Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa
File:                     d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa (raw, json)
Hash identifier:          wOwKoHm7VwNzZ/xchrY2VXvm4YvrqowTNiT2Qeappo4=
Subject key identifier:   85:EB:DC:5C:25:59:CB:18:C2:05:96:05:99:EF:3F:6B:AC:22:2C:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27A43CC7E42BC9353233727DE18C85A279AEAEA7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.63.92.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a4:3c:c7:e4:2b:c9:35:32:33:72:7d:e1:8c:85:a2:79:ae:ae:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=7f115e354b7026642ded91972858fb66355c8d5d2e31c8afe8d492edb8ce20a0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:4f:99:fb:2d:af:15:94:5a:06:ce:54:f9:
                    b8:07:04:17:2f:0f:78:78:3f:a3:33:06:de:52:90:
                    2a:0f:2b:69:e4:80:08:68:13:38:89:e8:80:20:38:
                    bc:09:db:20:5d:31:ba:99:fe:af:ea:3d:de:e4:54:
                    21:37:2f:6d:3d:3b:d6:7b:d5:fa:4c:4d:5c:70:a6:
                    00:8c:2f:ff:99:0b:99:f1:45:3d:62:cf:ff:f1:b0:
                    ec:b4:c5:8b:a1:a1:23:03:80:bf:63:23:d8:13:ea:
                    9d:c2:40:60:05:bf:ec:5c:af:72:0f:be:8f:d6:09:
                    c3:ca:06:07:55:5e:65:e3:1d:11:dd:9e:af:ac:33:
                    eb:8f:5a:70:87:87:53:58:4d:1d:97:7e:2c:aa:82:
                    d5:a2:26:6d:51:8e:7a:b1:85:de:de:92:64:43:9c:
                    60:76:ae:fc:07:ba:16:67:54:d3:68:64:0c:39:b2:
                    d4:97:c7:69:24:45:6e:b9:81:c7:e7:e9:79:5a:6d:
                    35:e3:58:e9:0f:53:b6:4f:94:0b:38:2a:39:6d:e0:
                    4f:c0:1d:6f:f2:f3:41:fe:3d:a6:05:79:c6:0f:e8:
                    f8:27:74:0c:ce:65:40:16:50:58:ed:bc:e5:c6:da:
                    4c:16:65:c7:72:ff:3f:3a:0c:dc:31:d0:71:40:7a:
                    94:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EB:DC:5C:25:59:CB:18:C2:05:96:05:99:EF:3F:6B:AC:22:2C:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.63.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:d8:2b:a6:7f:dc:c1:60:4e:f4:ea:7c:c5:ff:7a:02:af:58:
         14:5a:c1:d5:c9:2d:e4:4e:87:e7:03:d4:fb:4a:df:c4:bb:51:
         2a:df:94:6c:5f:f9:42:3c:d7:f7:24:0a:f1:b0:78:9b:f6:33:
         91:8b:3c:5b:bd:de:7e:fe:a8:cf:75:37:88:da:41:3f:1c:42:
         a2:1b:34:c3:51:a7:9b:66:10:a1:ea:84:d8:df:6a:d9:fe:6d:
         1f:bb:8a:2b:64:83:3d:fd:b8:99:e0:84:91:c5:49:61:35:1b:
         f7:19:a7:36:bc:c2:7f:ea:ac:f2:eb:dd:0d:96:37:b6:17:79:
         b0:8c:5f:d1:c3:cb:61:67:8a:b7:75:e2:66:f3:a0:23:cb:5e:
         0b:01:ab:c0:47:65:71:43:17:e1:23:24:3b:3b:9b:ed:f0:f0:
         9c:13:39:ef:5a:90:01:aa:28:92:92:15:85:da:51:4a:b8:c4:
         8a:d7:1a:60:56:72:de:ea:b8:5a:c4:b5:22:95:03:98:18:07:
         37:06:66:67:b7:4a:0e:dc:39:6c:d2:d8:85:18:1b:2e:f6:2e:
         36:17:6b:6f:27:71:13:23:d3:e0:ef:8c:6f:2e:49:c5:0a:bd:
         a0:ca:ef:a1:35:a5:c2:e3:47:7e:73:f5:19:06:2d:8a:79:c0:
         57:5f:98:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----