Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa
File:                     fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa (raw, json)
Hash identifier:          aw4gbT24I8YbfYulZ1WUOHPeFiewv+cSvlhDoUQ1MTI=
Subject key identifier:   4A:C4:38:BF:62:02:9E:19:41:3D:65:60:C0:0E:6B:EE:3F:B9:F1:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0FCDB6ED5EF606848F274152EF184AA6DDAE0E19
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.181.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:cd:b6:ed:5e:f6:06:84:8f:27:41:52:ef:18:4a:a6:dd:ae:0e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=5476f3bd3402fb9a4cbcf27e704dca1329aa878d389cbd1fd6aa837b05e239c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:36:7c:7e:da:56:fd:9a:ac:40:72:68:af:
                    57:49:c2:e7:2e:c3:41:a8:41:d0:ae:af:99:f5:a1:
                    8c:a2:5c:28:e6:26:a1:e4:36:83:24:c9:ac:15:8f:
                    c4:65:97:08:c7:8e:da:d0:fd:fd:0c:9a:13:aa:38:
                    aa:c7:88:7e:a2:9c:b8:b1:49:c8:81:de:97:37:99:
                    83:61:ac:b7:ce:e7:35:0c:b3:19:df:fa:9b:59:f8:
                    de:8a:a3:a2:06:16:3f:5e:83:8c:ec:b6:85:d3:f3:
                    c8:36:92:a7:f9:cb:92:7c:24:90:ef:7d:13:75:a4:
                    e2:7a:1f:14:e4:e0:42:df:5e:88:16:03:e0:b3:13:
                    c1:a1:13:0d:ba:75:4f:fb:19:91:79:16:53:22:48:
                    90:18:e0:ea:ba:99:9f:53:6a:57:fa:b0:c2:c5:d2:
                    b9:27:b5:c5:f1:96:f1:6d:1b:54:4c:81:01:4c:78:
                    e8:aa:29:1d:2b:3e:84:73:0b:2d:4a:e3:59:66:c3:
                    f1:3f:36:51:eb:a7:30:7e:83:cd:56:68:52:83:23:
                    fc:00:96:6e:c9:df:9e:19:5d:98:77:44:2b:dc:ba:
                    29:91:83:11:bb:00:9e:03:bf:6b:f4:79:a5:60:42:
                    52:bb:28:99:23:8e:cb:11:52:5a:bf:30:57:f9:32:
                    3e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C4:38:BF:62:02:9E:19:41:3D:65:60:C0:0E:6B:EE:3F:B9:F1:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.181.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4e:2f:66:32:09:62:cf:a4:6a:7b:30:ec:13:c7:33:6f:a6:98:
         d6:d9:08:dd:a9:02:d0:d8:e9:e0:94:74:7f:84:eb:0c:af:5e:
         ce:73:94:c6:6f:af:e6:21:c3:42:91:74:ee:da:9b:38:1b:5b:
         ed:08:8b:51:24:ec:c3:6c:b7:7a:1c:ef:51:71:f2:b3:0e:cc:
         02:e0:b7:ec:28:97:a7:a2:94:a5:00:55:3a:ff:d5:17:c7:9d:
         8c:1b:1a:04:08:65:41:72:2a:9e:4b:67:b9:10:f3:92:21:68:
         2b:1b:b5:5a:eb:63:9b:7b:ed:57:c2:55:7a:fb:88:9a:31:c5:
         ce:bf:c4:fb:98:0c:83:22:24:90:d9:63:31:bc:05:dc:32:8e:
         b1:1b:f5:0e:ee:1b:b2:76:33:14:99:2d:71:83:89:dd:93:65:
         58:63:a0:33:14:5c:50:2e:a2:86:88:6b:60:e0:43:81:f6:17:
         23:f7:c6:8a:92:13:43:71:2f:3f:9b:a9:5d:5e:ec:83:be:3c:
         39:5b:40:34:e1:69:ee:5d:cc:09:3f:39:42:b7:6c:76:c7:5d:
         dd:2a:55:6c:d8:7d:52:f6:34:a0:12:93:68:4b:5b:25:e5:d9:
         32:d6:23:fb:3e:44:fb:dc:b8:7f:75:e8:53:5e:d8:76:a4:a2:
         67:45:00:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----