Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6adc45b1-c0c4-4585-a673-38d4091fc6be.roa
File:                     6adc45b1-c0c4-4585-a673-38d4091fc6be.roa (raw, json)
Hash identifier:          gXnreSitTExC4gO3h52G+8ma8sjJPQYDD7KPDrl65Mw=
Subject key identifier:   CF:0C:07:85:36:65:00:2E:4F:C8:B4:8E:20:FA:01:5A:15:D2:6E:96
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       039F98119B5B0CFC8014760A16C24D278F5B4541
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6adc45b1-c0c4-4585-a673-38d4091fc6be.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.241.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9f:98:11:9b:5b:0c:fc:80:14:76:0a:16:c2:4d:27:8f:5b:45:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=677371b64daa06f327d59e19bcfcf0bc291f90b6c497fbc8fcb082ceb4799bc3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:52:fe:22:54:bd:eb:a0:c3:ce:1a:32:33:
                    fc:35:cb:9b:58:17:43:4e:d1:76:17:42:17:5c:ba:
                    62:9c:de:a4:34:a1:5c:9d:35:a5:49:5d:0d:18:b9:
                    b6:3d:ae:7c:d0:b3:9e:14:56:bd:49:2e:72:05:cb:
                    f2:d5:56:48:00:ae:bd:8b:8c:d5:d7:ae:2c:56:b4:
                    f8:d6:1b:66:ab:01:c7:3b:40:93:bf:73:f7:49:be:
                    ec:11:e3:68:e3:e8:aa:82:8d:4d:e4:d6:8c:17:83:
                    1d:2c:f8:31:d6:e0:32:21:fe:3c:ba:19:1b:48:15:
                    08:d2:b0:8c:26:c1:00:90:45:5e:71:7e:a0:c3:0f:
                    71:14:52:44:f2:8b:e8:6d:aa:8d:a9:8c:db:b7:d5:
                    f5:4d:4c:90:80:fe:a3:a7:1e:8b:0c:31:5c:08:36:
                    92:bd:9a:ed:93:e7:94:60:35:b2:b0:17:11:bf:8e:
                    e3:23:71:8c:60:b7:c6:92:ac:7d:6a:53:24:d7:fa:
                    61:a1:17:9a:ba:24:27:0a:8f:c0:28:7d:86:b1:a5:
                    54:6d:49:6c:b8:4e:78:74:34:d4:79:3a:9a:2e:80:
                    d7:38:f9:e4:69:88:28:df:71:40:f5:e4:e8:bd:36:
                    87:18:a3:28:04:9c:80:92:41:38:17:41:65:7b:fd:
                    e4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0C:07:85:36:65:00:2E:4F:C8:B4:8E:20:FA:01:5A:15:D2:6E:96
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6adc45b1-c0c4-4585-a673-38d4091fc6be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.241.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b3:b7:70:c1:20:ae:5d:33:73:ca:6a:3b:2b:b5:73:a2:fd:74:
         ba:fa:ab:f1:7a:f7:85:dc:07:63:d5:d0:63:33:0c:f2:e4:8f:
         9c:c6:7b:06:63:76:14:1a:9d:6d:51:b1:44:49:b0:5e:b9:20:
         19:95:2d:d8:18:bc:f2:19:61:8c:01:ce:7a:5d:80:71:4e:c8:
         de:2b:ec:30:66:f1:5c:b8:b4:c5:a3:1b:7a:5b:b0:86:7e:4c:
         4a:02:28:58:e9:ce:3d:a3:ab:0c:12:0f:4a:2d:22:f4:f8:60:
         78:b1:4a:21:27:23:04:78:45:bb:64:3b:28:3e:a7:4d:bc:ab:
         51:95:8f:37:f1:b4:48:ba:a1:3a:25:71:70:a3:6a:a6:26:ee:
         2a:24:55:29:b7:86:b8:d8:40:b2:0a:95:81:d9:ae:0b:f6:8f:
         09:f4:3c:89:f9:df:25:2f:be:ce:68:09:4a:f8:3b:41:3b:74:
         e6:10:34:b1:d9:20:91:aa:d2:36:d1:fc:e9:fa:d8:2e:cc:c1:
         3a:0b:af:56:53:74:3f:f0:b3:19:73:f3:1d:fc:e3:c8:89:62:
         21:bc:c5:3c:d9:59:f6:fc:04:3b:ce:00:9e:db:ef:d0:7b:6f:
         3d:c8:08:a0:f6:f4:50:be:4a:6b:df:be:ca:ca:44:fd:df:b6:
         8b:36:c9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----