Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d2d4fc1-b25b-4a21-9546-ea0aa37cd60e.roa
File:                     1d2d4fc1-b25b-4a21-9546-ea0aa37cd60e.roa (raw, json)
Hash identifier:          2wuUdk8tAV2Q9q1NbHNnrL4By0xMaL4dzoJDyQ/9qow=
Subject key identifier:   FA:B3:11:56:93:81:E9:AB:8F:C5:C5:91:FD:1E:21:9D:3E:06:89:14
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       15A4D5F688EA2394E0EE7B6C7E0B2D9B083C54
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d2d4fc1-b25b-4a21-9546-ea0aa37cd60e.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.209.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a4:d5:f6:88:ea:23:94:e0:ee:7b:6c:7e:0b:2d:9b:08:3c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=4ab6b331175fdb73a8fb573f5c33821f03e9bbd00f2ee5d05a14170364e6dd98, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:65:0f:8c:ed:90:76:6d:a3:7a:3f:22:8f:
                    6a:20:09:07:96:ee:67:2b:f0:8f:a9:1b:4a:a7:d8:
                    3a:93:94:81:e2:d1:25:12:ea:c8:b6:b9:eb:68:5d:
                    60:20:41:b1:42:ab:3a:8f:89:ad:f8:0c:57:74:a5:
                    03:e1:d7:99:b9:91:35:1e:f7:88:1f:68:cb:e6:7f:
                    21:5c:95:03:15:ee:58:9a:3e:33:5f:5d:c7:ea:6e:
                    a6:fe:01:01:db:a6:ce:c6:98:73:f3:51:11:63:83:
                    7a:94:e1:52:27:0c:0d:c4:9c:d5:38:54:71:9e:1b:
                    7c:1b:7f:7b:af:27:8e:f8:3d:f9:53:d0:ad:9c:70:
                    ae:85:27:e3:af:02:67:c2:e6:03:a0:3f:26:72:d0:
                    1d:f4:26:64:54:89:dc:15:62:b9:cd:99:1d:1c:14:
                    0a:6f:9e:83:fe:d3:05:68:ea:a1:79:4a:88:6a:ec:
                    cd:56:f7:6f:5c:dc:88:35:e8:ca:cb:05:83:43:fb:
                    67:7f:68:4d:4d:9b:a7:c3:34:12:ea:15:a7:75:d3:
                    fd:5e:c5:be:04:1c:57:24:83:5e:33:c2:23:bd:c5:
                    0d:8f:eb:20:fc:9c:4f:c4:19:d6:6f:80:2c:88:d9:
                    02:bb:6e:fd:d3:9a:3e:35:9c:dc:73:e6:73:e3:b1:
                    b3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B3:11:56:93:81:E9:AB:8F:C5:C5:91:FD:1E:21:9D:3E:06:89:14
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d2d4fc1-b25b-4a21-9546-ea0aa37cd60e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.209.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1c:57:78:56:11:bf:d8:82:79:20:32:0d:93:65:73:7d:ba:8b:
         39:3b:d4:da:f3:62:52:af:33:47:2a:92:1b:8e:fa:c1:ec:58:
         0d:c2:8f:3c:90:ee:6e:07:04:77:0c:b0:6d:ee:cb:6b:0e:cf:
         80:d2:27:14:f3:1f:3b:c3:af:11:3a:7c:81:cb:f8:da:0f:31:
         6d:d3:77:57:8f:4e:15:98:15:c8:08:71:64:f7:e2:15:da:80:
         43:57:4c:99:33:b1:99:a2:a5:a2:15:0a:17:81:fb:0f:a6:f5:
         e8:97:e9:60:5c:24:42:fe:c6:55:64:db:11:f4:74:e1:3a:88:
         0f:44:4b:85:72:4d:c6:fc:53:72:7e:fd:48:f4:e7:ad:26:6c:
         76:36:2f:aa:c0:9f:6e:aa:dc:39:da:5b:8b:86:a2:56:e8:3a:
         11:60:8d:85:11:43:e0:b5:40:d8:66:97:81:ee:6e:cb:4d:6f:
         91:e3:93:fc:93:0a:c5:94:fe:ce:2d:25:f5:b8:d3:c4:f4:ba:
         2b:57:3e:72:02:47:e7:19:a7:bb:9f:77:28:82:99:e1:7e:ab:
         0e:07:10:19:a3:cf:a8:41:1d:ad:dd:aa:95:56:74:a3:ca:3a:
         4a:c1:7e:00:9d:87:ed:43:dc:53:61:4c:9b:36:df:3b:2a:1f:
         31:bd:92:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----