Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8a2e2a6-180a-4119-9dab-dc386bebfad1.roa
File:                     c8a2e2a6-180a-4119-9dab-dc386bebfad1.roa (raw, json)
Hash identifier:          r8e4iWZDwydWgwX2QyKVrvWcKCHE+yKY0xKSZ2WRRpU=
Subject key identifier:   AA:84:D5:CD:26:38:85:AA:43:83:19:A2:5F:6C:8F:EB:53:C9:AD:03
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6558078F778AB6E59FDC152EACB1A33189B05481
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8a2e2a6-180a-4119-9dab-dc386bebfad1.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.180.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:58:07:8f:77:8a:b6:e5:9f:dc:15:2e:ac:b1:a3:31:89:b0:54:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=16d68aa5cddf919b91dc74fa81a326d99b3dedde9d0aeed32331c528785bd7f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:b1:8c:68:20:96:91:cd:a0:c8:bc:60:1f:
                    8d:34:27:3b:56:c1:ac:c5:e5:6e:b5:c0:fc:f5:4d:
                    d7:78:25:e5:aa:bb:85:40:23:be:78:21:6a:b2:26:
                    ee:b7:87:40:b1:75:34:59:b4:5a:28:f8:fa:cc:f0:
                    b6:b3:59:ef:55:0b:46:87:00:ee:99:2f:dd:a5:9e:
                    c6:39:78:2a:5d:1e:e5:92:fb:14:cd:97:d7:c5:14:
                    74:f0:0b:15:9c:15:20:12:17:9e:71:4a:c6:f5:05:
                    d2:2a:dc:85:68:e9:9d:c1:2d:0c:83:4c:a4:07:e3:
                    cc:72:4c:92:f2:21:f4:6f:a8:c2:f3:42:73:f5:7d:
                    ce:75:81:09:33:39:c7:2c:00:6d:41:b7:a9:e0:1d:
                    73:96:70:e1:36:9a:29:1f:07:8d:dc:a1:c4:da:6a:
                    55:f5:81:d6:42:16:d5:c8:83:b5:12:21:55:93:a4:
                    df:a1:4e:e2:69:bc:5c:07:75:f7:97:ba:0a:98:84:
                    f1:c8:35:60:3b:24:4f:3e:4a:d9:d6:8d:08:24:28:
                    f6:02:d3:de:59:49:73:ca:43:4f:5e:6f:53:69:83:
                    ff:9e:07:46:6e:b5:e4:cd:36:02:c2:d0:b1:e4:b2:
                    de:95:77:47:36:2c:27:06:2a:44:96:36:f2:15:80:
                    1c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:84:D5:CD:26:38:85:AA:43:83:19:A2:5F:6C:8F:EB:53:C9:AD:03
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8a2e2a6-180a-4119-9dab-dc386bebfad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.180.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cb:96:0a:7e:9e:21:3b:3a:36:f5:03:46:ae:b7:77:1e:4b:0c:
         a9:5b:c3:8a:b6:43:25:8e:0a:eb:52:17:a1:a7:12:a2:1d:47:
         9e:81:a5:16:bf:64:54:e2:4c:a1:10:c8:5e:53:eb:da:2f:93:
         74:30:d8:d0:38:2b:0c:74:65:ea:d6:de:08:75:59:f0:ca:ec:
         fc:5e:fb:fb:48:b9:18:b5:71:0b:91:84:24:93:5d:30:77:d6:
         90:2b:d0:e1:ef:67:8d:6f:f7:2d:4e:70:dd:46:1a:3e:28:15:
         1d:a6:1c:85:bf:e5:5d:97:3e:9a:a7:a8:ff:41:47:f0:f7:70:
         43:28:04:c8:b6:68:73:00:f9:ad:2b:ad:16:69:55:79:eb:6a:
         9c:01:83:46:92:c2:bf:c4:58:4c:1c:b4:18:4a:c7:3a:b2:82:
         a4:c3:12:d1:c4:24:6f:3a:74:50:28:74:9a:5c:13:fa:74:32:
         3b:f1:3d:54:b3:c0:c9:b5:02:a3:fd:b6:b7:de:20:3b:e5:61:
         c9:1e:70:92:9a:7d:88:ae:c0:d9:66:2f:8f:b6:5e:d1:84:10:
         be:f0:b6:d8:f4:50:02:e0:93:a7:50:c1:f7:5f:eb:9f:a1:73:
         ce:53:3b:6c:fd:4a:ac:44:59:8c:b3:19:4d:95:ba:2a:69:e8:
         13:73:6a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----