Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0caa2b45-bcfe-4826-bf5e-f4d106e4a41e.roa
File:                     0caa2b45-bcfe-4826-bf5e-f4d106e4a41e.roa (raw, json)
Hash identifier:          Y7J+1DJJeepZgypyt1asKxmXuKAyiOfN4HXeqlOrz4Q=
Subject key identifier:   30:4C:DF:6B:FA:42:7F:C2:E4:3C:42:85:C1:1F:B2:E1:D2:2C:F0:A6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       430CD3E246F86EAC05F80B2356640198BD35BB77
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0caa2b45-bcfe-4826-bf5e-f4d106e4a41e.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.119.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0c:d3:e2:46:f8:6e:ac:05:f8:0b:23:56:64:01:98:bd:35:bb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=7151c260e92733c275b40e6e5b7fb9978087dbd41d03781e325fdf24313673e9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:0d:a4:a4:a9:09:07:aa:39:e7:b3:c5:47:
                    cf:21:ed:d7:b2:2e:ef:ec:0d:31:fb:d8:af:d9:9d:
                    f8:36:89:01:20:9a:35:7b:0c:8a:47:05:40:95:cf:
                    0e:2f:a3:5e:68:d2:81:a5:82:06:da:81:f5:1e:1a:
                    9f:9c:83:98:e9:2c:13:40:3d:26:61:96:58:3c:ef:
                    d4:06:37:b9:ad:f0:bb:79:80:4a:98:77:f5:bc:ee:
                    d1:81:ba:6e:8e:71:ee:71:4f:dd:5e:99:43:96:60:
                    4c:0a:04:b5:f0:05:17:a8:e0:26:67:10:e6:55:ac:
                    3d:c1:68:f6:a1:a6:06:47:5d:a0:e1:57:48:22:02:
                    7d:0a:dc:98:d9:0c:a6:dc:21:1f:9d:32:f4:ef:f4:
                    d6:d3:3b:08:f0:08:c7:ed:9e:f7:5c:01:33:de:ce:
                    f0:04:3c:ef:74:0f:30:99:72:0b:74:49:bf:88:b7:
                    4c:b6:51:41:d6:aa:f9:a4:2f:42:14:fa:3f:33:51:
                    1f:7f:f1:38:48:f8:f6:ad:2d:60:b8:ca:18:8e:32:
                    db:d8:b8:ae:5b:b2:4a:cb:38:87:28:29:fc:e0:08:
                    59:c4:11:f6:b0:62:67:13:68:75:95:5d:fc:dd:24:
                    a7:3c:e2:f4:35:d3:9f:39:4a:97:57:b9:6f:82:ff:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4C:DF:6B:FA:42:7F:C2:E4:3C:42:85:C1:1F:B2:E1:D2:2C:F0:A6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0caa2b45-bcfe-4826-bf5e-f4d106e4a41e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:d2:4f:d4:45:6f:e8:c0:b8:e8:14:32:e2:63:ba:d8:c8:5f:
         1c:7a:49:a1:f8:71:d9:4c:38:d8:84:54:37:7b:ea:0c:df:7b:
         92:1e:53:b8:c0:3d:62:e7:77:a2:db:44:c7:7b:e6:34:e8:53:
         22:5c:3a:0b:a1:d9:42:79:94:6d:05:43:fa:be:12:4f:04:6a:
         9d:00:26:9c:4f:51:68:61:b6:28:aa:03:40:94:10:97:da:5f:
         23:6c:01:f2:58:37:b8:22:b0:54:9a:59:2c:5e:4a:b8:47:3e:
         3a:56:42:eb:c0:38:25:4d:7e:da:6f:26:e6:a2:d0:b1:e1:db:
         8e:f0:8b:3a:b2:2a:aa:4e:a2:79:6c:c8:95:7e:0d:d9:c9:dc:
         4b:54:5d:5c:56:71:06:43:9a:89:8f:68:b5:87:f1:4e:6f:b5:
         72:f3:26:de:00:27:71:63:13:89:27:be:c1:b0:e0:36:e7:c3:
         1b:4c:c8:b7:93:1b:2e:a8:32:61:65:cd:38:f5:3f:93:fc:01:
         91:60:71:41:ec:95:7d:7e:f0:53:ed:d5:e2:d0:ce:a5:41:06:
         1f:69:83:c8:cc:e4:12:a4:87:ab:bb:fa:d1:b7:4d:f1:0e:21:
         78:9e:e8:dd:1b:3e:16:42:cb:1d:60:b6:28:cc:fd:a0:74:d6:
         16:3f:d7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----