Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98317245-57ab-4ea3-a570-b486f6fe66d9.roa
File:                     98317245-57ab-4ea3-a570-b486f6fe66d9.roa (raw, json)
Hash identifier:          Qngo/LzRI43ELRGKHxv8SlqWNf3I3qaSXD2gWeKNogM=
Subject key identifier:   CE:81:20:87:D1:99:A5:99:C1:87:27:52:D7:91:56:D8:7A:09:9E:14
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5E96167528C8054DB0A4C55C6D0D01BADD099003
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98317245-57ab-4ea3-a570-b486f6fe66d9.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.235.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:96:16:75:28:c8:05:4d:b0:a4:c5:5c:6d:0d:01:ba:dd:09:90:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=0ee0dc788f0c5ebb1b47b12dfc54aea78f054fb47b5e0e501163d2068edce426, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:5b:85:f3:01:49:7f:cc:60:74:f6:65:ad:
                    f9:4b:73:d0:17:b3:95:ab:4f:bc:aa:0b:f8:e6:46:
                    d4:28:b3:0d:c1:b6:c9:b0:9e:1a:61:60:b4:5c:f1:
                    9f:29:da:80:56:31:b6:01:16:1f:5e:14:d1:3b:31:
                    6c:f4:c6:03:07:3b:2b:7e:e2:f8:d0:03:21:26:3e:
                    6e:5e:2e:cf:34:29:94:49:37:02:37:77:ec:a9:9b:
                    bf:96:7e:b5:31:e0:0c:e4:3a:de:e3:c9:20:5e:ce:
                    e4:b2:aa:6e:bc:4b:dd:8d:87:d1:6e:5d:52:4b:4d:
                    e0:a2:3f:6b:b7:75:c8:f5:be:42:32:96:33:74:36:
                    1f:ca:b3:f3:79:19:c2:98:f9:90:73:48:62:34:e9:
                    51:52:96:9e:2d:c1:97:5f:db:ec:c4:66:92:8a:bf:
                    ac:61:9b:f4:4c:8f:c2:a0:73:bd:58:94:ca:e4:3a:
                    15:bd:8f:99:f1:62:0e:3c:3f:03:c3:7e:a9:45:ab:
                    3c:58:77:65:51:d3:83:57:d8:db:70:bb:5e:58:24:
                    1c:dd:11:a7:32:79:e3:77:a0:ad:12:f1:96:88:2a:
                    24:fa:ce:91:05:34:53:c1:0f:25:37:fb:b9:0e:eb:
                    a7:0a:df:93:f1:71:14:19:ea:67:03:da:2a:db:f9:
                    2b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:81:20:87:D1:99:A5:99:C1:87:27:52:D7:91:56:D8:7A:09:9E:14
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98317245-57ab-4ea3-a570-b486f6fe66d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.235.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:25:af:0e:82:16:00:36:23:68:44:20:49:a9:82:94:09:75:
         2d:b0:db:b0:f4:17:bc:eb:89:b5:b3:83:f5:28:49:9d:25:86:
         0b:7b:ce:57:2b:47:99:dd:bb:ca:61:98:a6:31:08:6c:27:de:
         9e:18:70:5d:ff:ad:c8:50:6c:0a:66:72:1e:b6:91:1d:a3:65:
         a4:16:20:55:8d:7c:12:2b:19:36:4a:aa:ac:1d:dd:20:46:c3:
         c5:ae:8e:56:93:23:97:ff:62:41:84:41:58:d2:27:eb:6b:3e:
         cf:f7:42:0c:74:79:c6:e7:e3:2a:55:f6:94:aa:fb:34:2f:8d:
         1f:6b:db:ef:a0:b2:87:6e:a7:c2:16:b0:23:8d:5b:84:cd:cd:
         88:2b:3b:9d:e6:bb:87:3a:8d:98:53:f1:fd:69:e9:20:8f:be:
         d6:1c:69:47:78:e0:0a:8c:e7:32:d2:64:f3:e3:56:fb:12:93:
         e6:b0:84:a4:55:73:b4:ad:a1:d2:20:5a:b3:61:42:2c:54:0f:
         26:4b:7d:92:36:96:06:51:89:be:87:e1:f1:7a:7d:7a:55:f2:
         f0:25:3e:0f:b6:26:04:ea:80:70:a1:ce:6f:56:a1:44:d3:37:
         75:48:18:75:97:41:e9:84:fa:36:33:a6:d1:7c:9e:43:d1:d1:
         1e:a2:89:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----