Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa
File:                     e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa (raw, json)
Hash identifier:          caTz31kffS6syrOYrqgqgUbf00YcdXgx5+6vW3fbEPw=
Subject key identifier:   50:90:8B:E6:35:9D:D1:F4:36:8E:73:2E:8B:42:6E:B8:D3:81:E0:BA
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       2612A0AC8A7E999E9EF435090397A91CD38A99D4
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.169.176.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:12:a0:ac:8a:7e:99:9e:9e:f4:35:09:03:97:a9:1c:d3:8a:99:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=5ff115451ace48602247a1c4c2a8b67bcfc558706e5e89987d01cdbb32b42c5c, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:02:61:66:c0:42:97:f5:e7:4a:69:c4:0e:
                    e2:5d:62:31:c3:50:d5:c3:48:8c:a8:b8:af:50:c6:
                    fe:79:e7:92:26:a9:54:49:02:50:b2:b7:64:4f:54:
                    54:52:28:9c:ee:31:10:f8:b1:a7:0d:0a:c5:ac:2c:
                    b8:72:2c:b6:8b:37:4e:ff:8f:35:4b:ef:2f:0a:ea:
                    eb:d6:29:4a:98:7c:81:6b:56:44:1b:66:93:7a:87:
                    cf:03:ba:4b:f0:5f:3b:25:9c:f1:9a:7e:07:2a:02:
                    89:c5:d9:45:60:41:5a:43:f4:9f:cf:d8:2e:46:a9:
                    18:6a:75:91:ee:c3:f8:a5:ce:ae:3a:d3:26:08:a9:
                    07:ed:7c:44:f0:82:21:48:b8:2c:26:1d:15:9c:e1:
                    39:12:d7:2e:2b:16:eb:3e:c1:ad:af:8b:aa:ca:6e:
                    f9:fe:b6:c2:e4:bf:09:f0:f4:63:36:58:ba:a0:e9:
                    14:4b:0e:18:ce:b6:a9:7b:ab:a3:2f:52:8a:fe:6f:
                    da:f6:5f:c6:2d:5b:7f:e4:13:ae:5a:c6:ca:28:5f:
                    6a:1b:5e:42:39:e7:89:a4:cc:2c:a0:e8:a0:38:39:
                    41:8a:e5:32:89:3d:d0:96:bf:87:87:2e:98:02:4c:
                    8a:9b:91:c0:a6:34:15:bf:ad:ac:b5:3d:d6:18:22:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:90:8B:E6:35:9D:D1:F4:36:8E:73:2E:8B:42:6E:B8:D3:81:E0:BA
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:e1:9b:8f:48:a6:3d:fa:14:40:d8:6d:da:01:b2:1e:9d:fd:
         09:e0:04:57:7e:b1:bd:2f:2d:0d:97:8e:18:a3:97:9e:e6:05:
         16:35:6c:b0:fc:d7:30:04:85:3d:f8:70:59:31:c9:b8:d1:a4:
         89:f6:b2:fd:9d:a6:2a:fd:51:78:51:b3:23:d4:49:e3:99:19:
         71:a3:50:3d:c2:e8:be:0d:58:65:b4:13:21:0e:e1:82:be:c2:
         93:fd:51:fb:1a:5f:a1:f3:24:d4:6c:96:69:74:5b:1f:17:80:
         1d:b5:7c:d7:f8:7e:10:b3:6b:19:e4:e4:38:ae:2b:3f:20:5b:
         c2:52:73:28:78:b6:d2:fc:e5:24:bb:b8:2a:5d:f6:1e:a1:79:
         15:f1:b2:94:6b:af:1c:72:d4:22:2e:3d:9e:7b:a5:6a:bf:de:
         6b:df:86:5c:7f:e6:73:77:0b:1b:04:b4:b2:85:00:e0:7e:38:
         ce:ac:a5:52:7f:52:0a:5e:13:c6:95:c7:75:0a:32:c3:5e:09:
         7d:aa:20:b1:25:c0:10:24:b1:be:7a:1b:75:8d:73:19:ee:0b:
         ab:a3:2c:91:55:d8:67:f6:8b:f5:65:eb:7b:7d:b7:ca:d5:41:
         be:1b:44:28:8e:62:d9:29:6b:96:5f:96:c9:70:05:27:72:f3:
         43:00:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----