Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f99236be-03a7-4f91-be31-5366989c9d7b.roa
File:                     f99236be-03a7-4f91-be31-5366989c9d7b.roa (raw, json)
Hash identifier:          FYVEoHyiITOPj1QTF5WWbK0X79SUuZNIsYakULgfars=
Subject key identifier:   CB:71:94:3A:4C:B9:B8:33:56:FB:08:D6:2F:48:F9:F1:65:DF:07:AE
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       3F2A504D27442DB4E4767F0D33C8B46DEF2BC81F
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f99236be-03a7-4f91-be31-5366989c9d7b.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        199.255.192.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2a:50:4d:27:44:2d:b4:e4:76:7f:0d:33:c8:b4:6d:ef:2b:c8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=778b6faeeff6f3a8d62b8e59208dc5f5879f22b6fae4f569fa3bb105fc06b02a, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:c9:d9:17:f2:c3:b0:da:f9:3e:26:8a:87:
                    b0:1c:e1:90:e4:8b:05:83:53:e5:b1:32:3a:54:16:
                    ce:a6:ba:d7:ee:d4:94:c4:1a:0b:9f:6f:5f:28:fd:
                    e5:1e:94:d2:8d:c5:97:f3:57:8f:3b:ea:b8:69:8d:
                    03:5d:f7:2b:8e:c4:d8:90:4f:5b:83:c5:bb:40:08:
                    59:42:c4:4c:95:b7:ba:a4:25:7f:39:e4:eb:ce:0f:
                    5b:e7:0f:12:68:f1:f2:31:13:38:c0:08:3a:4c:37:
                    b5:bf:90:e5:69:48:d9:b7:bf:03:1a:29:9c:ba:1b:
                    51:16:57:ab:e7:45:ef:ed:9f:78:fb:f6:02:da:8d:
                    b5:f6:0c:8a:05:43:0e:9e:02:b9:b8:55:64:1d:01:
                    40:4f:54:5a:f2:78:32:77:e5:68:af:03:e8:67:e1:
                    0c:96:0d:6a:c9:ca:6e:40:5d:93:d8:8e:f8:5a:ab:
                    b2:3c:fa:4f:56:ca:c1:c1:bb:c2:23:e0:bc:73:25:
                    ba:d1:a3:cb:5d:57:3a:80:56:15:fe:1f:17:e2:da:
                    b6:ba:41:f9:22:03:05:bf:2f:a7:42:e5:c9:42:53:
                    a6:36:e4:dc:c9:f6:e6:8c:57:08:79:67:b7:9e:a9:
                    48:88:78:0e:bb:10:07:04:20:b1:6b:15:d8:03:c4:
                    0a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:71:94:3A:4C:B9:B8:33:56:FB:08:D6:2F:48:F9:F1:65:DF:07:AE
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f99236be-03a7-4f91-be31-5366989c9d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:e2:f5:b0:29:7d:62:fb:ac:fc:e1:77:fe:ed:31:a7:b0:72:
         8b:1d:4e:eb:89:32:05:f8:10:36:b9:dd:64:c6:94:cd:ab:b5:
         a9:ca:d1:bc:4e:83:da:82:37:de:55:98:55:50:e7:66:3a:ba:
         81:ca:0f:35:60:f4:97:4b:d5:98:41:eb:ce:d9:96:c2:b8:9e:
         69:4f:3a:a2:0d:11:88:4c:24:4c:1c:62:db:12:53:c9:62:78:
         82:0f:41:3a:24:7d:52:80:f8:f5:90:21:b8:a6:3b:4d:35:6b:
         cb:93:a3:07:33:6f:8a:c1:38:99:1c:ec:5e:7d:58:35:62:41:
         c2:07:e9:72:3a:65:ff:d9:a9:68:72:53:b1:3b:26:d1:99:ff:
         7f:5f:7a:aa:30:07:56:13:28:29:7f:0f:37:99:95:4c:4a:88:
         42:0b:11:a5:45:e8:04:07:d3:c7:67:fe:f1:5e:80:34:df:f5:
         3e:7f:46:88:a5:05:90:53:5b:dc:70:10:ef:b8:ca:67:10:dd:
         fe:1f:41:1d:26:3c:f5:1c:a5:7f:e0:b2:e6:dc:9e:76:4f:e0:
         2d:25:d2:a8:07:f2:9d:de:67:5e:78:ee:dc:1e:ac:09:4f:32:
         86:e2:8d:94:ed:7b:c2:2b:9c:85:47:6d:e4:f0:80:6c:02:d7:
         dc:0a:a8:ab
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPypQTSdELbTkdn8NM8i0be8ryB8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NzhiNmZhZWVmZjZmM2E4ZDYyYjhlNTkyMDhkYzVmNTg3
OWYyMmI2ZmFlNGY1NjlmYTNiYjEwNWZjMDZiMDJhMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6SMnZF/LDsNr5PiaKh7Ac4ZDkiwWDU+WxMjpUFs6mutfu
1JTEGgufb18o/eUelNKNxZfzV4876rhpjQNd9yuOxNiQT1uDxbtACFlCxEyVt7qk
JX855OvOD1vnDxJo8fIxEzjACDpMN7W/kOVpSNm3vwMaKZy6G1EWV6vnRe/tn3j7
9gLajbX2DIoFQw6eArm4VWQdAUBPVFryeDJ35WivA+hn4QyWDWrJym5AXZPYjvha
q7I8+k9WysHBu8Ij4LxzJbrRo8tdVzqAVhX+Hxfi2ra6QfkiAwW/L6dC5clCU6Y2
5NzJ9uaMVwh5Z7eeqUiIeA67EAcEILFrFdgDxAorAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUy3GUOky5uDNW+wjWL0j58WXfB64wHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2Y5OTIzNmJlLTAzYTctNGY5MS1iZTMxLTUzNjY5ODljOWQ3Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALH/8AwDQYJKoZIhvcNAQELBQADggEBAIni9bApfWL7rPzhd/7tMaewcosd
TuuJMgX4EDa53WTGlM2rtanK0bxOg9qCN95VmFVQ52Y6uoHKDzVg9JdL1ZhB687Z
lsK4nmlPOqINEYhMJEwcYtsSU8lieIIPQTokfVKA+PWQIbimO001a8uTowczb4rB
OJkc7F59WDViQcIH6XI6Zf/ZqWhyU7E7JtGZ/39feqowB1YTKCl/DzeZlUxKiEIL
EaVF6AQH08dn/vFegDTf9T5/RoilBZBTW9xwEO+4ymcQ3f4fQR0mPPUcpX/gsubc
nnZP4C0l0qgH8p3eZ1547twerAlPMobijZTte8IrnIVHbeTwgGwC19wKqKs=
-----END CERTIFICATE-----