Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1f2730-0f56-434b-aea7-5265e3cade65.roa
File:                     db1f2730-0f56-434b-aea7-5265e3cade65.roa (raw, json)
Hash identifier:          9XTQDJ1ChAnhD19efxA4nMyapCeOYJmMG53wSmHgDUE=
Subject key identifier:   41:6F:A4:EA:CD:6E:FC:EB:DF:DC:36:D1:80:C3:7E:72:D4:00:D5:E9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       084990F74CA9BF6227CD4A9333613B61286CD92C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1f2730-0f56-434b-aea7-5265e3cade65.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.144.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:49:90:f7:4c:a9:bf:62:27:cd:4a:93:33:61:3b:61:28:6c:d9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=53a15598b53b4b1f04a4bfae36468f1a3a811d4e28300bd27bf4e08947d26200, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:d6:47:36:a7:71:bd:b9:09:1a:62:69:03:
                    26:3b:62:db:f7:83:63:c5:f4:de:31:87:da:8f:71:
                    44:ca:08:6e:18:2a:fc:38:92:4f:36:b6:86:5c:8b:
                    a4:01:86:ac:d7:fd:d5:59:62:c0:37:cc:fa:d4:eb:
                    cb:d5:0b:79:2e:dc:f4:b2:25:c2:7e:8a:6d:83:3d:
                    6b:36:87:ae:a2:30:86:53:69:c2:6c:a6:7d:a1:23:
                    6b:95:2c:64:e8:ee:13:f4:c0:da:8b:8c:2d:17:88:
                    13:c4:81:de:f3:5f:01:6b:9f:3a:27:b8:64:02:de:
                    d9:a0:0b:c3:05:51:41:8e:a7:cb:35:55:9f:a7:ec:
                    1e:3a:0f:df:a4:94:01:5d:31:b3:aa:6d:90:e1:73:
                    d1:e9:63:76:6c:6b:6f:af:46:b2:64:c3:d1:c2:e3:
                    57:73:68:f3:88:96:6b:8e:ca:f0:8d:01:21:12:0a:
                    59:87:42:36:fe:c4:30:8f:89:01:c2:e4:09:56:15:
                    1c:a8:9c:b6:ad:52:6e:fc:6d:52:9d:1f:eb:aa:59:
                    74:91:cf:9f:26:9a:21:b4:af:06:dc:69:21:d7:18:
                    69:d8:59:1a:6d:20:66:a3:85:73:20:f9:5c:1e:e6:
                    c5:2b:08:00:bb:78:aa:4f:e6:97:41:78:01:e2:99:
                    5e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6F:A4:EA:CD:6E:FC:EB:DF:DC:36:D1:80:C3:7E:72:D4:00:D5:E9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1f2730-0f56-434b-aea7-5265e3cade65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.144.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:d1:cc:fd:e9:02:95:5b:b0:d8:fc:6c:7d:94:89:1d:f4:15:
         14:c5:d6:76:ea:d1:86:b4:d7:ec:b7:8d:b0:04:82:f9:38:bc:
         52:5c:03:e5:00:85:25:97:94:ca:7f:b0:11:82:e8:a4:7c:75:
         39:4e:49:12:b3:ee:0c:41:0a:f9:7b:e5:a8:86:03:ca:b1:51:
         57:3b:57:00:29:c7:62:bf:15:c6:1f:15:47:23:a3:b6:7a:30:
         55:8b:96:45:a9:f3:a3:19:7e:b0:65:62:0b:d9:d4:4a:df:de:
         45:f8:68:74:7e:88:6b:a5:5f:82:ac:d7:bc:27:f8:51:ea:aa:
         22:53:ee:7c:03:2e:7a:22:66:fb:32:c2:cb:5b:24:55:43:13:
         79:8e:08:54:81:e5:2e:34:61:22:be:52:e6:a4:7c:4b:21:ef:
         1e:d6:6f:97:cb:31:65:46:39:33:9d:ad:97:91:78:93:3b:8f:
         f6:44:ae:36:bc:51:db:43:14:26:7d:51:01:44:f0:b4:f9:c9:
         fd:c4:9b:5f:36:87:f7:a0:c3:90:29:30:8d:ff:3e:45:bc:ff:
         8b:83:2c:63:29:9f:7b:be:f0:9c:38:d8:81:81:e0:61:11:34:
         ac:2e:86:1d:65:08:49:e6:13:2e:54:59:29:15:a9:aa:31:f8:
         57:8a:2f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----