Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec99a65b-3b4a-403e-9ae9-8fcaef82eaa2.roa
File:                     ec99a65b-3b4a-403e-9ae9-8fcaef82eaa2.roa (raw, json)
Hash identifier:          XS0MCOjRXzcVHyoE1ctcIeD2L+rTyGGuQmFUt7xMiUw=
Subject key identifier:   14:DE:81:4D:36:BE:E3:CA:A7:A2:FF:7F:19:41:BD:18:9C:86:67:12
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6CE57F9B108477FF70615B728EA112CEE056DA77
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec99a65b-3b4a-403e-9ae9-8fcaef82eaa2.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.113.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e5:7f:9b:10:84:77:ff:70:61:5b:72:8e:a1:12:ce:e0:56:da:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=38d7e50ab71617b6ba117bb273ba7eca3bbda0c409e5f20a757275124f9b0a87, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:12:59:b1:2c:25:73:59:aa:b9:b9:ff:17:
                    0e:65:4b:8f:81:5d:2b:3d:77:52:45:cc:5d:9b:4b:
                    ab:6f:74:78:65:bf:cb:0c:84:81:c7:47:79:f9:69:
                    80:a9:59:84:02:df:15:79:1e:59:9d:e0:7c:a4:d1:
                    cd:cb:70:95:6c:31:05:a9:e9:06:dd:61:6d:ef:9e:
                    6a:3e:b1:0e:68:59:69:97:50:3d:a0:9b:d4:83:df:
                    2f:e8:fa:c6:fe:2c:fa:e0:d7:7a:c3:c7:c9:e3:23:
                    b1:f0:d6:f5:d2:25:3e:c5:c6:08:e3:aa:c0:ea:86:
                    c2:bb:5f:19:23:5e:65:18:ba:8a:b6:96:1e:d7:1d:
                    dc:d9:5a:cc:a8:11:6f:a7:7b:d6:8b:ec:18:5e:d4:
                    b0:1e:8c:df:37:36:9f:31:b3:dd:25:2c:8f:1f:cd:
                    b9:3c:45:eb:7b:e3:bc:14:14:7f:40:6f:d9:56:a2:
                    53:ab:88:ad:8d:5f:e9:cc:db:23:74:64:07:21:4e:
                    a0:ed:9c:09:4a:18:a0:3f:82:94:48:6e:59:99:81:
                    3b:ff:3f:f5:a4:dd:71:38:5b:34:02:4f:a7:94:fe:
                    09:e2:86:ce:80:c0:55:99:0f:05:21:99:a5:fb:ce:
                    91:23:a4:50:a7:f7:e8:33:5b:63:18:2d:72:ff:56:
                    44:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DE:81:4D:36:BE:E3:CA:A7:A2:FF:7F:19:41:BD:18:9C:86:67:12
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec99a65b-3b4a-403e-9ae9-8fcaef82eaa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.113.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:9a:7a:a1:e9:47:f7:f8:53:4b:b5:59:af:e9:c3:43:fc:4c:
         67:28:1e:d6:ab:85:b5:8f:dc:d0:a3:59:14:61:bc:12:d0:e4:
         d8:b0:a2:d0:07:bd:4d:01:58:46:a3:e7:d4:21:a3:a0:25:26:
         19:96:05:13:64:2d:99:73:7e:d4:dc:0d:a2:ed:f8:df:a7:84:
         43:10:18:a0:fb:69:4c:bd:63:9b:83:e5:e4:2b:ef:08:49:15:
         dd:8a:8b:ed:e2:58:1a:cb:11:30:d3:71:11:b2:87:96:fd:f3:
         31:71:7b:8c:22:88:2b:d1:a4:7e:a4:08:27:dd:e0:5c:20:18:
         04:aa:50:79:c8:10:30:e8:b7:b0:0c:1a:d7:a8:fa:5c:c8:81:
         cd:2c:d2:8d:1e:49:b4:ce:0d:cb:6f:15:5e:b8:39:c0:86:dd:
         a5:71:1a:d4:8a:c6:2c:88:59:4a:2b:cb:f9:cd:d7:63:73:a7:
         85:c0:0d:11:c8:53:0c:f8:8f:43:17:66:16:85:0e:ec:d7:e0:
         bf:d6:46:c0:7c:f3:f0:cc:c5:cf:5d:4f:22:54:bb:b6:68:b9:
         18:46:c3:1c:d6:d5:1f:73:45:d6:94:dc:5d:f1:75:81:5c:1a:
         1e:f2:bf:d0:75:91:af:69:a4:3d:45:29:c6:67:b0:81:ad:1c:
         11:0d:2c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----