Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/730c30f4-b9c5-4357-8ec7-06334f835343.roa
File:                     730c30f4-b9c5-4357-8ec7-06334f835343.roa (raw, json)
Hash identifier:          n/6TnRrJWtxL8eca+rh8XiA0VgkvtdXhqkwBc5e60Z4=
Subject key identifier:   5F:17:D9:3D:F8:F4:E5:FA:28:3E:DA:1F:B0:BD:DB:CC:F2:70:E6:57
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       089A611750F0DB2E2505B8BF3C15C98A82D69A78
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/730c30f4-b9c5-4357-8ec7-06334f835343.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.134.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9a:61:17:50:f0:db:2e:25:05:b8:bf:3c:15:c9:8a:82:d6:9a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=a072f709b443fded1ca5237a246a4bc4d3fdc18645521c248c6c59e86ebcfd58, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:de:ef:6b:49:06:e1:27:45:08:64:17:91:ed:
                    87:3d:62:60:13:ed:6a:30:9b:f6:38:04:bf:2e:e0:
                    1d:5c:bb:e9:93:b3:38:10:f3:a7:e9:3d:76:84:5c:
                    67:69:05:0b:23:3b:3b:ec:db:ee:24:e1:37:c7:66:
                    7f:dd:3d:e8:b5:f8:6b:18:a7:6f:fc:25:61:4c:f7:
                    04:67:93:e3:ae:1d:2b:c8:00:2d:95:c6:6c:5e:35:
                    c0:f2:75:e4:fc:09:96:da:c7:12:a4:60:d2:05:b0:
                    f9:73:cf:a0:8d:ae:e7:6f:20:96:72:c1:65:b8:f7:
                    32:e1:53:9e:71:f3:68:00:9e:c0:01:e5:e0:29:8b:
                    a9:b8:e7:7b:ab:7a:38:33:3c:a3:43:8e:ac:50:a0:
                    6f:a1:c1:42:e5:b9:e6:b8:52:04:d0:d4:25:d0:08:
                    95:3e:44:51:e2:18:72:54:15:1f:97:38:8b:58:31:
                    26:a6:91:a0:03:a5:e6:6d:8b:02:50:0c:a7:17:67:
                    33:99:b0:88:81:ea:c2:2f:2e:94:5a:9e:b0:bb:f0:
                    71:d1:81:51:e1:04:6b:e7:fb:cc:df:ad:94:c6:69:
                    44:57:2f:6d:72:c5:29:b3:fd:bb:0a:4f:78:60:21:
                    46:19:0e:f7:5e:e9:c7:93:3f:8a:e1:03:ed:24:33:
                    72:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:17:D9:3D:F8:F4:E5:FA:28:3E:DA:1F:B0:BD:DB:CC:F2:70:E6:57
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/730c30f4-b9c5-4357-8ec7-06334f835343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ad:8b:eb:1e:4d:54:68:09:4a:b7:a6:d3:82:80:ce:7c:52:44:
         c3:5c:77:95:48:ef:bc:e4:54:14:c9:c1:a8:da:0f:20:1c:d2:
         0c:11:b4:62:ee:ee:5b:08:c7:9d:5a:93:0c:77:e5:49:9a:b6:
         ec:42:92:f6:ec:58:5d:9f:e8:b8:74:b4:2a:35:61:9d:86:56:
         3a:7a:c1:24:81:02:91:62:12:38:46:d7:cd:c9:9e:0f:90:c4:
         ee:3b:5d:3b:eb:bc:5a:98:b2:bf:c6:8a:1f:f0:e9:07:88:d9:
         ac:a4:56:e6:2a:b7:b6:2a:65:22:c4:40:55:c2:f4:0c:50:0b:
         d2:fc:80:88:44:18:9e:1d:2d:5a:7c:eb:cf:77:d8:c3:5c:f5:
         99:f2:ae:cf:93:4a:42:56:e2:07:8b:a4:0d:95:16:f8:0f:30:
         e8:3b:52:fc:84:8e:c1:e2:73:7a:a0:c0:16:72:d5:9d:e5:4f:
         07:c7:22:45:0e:b4:39:d0:16:a3:a6:6d:43:cf:95:e7:4b:47:
         3f:f8:e6:a6:73:5b:df:eb:fc:70:fd:28:e8:fb:6b:a0:1f:ff:
         01:bf:db:f4:a0:0e:ce:8f:a5:dd:11:e7:cc:19:42:93:a3:ab:
         c2:00:66:c6:9e:03:60:18:fa:00:16:e8:e4:73:ef:fb:bc:4a:
         e4:ad:de:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----