Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2fc25c4-cbcb-41d6-abb1-81a32332c760.roa
File:                     f2fc25c4-cbcb-41d6-abb1-81a32332c760.roa (raw, json)
Hash identifier:          gD5M0Zfx3mOULF28vqa0hxjzsdPZJN5fg17TX3C56qA=
Subject key identifier:   6A:DD:DE:57:FC:11:D2:6F:5C:83:7A:5C:23:4B:92:74:6C:D3:E5:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B61505B8D92738119BAC4C8443AD58F1F4C6BAA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2fc25c4-cbcb-41d6-abb1-81a32332c760.roa
Signing time:             Wed 15 Jan 2025 00:00:00 +0000
ROA not before:           Wed 15 Jan 2025 00:00:00 +0000
ROA not after:            Wed 19 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        147.106.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:61:50:5b:8d:92:73:81:19:ba:c4:c8:44:3a:d5:8f:1f:4c:6b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 15 00:00:00 2025 GMT
            Not After : Feb 19 23:59:59 2025 GMT
        Subject: serialNumber=055b50a3fdcb5a4435b029b366afc6c2e71e1b1db600f45fb40b39b5d192213c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:7a:3d:22:73:1b:fb:25:b7:4e:07:40:f6:
                    f1:ce:d0:7a:f5:86:3b:8d:9f:58:a2:df:4e:80:37:
                    46:8a:d1:b2:d6:96:f2:fb:7b:a2:24:6a:0f:43:cb:
                    f6:c5:2d:fc:43:2d:76:67:de:c1:b6:c6:41:4d:91:
                    8d:04:f3:45:16:91:2f:be:aa:c1:f8:68:01:cd:8b:
                    aa:0d:0f:f3:77:5a:22:ad:a1:b7:1d:fe:b7:69:0e:
                    52:0c:14:7b:43:11:ae:93:e8:8e:30:d3:5c:60:83:
                    16:85:3c:46:a9:8a:bf:eb:f1:f7:8d:28:07:73:ea:
                    47:aa:7a:93:3e:9e:65:ac:7d:e5:38:d3:98:6f:f0:
                    75:c4:fd:20:6b:3f:0b:5f:82:10:1d:7f:3a:eb:0e:
                    3e:fe:3c:7d:4d:f5:7b:36:91:38:81:c6:c8:56:51:
                    aa:e2:0c:45:7a:de:b0:a8:85:42:c7:a4:ec:c6:9d:
                    6a:4d:a3:15:06:a1:fa:cf:a6:64:4e:c1:30:fd:11:
                    cd:97:cb:5f:20:68:4c:ba:dd:69:3f:84:46:a6:9c:
                    ff:7a:da:83:1f:04:25:62:93:c5:bb:74:64:3c:1e:
                    87:f1:95:21:87:fa:bf:0f:15:39:89:f0:73:f0:9e:
                    bd:3a:a1:76:b6:ab:c1:bf:85:2a:a6:db:f7:d0:94:
                    83:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DD:DE:57:FC:11:D2:6F:5C:83:7A:5C:23:4B:92:74:6C:D3:E5:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2fc25c4-cbcb-41d6-abb1-81a32332c760.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.106.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         55:7e:c7:0b:4c:dc:b4:6a:a3:ff:c7:e6:ef:f6:d4:aa:cc:fa:
         05:04:3f:63:2a:7c:95:41:55:34:2c:8a:74:c4:7c:e1:96:35:
         00:a4:e0:65:9b:0a:5b:d5:22:10:84:72:b3:1b:9a:f8:60:db:
         2b:31:73:d9:6b:29:3c:c5:f8:f3:51:cb:22:07:51:cb:27:93:
         1c:0f:2c:f2:24:49:1d:03:89:7d:69:a2:e4:1e:86:cf:6e:83:
         dd:89:b1:c6:7b:c2:1d:b3:74:4a:a9:76:d0:7a:b1:19:02:9d:
         e0:4b:a6:bd:49:f3:79:bc:aa:2b:89:12:39:03:3f:21:9e:a4:
         94:fe:c8:a3:65:32:08:77:91:dc:85:b7:b5:7a:9e:eb:93:45:
         a8:c6:b3:49:e2:77:18:97:37:58:04:fb:19:e1:09:78:a9:35:
         54:71:9d:e9:ba:96:e1:77:a2:7d:54:2c:20:73:b9:eb:96:2a:
         5f:ee:d3:24:19:77:0c:c0:98:f2:07:20:b2:2d:c3:11:29:34:
         e5:7b:e0:c5:e8:0e:4f:db:82:54:8c:ef:71:af:35:4a:a1:99:
         e3:65:6b:46:53:23:86:21:e2:3d:fd:f3:96:9b:a3:2b:fa:3e:
         b8:66:11:e4:ce:9a:82:92:ac:32:ee:30:9c:3f:49:2d:58:39:
         cf:77:0d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----