Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bc2d2f7-b790-4846-bad9-b0fa648c2e12.roa
File:                     7bc2d2f7-b790-4846-bad9-b0fa648c2e12.roa (raw, json)
Hash identifier:          x3ApgVw0044ta0FRF4xxSK4ysrK9nb93zZs4LKPQrQ8=
Subject key identifier:   AF:3A:4A:6F:BA:DB:E0:1C:FA:6D:58:C1:DD:0A:64:7D:35:25:D6:73
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6FE93E00BC59471AB7A6B2BA07D934DBB0EFE1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bc2d2f7-b790-4846-bad9-b0fa648c2e12.roa
Signing time:             Mon 27 Jan 2025 00:00:00 +0000
ROA not before:           Mon 27 Jan 2025 00:00:00 +0000
ROA not after:            Mon 03 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.214.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e9:3e:00:bc:59:47:1a:b7:a6:b2:ba:07:d9:34:db:b0:ef:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 27 00:00:00 2025 GMT
            Not After : Mar  3 23:59:59 2025 GMT
        Subject: serialNumber=7fb5a9144b2411a6ca4f2eedf0d211f93127b9fd041b53d8dfecf3da08972ab3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:6d:38:83:3d:2d:71:d6:8c:22:54:7b:b3:
                    ef:4e:ef:76:de:29:7e:73:3d:d1:4a:e9:15:3e:df:
                    e1:d5:21:cf:64:46:62:dc:60:a3:c7:b4:c4:9c:51:
                    70:4b:86:59:ad:78:c9:94:d8:50:5a:e3:92:96:98:
                    4f:fb:c7:65:52:7e:ef:0c:42:fb:59:4f:e4:89:8b:
                    4d:74:de:da:18:d9:d7:56:e4:b4:5b:c6:c5:c3:f8:
                    eb:22:8a:fc:b9:34:8e:42:30:e5:83:9d:3f:b4:0b:
                    17:8f:ef:2a:c9:79:e8:85:7f:70:a7:81:ef:2b:9f:
                    e0:ad:d2:75:11:6c:90:ff:23:15:10:03:c2:d3:a4:
                    f1:88:68:1f:2e:d2:5f:cd:62:be:38:17:9d:b1:de:
                    f1:c1:a8:d2:18:49:b1:eb:11:f0:dc:bb:cc:39:80:
                    f2:9a:bf:ec:18:a2:78:2d:1b:fc:f1:86:ec:b8:fd:
                    95:f4:f1:6b:99:06:87:2f:ad:86:01:f3:5f:e4:f9:
                    33:0d:f8:a6:1a:65:cf:47:42:6c:4f:f2:5d:0b:d1:
                    63:89:9d:39:fc:05:e9:2e:06:2f:1b:62:bb:3d:a0:
                    e2:95:ed:3c:38:72:56:3e:67:29:c6:ed:cb:28:b1:
                    da:37:5b:fd:c7:79:06:d1:dc:77:5e:65:95:98:a8:
                    08:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3A:4A:6F:BA:DB:E0:1C:FA:6D:58:C1:DD:0A:64:7D:35:25:D6:73
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bc2d2f7-b790-4846-bad9-b0fa648c2e12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.214.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:5d:84:2b:39:38:7d:82:dc:6d:df:69:68:fc:37:cf:66:4b:
         5e:14:e4:1c:be:61:59:a8:70:34:b9:b3:cf:62:a7:b5:20:aa:
         46:39:e1:fb:0d:8d:88:b1:12:c5:79:a5:49:b7:2c:55:e6:ad:
         1b:df:95:ab:c6:d9:71:19:fe:27:2d:1f:c7:96:0d:eb:79:ff:
         fa:27:fb:b0:d7:f0:28:c3:b0:77:74:0d:fb:b0:40:9e:ba:a4:
         5a:8c:ef:8a:a0:45:eb:2d:1a:71:e6:20:16:c2:e5:fc:df:f8:
         92:9a:15:3d:dc:43:63:b4:24:b4:40:3b:08:87:8e:52:8c:96:
         97:c7:1a:f8:cd:ac:68:77:b0:f9:19:fd:92:91:6a:c8:df:16:
         ad:e2:90:56:ab:ce:3d:1f:71:bc:d6:f5:7b:b9:28:b9:4b:58:
         ea:d1:10:55:d8:4e:83:e9:2e:a4:39:7e:64:5e:61:a2:32:a0:
         cd:a4:25:98:4d:90:99:67:d4:99:b0:60:aa:77:a4:d6:a4:20:
         80:93:8e:de:17:7e:5b:2e:71:0b:98:e5:46:0f:53:b2:8c:63:
         c1:40:9f:dd:3e:bb:db:f5:f5:02:f9:0f:c0:b3:4b:a1:62:68:
         c3:01:5b:30:1a:07:2e:9b:cb:86:37:1b:ee:13:34:07:a1:87:
         25:eb:fa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----