Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f1e8133-d330-48cd-b352-c365c49046c5.roa
File:                     8f1e8133-d330-48cd-b352-c365c49046c5.roa (raw, json)
Hash identifier:          v6pMBRz+a5HKZjPQA6m0KG5jUx3N+1OE62iXauQZFjA=
Subject key identifier:   C2:1F:F8:EB:6C:E4:22:74:A1:75:A1:81:3C:89:2D:0E:04:78:7E:7E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       642CF2DB5C9F3768149EEF106E43AF41ED98A537
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f1e8133-d330-48cd-b352-c365c49046c5.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.251.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2c:f2:db:5c:9f:37:68:14:9e:ef:10:6e:43:af:41:ed:98:a5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=b07c050cc6b9f7f6fd7f09b1377045931c3f44fd706a0319b971d6537d0aa6c8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:83:41:f4:eb:aa:7e:f9:34:2e:7d:d6:8a:fc:
                    d8:b4:44:45:d6:45:39:7f:2e:5a:44:a3:59:ee:d7:
                    2d:5c:cd:46:dc:51:5c:fa:3c:5e:e5:da:58:a3:b0:
                    3e:ab:02:ac:cb:14:b1:2b:dd:85:07:28:fd:b7:b8:
                    1d:e3:19:35:a4:aa:3e:82:2d:b0:34:f0:9c:ea:0a:
                    ea:07:1c:fa:8d:47:53:ce:d7:92:ef:8d:dd:4b:4a:
                    d1:72:20:6f:39:1b:90:83:d1:6e:f8:4c:19:8c:08:
                    4a:af:51:04:82:49:b4:11:92:3c:35:d4:d4:f6:5b:
                    55:e8:d6:e7:38:25:9d:9b:47:f1:b2:bc:35:6b:5c:
                    d5:6d:29:8b:a0:2e:bb:df:b7:ee:a4:55:56:ce:52:
                    16:b3:fd:11:05:eb:81:8a:46:f7:dc:7f:20:db:15:
                    48:a2:cf:a7:5e:0f:22:49:f4:6d:e4:77:44:b2:79:
                    a3:2c:dd:eb:b4:e6:a3:3f:f1:09:21:d4:08:9e:5a:
                    08:a9:3e:f5:d1:6a:ae:6f:ec:c4:84:a2:dd:db:f7:
                    46:10:7f:c3:8d:df:3f:56:56:ab:70:e5:e5:96:ba:
                    53:04:b5:34:f5:9a:54:06:37:82:77:70:fd:f4:4c:
                    dc:67:51:72:59:43:9e:3c:6c:b3:f0:e6:43:00:71:
                    1b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1F:F8:EB:6C:E4:22:74:A1:75:A1:81:3C:89:2D:0E:04:78:7E:7E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f1e8133-d330-48cd-b352-c365c49046c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.251.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:e0:cb:81:55:07:35:55:70:e7:ee:53:67:9a:4d:be:e9:8b:
         70:23:41:20:ae:32:b0:80:c8:b3:c1:6d:1d:d9:8f:34:6b:40:
         e4:9e:57:e7:d0:37:95:99:85:ac:d3:ff:e6:54:20:d0:6d:e5:
         71:aa:e0:77:cd:89:3e:59:35:b2:5e:2b:e0:1c:5d:e5:1f:af:
         b6:8f:f3:c9:52:b7:4e:41:09:7a:75:c7:fa:52:cb:a3:cd:2b:
         d7:3d:90:e5:a9:b9:54:d7:16:b2:0d:a8:c0:82:20:bc:c8:7d:
         6c:9f:f6:e8:df:af:ee:4d:b5:12:18:17:9b:35:a5:f8:96:41:
         73:e3:f9:29:b0:06:62:85:8b:cd:9c:13:d8:b1:59:eb:49:6f:
         69:82:b1:7e:4f:08:6e:dc:33:99:00:ca:1d:04:77:3f:fe:42:
         ee:af:23:c3:b0:67:dc:e1:cd:87:9c:a9:e4:51:f6:89:3d:4c:
         a1:31:c6:29:e0:43:05:1f:b5:5f:d8:19:c5:44:0a:fd:f5:68:
         79:6f:0b:d3:ed:c6:8d:e9:36:5c:7b:16:b6:89:c6:7b:72:04:
         55:1c:cb:c6:3f:2a:63:af:dd:14:cd:4a:ae:7f:f9:c4:21:cb:
         bc:7e:cf:bb:38:fd:d1:be:64:52:86:02:5d:59:d4:81:90:82:
         7b:f0:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----