Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c875679d-4d8f-44f0-9f07-a185e49f93ff.roa
File:                     c875679d-4d8f-44f0-9f07-a185e49f93ff.roa (raw, json)
Hash identifier:          V3V0BxgJ5tL7b36INFl18cDUYdHP+INHdbtNhu/UmZc=
Subject key identifier:   CF:89:33:E4:08:E9:5A:11:80:F3:A4:E0:C6:EE:48:2F:90:D4:9E:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E46479F603EB582280DDFCEE75718C8B05CEED1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c875679d-4d8f-44f0-9f07-a185e49f93ff.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        92.201.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:46:47:9f:60:3e:b5:82:28:0d:df:ce:e7:57:18:c8:b0:5c:ee:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=db5499f008ad1172824597543b026b9b9a80e03b498abd00850bcbeea30371c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:6c:5c:3d:c2:a0:e2:66:ba:1f:f2:8a:aa:
                    1e:89:a2:4c:85:4d:3e:ec:28:fa:c3:40:fe:9f:e1:
                    26:23:68:23:c5:92:ac:22:9f:74:60:45:64:ae:3b:
                    d9:31:85:b8:8c:19:4f:cd:ea:62:11:22:ed:b2:b6:
                    18:ee:23:00:b1:9c:60:87:49:53:cd:30:b7:75:4b:
                    2f:51:15:11:51:da:23:cf:1c:d9:9a:d1:7c:0a:23:
                    1b:47:f1:39:e2:8b:93:76:e4:f0:63:7d:de:1f:af:
                    97:67:63:b5:a4:8b:0e:b9:f7:a3:43:b3:b8:62:af:
                    f6:13:06:42:8e:23:bb:4e:ce:3a:aa:c4:31:ea:1c:
                    7e:3c:f2:f8:99:45:02:55:50:77:39:5c:94:0c:d1:
                    e4:28:8e:70:d9:61:aa:a3:00:36:02:04:6b:e5:fb:
                    de:13:87:00:40:e2:75:8d:e5:68:41:f4:9c:74:2a:
                    d4:a1:19:25:33:40:ce:c8:40:5a:cc:85:61:92:80:
                    dd:05:f0:2b:23:08:99:38:14:4c:06:08:01:ed:16:
                    6f:f8:3e:4a:ab:6b:6d:02:a7:d4:cd:f3:e7:0b:08:
                    d3:8b:66:7c:72:8a:cb:58:b3:27:7c:93:53:28:17:
                    eb:f4:c3:49:f0:a3:b8:e1:5a:f8:73:28:28:00:d5:
                    13:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:89:33:E4:08:E9:5A:11:80:F3:A4:E0:C6:EE:48:2F:90:D4:9E:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c875679d-4d8f-44f0-9f07-a185e49f93ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.201.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         bd:9d:61:ab:31:2c:f8:f5:ed:3a:b5:22:97:17:14:50:e2:a6:
         4b:33:eb:d4:ba:79:77:7d:9c:9f:cd:7d:7d:c9:0c:2f:9b:d1:
         ac:df:05:e4:d1:fb:33:4e:12:f4:75:0e:d8:4b:05:c6:76:66:
         42:cd:7b:b4:b0:88:d1:16:3b:18:39:36:13:67:6e:0b:b7:d0:
         50:94:6e:87:b5:86:ad:69:ac:d8:16:a2:e7:68:cf:27:37:98:
         9e:e3:a8:d8:92:16:bb:00:bd:74:41:fc:38:55:c9:0d:b8:54:
         b3:6e:88:84:0b:88:09:67:11:4f:6d:b2:6e:a0:13:2a:4e:56:
         7d:6c:cc:cc:ad:2f:1d:23:3e:a4:e9:24:a6:94:2f:78:1b:e1:
         0a:df:d3:de:87:87:e4:b6:08:1f:49:54:67:ed:55:ff:ed:ab:
         7f:59:39:ac:6a:10:f9:b8:87:b2:d5:63:70:b8:b6:8a:59:fa:
         a8:f3:10:3b:42:4f:cc:f5:4f:f2:fc:00:16:b9:f3:16:73:73:
         9c:88:8d:d6:cf:b3:fd:84:d9:26:23:71:14:74:6b:bb:3e:cf:
         04:35:fd:90:5e:8e:c4:c2:14:55:35:6a:15:2e:ea:f6:4f:69:
         5b:34:de:53:93:a3:31:13:a3:b1:67:74:87:6a:af:2c:fe:05:
         44:9d:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----