Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef1af7e0-6933-4e52-8fd0-aa7abf670f30.roa
File:                     ef1af7e0-6933-4e52-8fd0-aa7abf670f30.roa (raw, json)
Hash identifier:          8D7flMipcAu/OcburMXIo69JLRrcocq+P4KBYQtCGW0=
Subject key identifier:   4E:61:48:B5:F1:E1:46:B5:C6:4D:09:E1:00:10:9E:15:40:71:63:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B014034D9CFF17D293F43EFA65625B9383D23D5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef1af7e0-6933-4e52-8fd0-aa7abf670f30.roa
Signing time:             Mon 27 Jan 2025 00:00:00 +0000
ROA not before:           Mon 27 Jan 2025 00:00:00 +0000
ROA not after:            Mon 03 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.18.128.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:01:40:34:d9:cf:f1:7d:29:3f:43:ef:a6:56:25:b9:38:3d:23:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 27 00:00:00 2025 GMT
            Not After : Mar  3 23:59:59 2025 GMT
        Subject: serialNumber=dc893f4f4843670af335cd273dfa99f4c84262e6546bc126ea50238b094d5745, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:9d:0f:8b:10:20:33:38:1a:a5:4d:5a:cd:
                    4c:a8:73:d3:02:d7:0c:93:2c:e2:94:d5:88:7d:de:
                    cb:4c:99:0b:47:85:4c:20:ee:d2:f7:9c:bd:48:65:
                    e5:92:c0:4a:1a:c9:f8:f3:52:85:52:ad:ca:41:cd:
                    89:62:26:de:01:29:7d:76:84:a5:f7:95:e9:01:fe:
                    ff:3c:37:4b:57:7c:a6:b4:b3:bb:4f:60:78:6a:08:
                    5f:51:64:e1:b7:f1:56:2b:7c:78:34:56:b9:dd:e2:
                    5a:5e:f7:f5:8b:42:9a:d6:9e:ec:f0:76:7a:95:30:
                    34:38:f8:55:25:71:4d:9b:9c:dc:09:3e:56:44:9f:
                    32:5a:52:dc:b4:dd:bc:20:54:07:d2:93:01:f5:e8:
                    0e:15:1e:30:a7:d6:75:a9:1d:da:f9:7b:75:0f:82:
                    54:f3:84:a8:9e:31:d2:bb:42:82:8d:e8:b2:7e:c8:
                    e0:d0:4e:23:0e:dc:0d:b9:69:05:f5:20:06:13:42:
                    e7:5c:a2:a0:8f:ba:fc:79:89:19:07:bb:0b:fc:f3:
                    d2:1f:4e:d5:64:f6:92:0a:93:48:f1:e1:63:9e:fb:
                    83:d5:61:03:b2:eb:af:9d:2c:5c:0b:15:49:92:62:
                    f3:18:3c:e3:f8:de:1e:2f:2c:55:77:bd:f4:f4:fc:
                    74:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:61:48:B5:F1:E1:46:B5:C6:4D:09:E1:00:10:9E:15:40:71:63:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef1af7e0-6933-4e52-8fd0-aa7abf670f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:2c:1c:54:39:30:3f:b0:6f:2c:f0:26:32:20:1c:26:63:82:
         6c:5b:c8:ee:27:32:dd:69:cd:b5:41:e4:d5:46:97:68:08:9f:
         ee:31:c2:ea:bd:b2:0f:d9:50:00:84:59:06:0a:08:06:c9:d8:
         71:32:77:4c:b0:a7:61:cf:20:cf:d9:23:37:89:82:a6:d2:f0:
         42:86:13:35:dc:9a:4c:18:2c:6f:51:11:8d:a4:cb:54:78:5b:
         26:da:39:a6:b8:d8:50:86:b9:cc:b8:1f:1a:68:6d:fc:eb:0e:
         39:a9:ce:e0:6d:6d:20:5d:fe:df:c7:d5:ba:38:b0:a3:8f:74:
         61:3e:08:fc:2b:0e:57:26:a6:3a:28:9d:33:40:d4:c1:09:63:
         89:0c:83:92:3f:92:af:4b:c2:91:ad:1f:36:bc:f4:1b:14:df:
         f1:3e:ae:59:b6:9c:04:07:5a:5f:1a:d0:ce:30:fb:37:11:08:
         d1:49:29:f6:5c:2b:f4:9e:65:52:cf:28:fd:b1:45:b6:d0:c3:
         6b:ab:52:5b:bb:1a:11:a4:71:2b:b8:69:5c:2d:c0:38:89:4e:
         11:f1:e7:54:06:09:38:1d:b3:30:8d:be:f3:d4:53:df:4b:de:
         f1:08:33:c0:7d:b9:33:b1:8b:ad:17:f3:ee:d9:38:6c:8d:6c:
         61:1a:29:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----