Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1e0c941-6fe9-45d8-8ea9-73a3ba825303.roa
File:                     f1e0c941-6fe9-45d8-8ea9-73a3ba825303.roa (raw, json)
Hash identifier:          Lu5OXdwF/5ksXdXxVwNo70+ucVxecrcQ+TerHu/kyvo=
Subject key identifier:   24:C9:E9:3D:28:A3:2E:52:E9:16:81:15:00:25:64:EA:8C:88:10:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E382A18AF952BA52867CA196B51DEDE22DD2194
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1e0c941-6fe9-45d8-8ea9-73a3ba825303.roa
Signing time:             Fri 31 Jan 2025 00:00:00 +0000
ROA not before:           Fri 31 Jan 2025 00:00:00 +0000
ROA not after:            Fri 07 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        114.57.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:38:2a:18:af:95:2b:a5:28:67:ca:19:6b:51:de:de:22:dd:21:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 31 00:00:00 2025 GMT
            Not After : Mar  7 23:59:59 2025 GMT
        Subject: serialNumber=78ca867c991debcaaa1cba2f44bcc512ba0ebbaceff005f74aef799641d0261b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:83:9d:3a:9d:6f:55:c9:72:b3:c1:19:57:
                    1f:d0:df:ca:29:03:ae:d2:40:9a:94:28:98:75:8b:
                    1a:a3:47:95:74:2b:50:db:b8:83:0d:24:cf:09:a3:
                    dc:34:26:7f:3c:9e:1f:9a:2d:ee:d0:c4:af:02:7e:
                    b5:cd:65:73:a6:99:62:ae:d6:5c:f7:ee:e5:ba:d6:
                    9b:fd:ac:00:fa:a0:62:63:2a:cf:c0:c2:01:28:0b:
                    b0:5a:79:46:2e:09:ea:0c:bf:a3:89:81:dc:6f:4e:
                    7d:be:9a:91:98:96:80:83:33:16:55:68:ac:a7:4a:
                    51:dc:8d:7d:f9:61:6d:80:f5:d1:8b:cd:ac:a3:a8:
                    fe:bd:51:b1:c2:dc:97:bc:88:fb:57:1b:95:b8:e3:
                    e7:a4:ef:7a:f4:eb:f3:1b:e7:bf:68:b2:c8:7c:1f:
                    c6:f5:82:0c:09:6f:12:66:33:73:99:52:ea:5f:a0:
                    d6:3c:af:bb:b7:92:b9:5f:d6:1e:2e:ac:f2:c4:bc:
                    e9:9a:da:64:df:2d:f1:32:cd:ec:8b:ee:22:cc:ff:
                    db:f7:db:49:82:e8:d1:69:6c:00:d7:46:e4:e2:36:
                    92:87:71:7e:77:b8:80:99:1f:c3:9d:01:1a:20:71:
                    ce:87:0a:4e:d1:c0:3c:4c:69:1e:21:ef:e3:56:3c:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C9:E9:3D:28:A3:2E:52:E9:16:81:15:00:25:64:EA:8C:88:10:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1e0c941-6fe9-45d8-8ea9-73a3ba825303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.57.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c6:8b:27:3d:e3:3c:d6:12:ba:8f:98:60:76:9d:e5:bc:4f:38:
         9f:bb:e3:26:44:1d:2c:d4:e6:c5:e6:43:dd:95:5d:d5:f1:5d:
         b3:3a:e5:6e:0c:2c:b2:31:88:c9:5b:71:c4:99:40:69:a3:10:
         59:8c:1c:8c:71:35:1a:e0:ff:be:5b:56:ae:ab:fd:7b:54:df:
         22:bd:6b:7c:aa:f1:9d:5d:05:89:4a:21:40:32:f0:a5:8f:a6:
         df:69:5b:25:f2:a0:44:d6:db:c2:87:84:45:62:89:eb:1b:00:
         9e:27:ee:45:f2:dd:85:70:06:af:20:d0:b4:81:0f:00:c2:e6:
         69:58:9e:27:94:41:7b:2b:6b:21:31:6b:ae:86:0d:de:1c:c3:
         4e:89:96:52:cb:27:bc:0d:b6:c0:99:51:e6:b8:80:97:8e:29:
         e9:11:f8:c8:01:4e:19:6f:ab:16:e0:5a:c0:af:68:7f:53:5a:
         9b:4c:ca:0d:74:0f:9d:18:a6:93:19:19:70:ed:5c:1b:1c:8f:
         87:b1:51:40:73:be:5d:e2:b3:18:14:c9:dc:b4:2f:e3:83:87:
         5b:8d:2e:f4:e9:d3:6a:d0:5f:bd:9c:1b:4d:f0:7a:89:e7:b6:
         34:90:6d:11:01:bd:33:71:73:19:3a:51:9b:42:37:ce:b0:33:
         89:ea:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----