Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd040691-6f04-4613-a81f-f5417500cc0b.roa
File:                     cd040691-6f04-4613-a81f-f5417500cc0b.roa (raw, json)
Hash identifier:          ytVf7PiLvmzSzDgqyv6LMfG9Umpr0q905DIB2EYJUd4=
Subject key identifier:   AA:6E:B5:DC:24:DF:B8:B7:40:A3:97:0C:4D:5C:2E:AE:91:08:91:EF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26A221E34E62A7E5E5CF7346D6C23C8DB1074925
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd040691-6f04-4613-a81f-f5417500cc0b.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.128.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a2:21:e3:4e:62:a7:e5:e5:cf:73:46:d6:c2:3c:8d:b1:07:49:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=9d6570af7c241869fb1fa23170f2fed387237d1960d726eb907d10b597e653c9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0b:1b:73:d5:c0:1f:d2:c1:fb:94:f9:0f:49:
                    89:ce:a4:8e:88:6b:57:b5:b8:2b:c1:3f:63:b9:c4:
                    8c:9a:6c:3d:ae:9b:4a:a7:87:9a:2b:77:ef:1f:cb:
                    bb:e4:3c:88:f9:d7:b2:23:1e:f1:4a:86:89:4c:13:
                    35:f7:69:f7:bf:b0:75:28:7e:4d:20:42:5e:6d:3b:
                    a6:27:bc:a5:65:6a:e6:9e:e7:41:84:e9:22:12:1d:
                    e8:a1:02:77:96:a8:39:1b:e8:72:88:c8:aa:af:b3:
                    55:97:33:bd:68:17:cc:8b:8b:60:4d:76:d0:06:85:
                    56:86:26:54:a2:1f:59:07:69:f3:ae:58:92:2e:32:
                    50:89:42:16:87:80:45:dc:e0:17:c7:89:23:93:d6:
                    80:57:0c:68:f8:dc:bb:41:01:ff:61:c9:e5:87:90:
                    96:ff:d3:d1:4a:1e:90:1c:9e:5d:17:94:89:7f:ef:
                    85:06:39:c1:0b:ad:a6:35:1b:02:b2:3b:3d:70:36:
                    19:5c:d4:26:a7:84:45:55:a1:ff:96:5e:48:9a:80:
                    7a:cd:73:fb:9b:e3:9e:43:fe:f0:15:18:14:2a:5c:
                    fc:87:71:84:4c:13:71:70:9f:54:3b:87:a0:9d:90:
                    e1:7d:ca:04:98:f6:74:29:82:8d:cd:7f:c1:97:02:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6E:B5:DC:24:DF:B8:B7:40:A3:97:0C:4D:5C:2E:AE:91:08:91:EF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd040691-6f04-4613-a81f-f5417500cc0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.128.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:91:c4:40:19:a0:4f:e1:b6:13:52:be:dd:48:17:cb:be:3a:
         23:90:d9:78:99:ff:c9:50:c0:d7:e3:79:9d:11:67:c3:a0:69:
         8e:29:ba:69:88:3c:70:88:a0:71:79:fb:6d:b2:45:08:7e:76:
         7c:51:60:1b:d2:83:5f:d2:7d:f3:85:b1:0c:52:94:f0:e6:e8:
         d4:69:e5:3c:c3:d3:2a:10:5e:b3:e7:b6:09:bc:1e:00:2b:1b:
         0b:99:42:86:8f:11:98:3c:50:44:18:07:89:da:61:06:ad:4a:
         be:33:cb:87:ad:05:26:40:9c:9f:02:a4:03:2f:f4:f8:92:39:
         21:4b:08:92:2b:2d:12:d5:8d:ca:5c:f0:c1:99:a9:79:e9:80:
         1f:7c:81:89:e0:6e:a8:c5:fb:7b:a5:20:9c:23:87:7d:52:e8:
         8b:13:1e:6e:cf:a0:ea:20:77:6c:d2:18:21:bb:96:64:52:b8:
         b2:ab:52:68:7f:49:22:5c:52:57:b3:7d:ca:36:e4:b3:75:6b:
         92:dc:b4:12:b3:76:cb:fb:87:76:2e:62:cf:ca:ef:1c:03:f5:
         52:0a:70:5a:21:7c:4e:19:00:47:6c:17:fc:6c:91:67:1f:00:
         67:a4:4c:72:c2:40:a2:6e:1d:30:ab:45:5e:8b:29:a2:60:33:
         b9:f4:26:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----