Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68acce48-11ac-4777-8714-12fc04398fd3.roa
File:                     68acce48-11ac-4777-8714-12fc04398fd3.roa (raw, json)
Hash identifier:          SaAueciaImq0EWZKRz6xevXQfAnrMYctdB4N+BjF0Q8=
Subject key identifier:   6C:E2:00:C6:F3:DC:92:42:74:A5:B6:B7:31:55:AF:76:81:79:56:C4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       77829F41F559AED91E15899002FB4BFD1BF01BD1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68acce48-11ac-4777-8714-12fc04398fd3.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.248.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:82:9f:41:f5:59:ae:d9:1e:15:89:90:02:fb:4b:fd:1b:f0:1b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=2c81b7053d2d04e5101cfd85f3a77cd25a8cd59aa4943951cc5d08705b1531be, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6e:f3:0f:5a:ce:fb:0e:78:f3:05:82:be:e6:
                    3f:0b:d3:5e:e8:4d:50:c2:94:a8:3b:f5:8f:83:e2:
                    e3:16:24:86:5b:0b:7d:7f:19:51:4e:fd:93:35:0b:
                    92:d5:d0:7e:e3:c9:bd:96:1d:18:87:20:e6:cc:d6:
                    fc:79:93:b3:5d:63:9c:ed:d0:79:45:de:31:8a:6a:
                    21:e2:dd:d5:18:e2:8b:6e:ec:e2:03:c9:1b:1d:66:
                    1d:b1:f5:c7:7c:d8:a1:19:fc:65:7e:7a:e2:62:14:
                    3d:77:1d:81:20:3f:f8:0c:e1:90:d8:f8:8d:15:8f:
                    e7:06:8d:07:90:fe:60:59:9a:23:d4:6c:5c:03:12:
                    ef:c2:8b:36:40:3f:71:ee:87:b1:bc:a8:bf:5f:a1:
                    a5:93:8a:27:7a:ba:27:6c:07:44:8d:05:52:04:74:
                    51:9b:73:87:89:0d:ab:c9:81:a5:b3:cc:e9:6e:b6:
                    7d:b3:60:6b:c4:48:50:fd:02:08:17:b5:f3:0a:8e:
                    44:20:86:eb:65:d0:76:3b:67:7a:64:88:5b:3a:69:
                    cc:86:62:40:5b:f9:40:3a:73:f2:c7:a3:6c:35:74:
                    7e:86:a8:d1:74:8a:b1:e6:3f:6a:a8:a3:fa:9e:a9:
                    02:7c:9f:71:22:a6:2f:f5:18:5b:98:c2:c7:b5:9b:
                    b2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E2:00:C6:F3:DC:92:42:74:A5:B6:B7:31:55:AF:76:81:79:56:C4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68acce48-11ac-4777-8714-12fc04398fd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.248.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         50:07:d8:9e:cd:fb:29:2c:24:09:90:b9:45:7d:5d:2d:9b:42:
         3c:e1:df:22:33:8f:73:f0:ab:2c:85:ce:fd:87:f4:fb:ca:39:
         e1:2d:b9:d6:6e:a9:90:a6:ad:cf:b4:e6:ca:03:d5:40:e1:11:
         4f:25:0a:ea:ed:60:b4:15:d8:93:73:9f:77:b6:18:be:19:18:
         42:51:d7:3c:d7:55:c2:9b:7a:83:09:45:a8:75:79:c3:3e:73:
         ca:de:0d:1a:a1:6e:64:90:93:13:4e:6f:8c:dd:94:9d:0b:d1:
         bb:a9:28:da:ba:27:97:6d:f5:c9:3f:66:08:70:60:ed:5a:5f:
         c1:f5:4f:6b:94:9b:16:4b:38:ed:f8:d6:5b:b1:81:17:cb:f2:
         87:a2:c1:01:81:f7:4d:11:c0:31:a1:0c:5c:82:ce:cf:ba:b2:
         e9:1a:c2:d4:e3:2d:9f:cb:b2:ee:5e:ac:89:5d:4d:88:25:23:
         cd:4c:3d:c6:73:e6:f2:f4:77:72:4e:dd:89:9d:40:4b:e1:81:
         53:67:d9:f5:d3:8a:f9:dc:34:e3:37:fb:f7:34:06:31:30:1b:
         b8:29:36:b8:07:a4:6d:5a:22:5e:7d:e6:1f:68:ab:2b:91:6d:
         bb:17:0d:75:29:af:1c:c6:4c:dd:f1:0e:c7:b8:7a:22:35:ee:
         1b:0d:8e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----