Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3644e6f-c01d-42ed-8246-2062e3ce6d28.roa
File:                     c3644e6f-c01d-42ed-8246-2062e3ce6d28.roa (raw, json)
Hash identifier:          KcI6NvDTU1wDm3w8DmqpPyuPzfUimctynvfzNPPmS7I=
Subject key identifier:   EF:D5:7D:5A:A3:52:F3:B6:A0:BA:26:AB:E7:2E:05:6C:DF:B7:D2:77
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       379C70DEA6659C5C61991B6E385775A6CD3C8380
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3644e6f-c01d-42ed-8246-2062e3ce6d28.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9c:70:de:a6:65:9c:5c:61:99:1b:6e:38:57:75:a6:cd:3c:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=f08fe7d8a7451480720a8a280f3aed274f6b441c809e1435d0e490ef24bcdb12, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ef:7f:41:09:b1:50:9d:cc:ee:50:3e:cc:6e:
                    28:ab:87:fd:4b:90:51:55:3a:ea:82:3a:b4:c9:06:
                    5f:dc:73:06:1d:a5:48:ff:3d:f0:88:83:3a:4a:45:
                    7f:85:44:aa:8f:2e:d6:22:a6:43:ec:1e:37:0f:c9:
                    42:26:97:29:a2:a1:48:9a:67:94:3c:93:4b:e5:26:
                    1f:44:04:13:b4:16:85:5c:54:b8:50:a5:5e:a4:5a:
                    41:ff:06:f1:c5:bb:7a:34:12:1b:3d:08:ad:ef:72:
                    47:0f:0f:03:19:09:56:84:76:13:b1:67:42:af:22:
                    e2:36:5b:34:06:50:db:05:03:0b:12:84:e2:82:7d:
                    62:8e:89:42:c7:43:bb:60:dc:71:fb:79:27:25:3e:
                    5d:39:9c:2a:cd:12:d2:58:c0:4f:87:98:3c:9a:32:
                    8d:06:32:09:b3:59:61:d6:d6:8b:e3:f3:1a:e5:fd:
                    f9:76:06:0b:1c:96:be:61:d4:32:1d:77:70:4f:4d:
                    b0:73:ff:81:06:49:b5:df:0d:95:6b:e1:6d:a5:f6:
                    83:d6:8b:73:05:20:ea:03:65:de:ea:9b:e4:42:15:
                    a7:d6:4c:7d:ca:42:c1:3b:5f:e6:c4:fa:80:de:97:
                    c0:f9:33:ec:b1:ac:20:2b:54:8e:e6:a2:15:60:af:
                    3f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D5:7D:5A:A3:52:F3:B6:A0:BA:26:AB:E7:2E:05:6C:DF:B7:D2:77
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3644e6f-c01d-42ed-8246-2062e3ce6d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:01:e9:ed:a5:da:b1:b5:44:0f:e5:3c:2b:4f:30:b8:94:d0:
         c0:5a:77:50:91:d1:9a:10:10:18:d0:95:ae:f4:bd:13:19:c3:
         6e:df:42:a8:e8:1e:c0:52:1f:39:57:57:05:ce:f0:a4:06:2e:
         98:7c:f4:8a:e7:d8:0d:80:9b:2f:a4:c6:7b:ae:ef:22:1e:0c:
         fc:62:84:12:fa:df:49:65:b6:a0:74:2a:ea:41:cb:48:05:d5:
         53:2e:4f:74:10:2c:34:34:6a:14:0c:3b:a7:c2:e9:8e:1f:d7:
         35:18:6f:eb:1f:c9:68:69:d3:62:87:f6:e8:ae:05:91:b7:16:
         73:9a:62:c8:5a:b9:b1:e4:82:a8:6a:4f:f7:7f:71:dd:74:08:
         4a:5b:9a:2f:62:2a:f6:b8:80:4f:c3:8c:65:74:7d:ed:52:1d:
         65:ad:84:af:65:6f:12:ac:b0:1b:d4:c0:ba:aa:46:fe:e2:67:
         24:76:cf:f1:d4:b9:b3:79:1d:c9:88:4d:05:38:91:dd:11:2b:
         02:cc:60:43:74:ce:74:78:c2:f7:0d:62:86:d7:58:3b:48:86:
         e8:9f:9c:4b:6e:e2:ac:31:91:33:f9:d2:3e:10:dc:ee:bc:97:
         1b:dc:75:87:39:b8:9d:a0:93:4d:e2:33:8c:11:da:52:80:1a:
         ef:14:b5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----