Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67298f11-834f-420f-8b64-b26bdf3e9827.roa
File:                     67298f11-834f-420f-8b64-b26bdf3e9827.roa (raw, json)
Hash identifier:          v7XU/6X1ZVxdwV+vq4yYfJaBhTmLZ4Xkz/iUq4/EMIk=
Subject key identifier:   B1:94:4C:B0:42:C5:B1:55:E8:A8:36:EA:2D:A0:E6:C1:25:C1:BB:15
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       030225B3D063CD378036B7EF78DD44FEB17E96D2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67298f11-834f-420f-8b64-b26bdf3e9827.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.249.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:02:25:b3:d0:63:cd:37:80:36:b7:ef:78:dd:44:fe:b1:7e:96:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=125b006b955861e05c211eb935f2379034aced4421bd9ae6cd36fea92225cdb2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:a8:a8:32:d7:3e:b1:ba:a9:b9:7b:48:ab:
                    b8:8c:45:b1:97:74:f5:dc:ea:10:b8:d6:dc:1c:d4:
                    35:25:cc:d2:59:5b:1f:9f:c6:63:58:60:e9:55:da:
                    72:9b:ec:f4:e5:04:b8:02:5c:74:04:9a:6e:67:03:
                    f3:f7:e9:5b:7a:31:d0:6e:ee:03:9f:29:5d:12:8a:
                    3c:2a:53:41:1c:33:dd:49:c8:26:f2:b2:1a:ed:ca:
                    87:65:b9:ee:e5:82:71:24:37:c8:8a:50:8a:81:84:
                    d9:01:2f:76:6f:fb:c7:21:b3:cf:60:f9:43:e5:0a:
                    1f:f8:6c:bb:b2:b6:9b:61:5d:ae:9e:5a:ff:41:07:
                    0a:78:65:62:fd:a8:b5:f8:4d:a5:db:a6:8f:84:f0:
                    aa:12:3a:d8:e9:8d:f9:41:e1:e0:35:b5:68:59:9f:
                    14:16:de:94:d7:66:24:22:76:a6:2b:20:c3:8f:44:
                    d2:d7:9c:20:33:29:98:ff:05:75:74:a5:5f:79:be:
                    c0:50:e0:23:7d:33:ee:94:2c:ac:30:ba:e3:2c:a8:
                    c6:55:9c:46:e6:d5:d3:c2:63:36:81:37:d9:e4:20:
                    f7:4e:66:af:6b:09:12:31:77:44:ab:99:6e:91:0c:
                    39:00:7d:86:94:79:5a:e4:86:ba:84:f4:5c:cd:d6:
                    e3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:94:4C:B0:42:C5:B1:55:E8:A8:36:EA:2D:A0:E6:C1:25:C1:BB:15
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67298f11-834f-420f-8b64-b26bdf3e9827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.249.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4d:d2:ac:0f:a2:1e:d8:47:b8:23:9e:3c:a0:2c:f1:44:2f:bd:
         64:77:6c:72:37:40:d4:b3:e5:29:f3:d3:5b:28:cd:f3:f8:93:
         22:f5:16:f8:55:c9:8e:1b:f6:5d:fc:d8:cd:59:23:a6:07:5f:
         b5:1c:22:3b:fa:ac:2a:df:64:bd:eb:2d:aa:4c:b5:6d:3d:5a:
         1b:b6:3c:46:f5:cb:29:cf:8e:6d:e0:5f:26:09:e5:ed:59:07:
         81:fa:4e:46:c2:06:3e:3c:f0:86:4d:13:12:44:c3:b3:8d:e6:
         6e:23:23:1f:6f:68:bc:ea:86:dd:8f:1b:de:b4:f6:ed:bf:24:
         96:4b:cc:8b:a7:b8:b7:f8:ca:a4:db:e4:67:1d:f5:f6:e1:34:
         8a:ea:85:6e:4a:ce:76:cd:eb:a9:9d:40:03:c5:60:4b:06:bf:
         ad:3c:5d:19:69:90:69:9f:c5:95:7c:2f:d1:e5:0d:e9:fa:4f:
         a8:66:67:99:09:46:81:b0:a4:bc:c9:a5:74:3e:65:c5:4c:89:
         38:e4:08:9e:64:52:47:ec:64:9b:46:38:f6:5c:c1:8d:4f:1f:
         0b:ed:81:af:6b:ce:86:3d:a3:af:dc:56:8d:3b:bc:0e:23:6c:
         2d:f2:24:35:95:a3:8b:38:a2:64:8d:67:5d:e6:07:e4:24:26:
         2e:9f:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----