Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa
File:                     cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa (raw, json)
Hash identifier:          HL3d5YrK5xBOVOJyGP3pr6D3pqqqqNFZ6sPWPcOppps=
Subject key identifier:   3B:75:44:9C:C5:F8:D6:C4:DD:9F:6E:7E:3B:DC:D9:E2:12:C7:5C:51
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       422352137E9ACD61F81F0FC3FD1B48BF694DC961
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:23:52:13:7e:9a:cd:61:f8:1f:0f:c3:fd:1b:48:bf:69:4d:c9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=562edeef657dd7ee58634ffb483e16570c4456818a5b3f64b03f743f8b001d3e, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:4c:7d:28:e1:a4:ca:e8:b2:de:7f:1f:93:
                    84:d3:21:bf:18:df:e0:0c:c0:f7:1f:ac:28:ef:49:
                    22:cb:5f:04:96:ba:49:ac:ca:71:6c:0e:44:2b:9b:
                    36:91:bd:0a:a0:5d:f2:09:c6:10:4e:dc:89:7a:40:
                    29:57:c8:be:6c:c2:80:92:0c:02:63:2b:85:2f:c7:
                    ae:f6:ca:7c:06:4d:43:0f:3d:a9:35:86:f2:5a:7b:
                    4e:31:4f:d3:c5:4d:ac:cb:20:ca:75:f9:d9:0a:ff:
                    bc:8f:d2:0a:38:c9:17:47:cf:aa:99:27:83:65:45:
                    ef:35:bb:1f:0c:03:c8:65:32:91:50:f5:81:b8:03:
                    65:51:76:65:3e:54:49:83:94:57:73:37:04:f1:fb:
                    d7:34:fa:f1:bb:fa:8c:73:0f:8a:9c:22:7b:3a:04:
                    ed:19:f4:75:5a:4a:c0:6a:bc:a0:61:33:34:9c:4b:
                    76:5b:38:bb:ad:25:26:6b:1e:15:27:ee:a2:e9:3b:
                    9f:6c:86:40:e6:80:fd:21:b3:af:bc:f6:d4:cf:eb:
                    23:ab:06:81:58:75:a9:0d:8a:74:66:a2:48:4c:b9:
                    bd:5c:65:a1:78:63:c5:bd:da:a6:1f:a2:74:9b:70:
                    ac:6e:4d:a7:e5:e6:46:ee:f0:63:81:a5:93:0e:bd:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:75:44:9C:C5:F8:D6:C4:DD:9F:6E:7E:3B:DC:D9:E2:12:C7:5C:51
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:20:3f:3d:ce:76:31:9b:4e:7f:ab:d3:ed:4e:86:c1:7c:9e:
         6b:9a:af:f3:34:0e:89:73:bd:01:42:6e:18:f6:1f:88:f5:10:
         9a:91:4a:a5:0f:51:ab:4b:0e:3d:c6:0d:50:f9:46:eb:cb:14:
         af:93:52:f7:4b:43:aa:bf:3b:61:b6:57:20:b7:e3:1c:97:5f:
         e3:66:06:39:66:6f:a1:37:4a:66:77:1f:2f:97:b6:4c:0f:cc:
         2c:f7:69:89:f9:ce:70:90:15:98:58:14:23:36:38:dd:af:65:
         38:42:9e:8f:8d:90:39:dd:5f:22:0e:cd:2e:28:61:e4:9e:d9:
         06:17:e6:dc:0e:8c:d6:2f:8e:86:e1:c0:a1:66:ea:90:95:89:
         b9:00:41:86:bf:b3:89:46:1e:8d:e5:8a:12:97:4e:fb:b3:9f:
         9a:b6:c4:5f:4b:1f:7d:19:c7:5e:d6:f0:12:c5:ce:97:18:09:
         cd:14:64:01:36:b9:10:24:5a:d6:46:5a:aa:ec:31:8b:b8:5c:
         3d:ba:26:54:52:c9:e4:4a:cc:8a:fc:e6:f2:e3:e9:14:d0:c2:
         ad:08:03:fd:a9:2a:c3:a8:ea:09:b9:dc:3b:df:99:f2:0e:7c:
         e4:aa:8c:3e:02:cc:5c:29:b1:cd:a6:44:95:20:75:59:3a:c0:
         0b:46:4d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----