 2025 00:00:00 +0000
ROA not after:            Tue 04 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        207.8.248.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:91:33:e4:e8:5d:0a:51:f4:ac:84:aa:f6:01:f0:ee:84:a6:b7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 28 00:00:00 2025 GMT
            Not After : Mar  4 23:59:59 2025 GMT
        Subject: serialNumber=bc8e3943a65ed6495dc3675dd7d82a3e6bde5f88f853caa0b5851ea918b10216, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a5:c6:4d:52:27:80:e4:d4:ea:47:2f:e9:06:
                    71:e6:5c:1e:55:3b:f5:9f:c7:1a:9b:a8:6e:b4:8f:
                    5c:c7:4f:79:7d:6f:4c:fc:08:8b:86:e0:d5:24:08:
                    1a:27:93:db:bd:c9:db:d1:2f:8c:25:54:b6:7f:a9:
                    a6:8e:b8:d6:46:52:34:47:68:23:ff:48:cc:9b:94:
                    03:04:2f:50:b0:6b:24:24:19:04:a6:11:07:9b:7a:
                    51:64:c2:ea:fb:65:73:47:5c:41:f4:d6:1a:d0:32:
                    39:ab:0e:84:8f:a5:19:62:5c:5d:bc:41:62:e5:4d:
                    4b:7a:cf:ae:17:6a:50:52:1b:cc:30:af:86:8e:7d:
                    cf:bd:c3:cf:18:a9:41:34:c1:5f:e3:47:dd:ab:0e:
                    85:3c:a9:c2:f2:f0:43:9f:52:6c:fd:06:f2:5f:07:
                    c4:22:79:3f:e0:6d:5c:1c:19:e3:19:71:8b:1f:7e:
                    d6:79:53:e9:85:24:d4:01:ae:b5:3a:80:0f:53:9c:
                    33:03:6e:ec:43:9b:d3:80:32:92:5f:28:cd:10:4f:
                    30:ef:da:71:b5:8a:a2:8d:75:de:d8:23:09:a3:ec:
                    55:83:59:a7:14:01:a7:bd:cd:5d:87:25:38:a6:ca:
                    6f:52:d7:3b:6a:c2:52:bf:0a:f1:2e:50:41:5d:9b:
                    d8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:89:4F:00:2A:BD:D9:EA:1D:99:4B:2F:03:67:AE:F4:25:B7:A1:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c02005ce-d6d3-4f26-9b46-4355b12a47b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.8.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:d5:f4:db:e5:49:59:3b:1c:8b:cf:7b:44:28:fd:b3:5e:07:
         da:9d:db:3a:47:2e:0a:ad:44:58:b8:06:e7:0d:8e:97:6d:df:
         ce:e9:fc:16:6e:e0:f8:98:07:7b:a8:2d:bf:ff:f6:23:76:9f:
         2d:68:68:92:8e:1a:b2:68:f0:20:c5:76:dc:cb:5e:8b:21:a9:
         08:ee:ad:b3:d2:8f:bd:2b:99:5b:15:31:ce:64:79:fd:7e:3c:
         34:c9:eb:9f:21:10:b6:38:8e:a6:ac:78:4b:c5:2a:0f:00:c0:
         81:82:93:5f:c2:8d:3b:4f:0b:89:f7:04:c3:06:ef:6a:b9:50:
         52:f9:26:ac:74:60:69:53:6d:de:50:93:cc:4d:e3:73:68:bc:
         83:71:7e:cf:a1:33:d7:53:ed:35:58:71:24:66:56:3f:47:1c:
         34:6f:11:75:0e:87:fc:a8:54:6f:dc:48:f5:38:56:24:f9:40:
         9c:64:3d:45:3e:43:29:53:b6:94:a1:c2:da:2c:c5:14:88:03:
         c7:65:dc:f3:88:42:b7:e3:99:1d:e4:4a:b0:af:00:61:e5:61:
         14:ec:94:5c:d7:fa:97:2b:39:f7:cb:75:0e:4c:36:9b:1e:7d:
         68:19:83:62:07:96:b0:0a:a9:83:2f:5b:70:61:03:1d:a9:1b:
         3e:b1:6c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----