Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/714c8d7e-498f-4004-afef-6fb478ee04d1.roa
File:                     714c8d7e-498f-4004-afef-6fb478ee04d1.roa (raw, json)
Hash identifier:          XIb8DZQXMD9Wda4ZnXjG53h+Y0cS7qtr6Gs8VcZe4vw=
Subject key identifier:   C2:FD:EE:8D:73:35:40:D2:C4:53:7C:67:61:4D:22:FB:62:9C:B0:54
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       59B5919DD55E55E5A03DF3E7E9D6CD71B81A1934
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/714c8d7e-498f-4004-afef-6fb478ee04d1.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.235.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b5:91:9d:d5:5e:55:e5:a0:3d:f3:e7:e9:d6:cd:71:b8:1a:19:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=dd0b958953f76df0e3bd88a93404a72219d0b2a79b4cc38d3221d58125d25c9d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:dd:40:b8:11:95:a7:3b:1f:df:6f:30:b6:
                    34:5e:20:8d:13:00:06:e8:39:72:69:1d:8a:14:cd:
                    74:d4:c7:81:8b:d1:f1:f3:c3:a1:e7:9d:87:ee:ed:
                    c6:d5:9c:09:5e:1c:0c:e2:47:c6:18:24:1c:e4:bb:
                    c1:df:91:89:71:99:3a:90:88:a5:13:5c:11:13:1b:
                    ae:86:d1:9f:c5:e0:f5:55:d0:f4:83:6b:41:c4:e0:
                    d0:83:6c:5d:62:ef:ef:e9:c2:ee:f6:1e:ed:bc:cb:
                    77:30:cd:e6:41:99:36:49:14:0b:0d:89:b9:5f:7c:
                    9c:29:27:07:65:9e:ba:9f:12:3e:0f:fb:f0:b3:2e:
                    b0:80:51:67:10:1f:43:dc:d8:c6:67:dc:00:b4:3e:
                    0d:01:2c:ed:86:38:a5:5e:49:db:03:1e:2f:c6:8f:
                    e1:07:81:c1:d2:ce:63:e6:bb:a4:dd:92:f2:ca:c3:
                    ba:7a:73:7d:63:48:1c:63:66:bd:f2:3f:40:e0:59:
                    9e:c2:a0:3c:66:cf:0e:73:75:71:68:d0:83:f5:db:
                    f7:59:62:40:8d:da:e3:97:75:2a:4e:aa:ed:56:07:
                    b5:2d:00:07:79:89:97:db:fb:6f:91:7f:3a:12:d2:
                    c8:b4:c9:07:33:62:36:fa:18:a9:8c:cd:b2:78:a7:
                    c9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FD:EE:8D:73:35:40:D2:C4:53:7C:67:61:4D:22:FB:62:9C:B0:54
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/714c8d7e-498f-4004-afef-6fb478ee04d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.235.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5e:fc:fb:27:c3:a6:f9:31:2b:40:32:cc:e7:cc:c3:be:d4:ca:
         85:ce:f2:0f:98:40:c5:09:f1:af:a3:7a:76:32:1b:62:8a:a6:
         a4:3f:42:da:e0:36:ae:1b:d2:91:c1:fe:b3:ff:94:42:47:51:
         6f:21:34:7d:26:11:20:41:ff:d8:33:82:1e:4d:5b:25:9b:c1:
         92:f9:49:4e:08:02:37:f6:12:ba:c2:e2:92:f9:23:6c:51:c3:
         68:b8:7c:be:4c:5f:95:4e:8e:0e:a3:02:d0:55:00:ee:34:f0:
         f5:84:73:32:73:45:86:0f:1a:8c:19:3a:19:0d:64:9d:55:34:
         d3:b0:26:d2:90:16:a1:8e:56:7c:a9:e3:e6:a7:fc:99:c2:e8:
         4e:00:f2:4d:f1:d8:17:ba:bf:06:06:89:fd:b1:5a:14:2f:a8:
         6f:23:16:26:20:3c:5d:79:63:d4:50:32:cf:eb:d0:51:c3:dc:
         bc:09:7b:54:a5:ce:61:67:69:4e:da:20:5f:fc:64:32:b9:88:
         73:27:c9:fa:25:c2:ac:92:51:56:d0:c8:6a:0f:d8:64:d3:57:
         f8:8a:ad:7a:0b:84:5b:0e:2b:ee:27:1f:c8:44:09:0c:5c:e0:
         b2:4b:4a:0a:f0:c2:81:fa:3f:24:29:fe:2e:15:0a:ed:cc:c8:
         fc:35:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----