Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/f9f78f45-3ed8-4086-ae0c-fe080ad19cb3.roa
File:                     f9f78f45-3ed8-4086-ae0c-fe080ad19cb3.roa (raw, json)
Hash identifier:          tZvO0vEd91XULMpp07ijZI1cJbG7Jn4BVbUb73vVefY=
Subject key identifier:   FC:9A:50:C1:5B:7D:FA:57:B7:6B:6C:96:CF:E1:DD:B7:DD:91:A9:CF
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       7C8FAE16677AE261F191DC32DE0B5C16985B7BE1
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/f9f78f45-3ed8-4086-ae0c-fe080ad19cb3.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.169.184.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8f:ae:16:67:7a:e2:61:f1:91:dc:32:de:0b:5c:16:98:5b:7b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=040a5a98ee53ee0e7bbf05d2fa8334d421eb8d340c30332c1dc3f0c5b0bf59b4, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:7f:12:72:7a:1a:ac:3d:4f:89:41:e2:2a:
                    51:45:da:a2:24:ea:6f:22:a8:dd:f3:6f:8f:a1:19:
                    4a:10:37:d9:55:3a:44:d6:a5:e8:1e:b8:47:dc:a8:
                    67:8d:6f:f9:05:65:4c:09:35:7d:3b:26:db:a0:ef:
                    79:42:44:03:df:5c:1c:77:90:eb:8c:43:43:b0:d9:
                    f8:f5:6a:a5:7f:e0:4c:8a:8a:24:b8:af:99:9c:8f:
                    16:3c:0d:7f:53:f4:72:ee:f1:4e:39:a0:df:1e:f2:
                    0f:91:ea:3b:50:34:bb:e8:ae:db:ed:4d:ba:15:9c:
                    38:09:20:fb:12:25:ba:0b:08:3e:01:d8:ec:9f:11:
                    64:b2:35:13:3c:ee:d4:1b:9a:5b:61:b7:66:3a:73:
                    09:f1:47:9a:19:06:c8:b0:d2:82:e3:d4:76:b2:65:
                    69:78:9b:e4:4d:65:9d:1a:32:8b:e1:99:da:18:ed:
                    cb:73:44:94:d6:70:c6:7c:1d:86:95:46:3b:d8:14:
                    8d:7e:2c:31:a7:5e:6f:cc:5d:6b:ee:bd:da:d9:4d:
                    38:11:ef:b1:57:8d:08:5b:9a:3d:74:9d:70:99:3a:
                    4e:fe:8c:94:bc:cf:b0:ca:38:d9:83:68:0d:53:07:
                    3d:b7:43:12:ad:64:2b:02:47:df:ea:4f:7c:d2:bc:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9A:50:C1:5B:7D:FA:57:B7:6B:6C:96:CF:E1:DD:B7:DD:91:A9:CF
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/f9f78f45-3ed8-4086-ae0c-fe080ad19cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:a1:f3:5b:f9:be:d3:86:1c:7e:aa:f5:11:11:28:f5:fc:26:
         d8:48:7d:42:9c:be:43:38:9f:23:94:ba:67:e0:59:8b:82:cf:
         3c:54:d7:85:71:e6:8f:65:f9:7f:98:27:42:8a:40:85:47:b2:
         c0:89:17:da:3e:ec:6d:fb:12:70:ae:5e:cb:4a:c9:48:f3:c7:
         e6:68:61:7e:ee:99:75:df:19:9e:9a:5b:ac:72:ce:0e:da:ae:
         25:b1:3a:d5:79:29:2a:ee:f3:e6:81:e1:1a:e4:c0:7f:e6:67:
         b8:1e:ba:77:6f:17:9b:84:1d:57:60:b2:04:ca:5a:fa:af:66:
         a1:86:bf:04:28:7d:17:c2:03:15:c2:c6:d2:c5:66:fd:1c:b5:
         e9:0c:db:ca:01:84:73:31:ce:c4:c4:21:40:6a:02:6e:1c:17:
         b3:4f:ff:a6:93:bf:6e:c4:e0:08:b7:04:60:be:fd:ea:1c:68:
         57:84:2b:29:b0:b5:14:c7:63:de:9d:77:bd:e3:94:8b:27:46:
         dd:3f:26:cd:ba:60:39:49:45:c1:15:28:38:ea:2d:4a:2b:0b:
         d4:ad:e8:40:3a:4c:3e:9d:18:4d:ef:ed:8d:cd:98:09:cd:96:
         76:4c:e0:ec:3e:9a:95:0d:01:df:07:17:40:a3:c1:53:14:33:
         f1:6d:13:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----