Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d48d001a-d755-4177-9837-96a2f0404b1f.roa
File:                     d48d001a-d755-4177-9837-96a2f0404b1f.roa (raw, json)
Hash identifier:          Nk8WQwM0wnnd5gWb6a6Q+pRFoShJ2zrKkGZpjDse68Q=
Subject key identifier:   5B:C5:D7:E2:88:22:7D:3E:B8:B6:3D:8B:5D:81:48:A7:39:47:66:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A55976CF0B537ACACE8F4E418995FDAE754C1C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d48d001a-d755-4177-9837-96a2f0404b1f.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.57.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:55:97:6c:f0:b5:37:ac:ac:e8:f4:e4:18:99:5f:da:e7:54:c1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=9acb01881680f7ce01c9e170dc166f9696a1fe1961657d51fbb818adad04a74a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:44:8e:c9:55:67:f1:f5:de:31:1e:3d:7f:
                    fc:f1:19:11:17:73:57:f3:e4:1f:93:e5:60:37:fa:
                    7d:38:64:e9:72:f0:c2:1a:fe:9b:59:c2:d9:f1:e5:
                    c0:7f:d2:cd:41:fe:d9:17:d9:ac:44:1e:d3:89:81:
                    38:3b:27:ca:7b:3e:f0:e1:fe:5b:db:20:f8:17:cb:
                    ed:f4:95:28:c7:69:af:9d:e2:38:8b:50:93:3a:0a:
                    ee:50:c4:1d:3e:11:40:49:da:e6:d5:e2:92:05:05:
                    e1:95:7e:fd:eb:db:c4:fa:a6:f0:42:2b:a8:10:24:
                    7b:f0:f1:0c:25:ee:52:de:e2:8c:46:fc:cd:0e:34:
                    da:af:64:85:14:6c:43:2f:a6:43:73:27:ea:24:77:
                    17:0b:27:fb:0c:47:18:a1:fb:82:94:75:5b:d4:44:
                    a0:7d:6e:ac:f2:78:91:f8:93:6d:ae:4c:df:70:d0:
                    02:15:2f:1b:9d:fe:1f:3d:9d:a8:4f:69:f2:04:60:
                    b0:d8:29:e7:4b:a8:39:ff:48:9c:a6:cc:29:4f:3d:
                    8c:7b:6e:23:1b:dd:73:a2:a4:ea:ca:db:de:50:a9:
                    3b:b8:fe:23:db:fe:f0:e0:81:34:92:64:71:f8:51:
                    00:fd:11:80:42:06:66:f4:e8:54:e6:b9:c9:d4:b9:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C5:D7:E2:88:22:7D:3E:B8:B6:3D:8B:5D:81:48:A7:39:47:66:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d48d001a-d755-4177-9837-96a2f0404b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.57.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a5:6b:c3:3a:7f:45:34:8d:d1:f5:e3:38:70:4c:ad:22:35:e7:
         d5:10:15:55:ff:e1:c6:34:24:71:9f:3a:6c:19:fb:b8:21:dc:
         84:69:9c:fa:78:e8:3e:e7:56:0c:49:43:20:3e:db:93:dc:17:
         d5:98:37:13:9f:6d:9a:58:47:2d:75:86:52:10:04:4b:49:02:
         7e:b0:fe:19:13:98:da:c8:71:35:5e:5d:6b:16:92:bf:3b:ee:
         38:57:36:08:d3:6e:5b:39:f0:ae:c7:38:b2:14:89:93:01:36:
         e2:e6:65:e3:e5:cb:2a:d4:c2:59:19:8e:54:e0:d3:b6:e0:13:
         82:55:03:91:3d:0b:68:4a:12:ed:3d:c2:9f:55:43:87:b4:9d:
         f4:74:e6:d9:8d:b9:29:c9:44:40:a8:a2:77:0e:bd:de:cf:db:
         0b:ae:15:c9:4e:0a:92:91:65:8a:c7:d9:5f:aa:2b:18:a3:5c:
         8d:5a:85:8a:a5:07:e7:6c:8d:7d:91:ec:ed:d6:fa:7b:01:6c:
         82:a1:1a:d2:8c:38:a7:45:a7:e4:6d:da:a0:1e:5b:2a:3d:6e:
         0b:e7:0d:fa:72:ee:0f:fc:24:7c:cb:a1:fa:3f:73:86:73:30:
         e8:05:f2:a1:26:db:bf:e8:0a:b3:f7:01:78:12:16:58:d9:a9:
         a9:43:f0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----