Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1fde637-becd-4e25-8fd7-57380fc4e43c.roa
File:                     a1fde637-becd-4e25-8fd7-57380fc4e43c.roa (raw, json)
Hash identifier:          l8hnTH6btKq89jFiHLpYBbAFIi3i6jSOPyz83zB3mck=
Subject key identifier:   80:28:21:E6:CF:75:4C:6A:9B:5A:97:3E:0A:75:AC:53:5E:FA:06:4F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       011CF366F020ED4428912D2FE47754E3B8381CA3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1fde637-becd-4e25-8fd7-57380fc4e43c.roa
Signing time:             Fri 31 Jan 2025 00:00:00 +0000
ROA not before:           Fri 31 Jan 2025 00:00:00 +0000
ROA not after:            Fri 07 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.195.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1c:f3:66:f0:20:ed:44:28:91:2d:2f:e4:77:54:e3:b8:38:1c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 31 00:00:00 2025 GMT
            Not After : Mar  7 23:59:59 2025 GMT
        Subject: serialNumber=a3c26fb6672e99c62680505dd717607472130024accb8720c4657ad01fd4424f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:da:d6:c1:d6:aa:f7:70:02:b9:03:8b:19:
                    bc:0f:8b:73:e4:03:7b:a6:71:94:3e:7a:ad:44:14:
                    b8:d2:fc:ef:dd:cc:68:af:b8:c2:c3:ff:cb:23:ee:
                    16:a7:53:f3:eb:86:72:07:36:73:02:77:0a:2b:36:
                    c5:b7:0b:23:88:29:b3:ef:a5:fc:37:62:55:55:4c:
                    28:9a:53:64:d2:30:a5:f2:8a:91:4c:ea:4c:60:72:
                    04:f6:e6:af:ff:5b:6a:23:87:54:07:eb:0e:96:16:
                    de:79:34:d9:a4:27:9b:8c:19:50:c8:e0:91:28:ab:
                    4f:90:52:1b:1f:d4:b1:39:09:e7:cb:8d:ec:b4:5a:
                    45:75:61:3f:8a:bd:2c:04:2a:d2:89:f1:73:8e:bd:
                    4a:c8:b2:8c:43:ee:56:7f:1b:20:7e:63:af:d3:13:
                    0f:e7:21:2f:3b:99:c4:e6:b4:89:10:eb:d0:fe:ec:
                    dd:a6:0f:0b:1f:84:28:cf:56:56:1c:a0:9a:87:5d:
                    51:05:9e:e4:4a:09:27:e6:e3:72:d3:05:ed:c9:0e:
                    20:6c:f7:aa:0e:27:fc:62:08:b3:94:c0:cf:01:84:
                    21:43:8c:9a:cd:1f:fd:74:5c:e5:30:ee:1c:2d:91:
                    c8:3c:9f:06:32:60:4f:68:7d:87:9d:74:12:8c:06:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:28:21:E6:CF:75:4C:6A:9B:5A:97:3E:0A:75:AC:53:5E:FA:06:4F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1fde637-becd-4e25-8fd7-57380fc4e43c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.195.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:2f:65:10:8f:4f:cd:d3:0c:ec:55:41:eb:a4:93:a2:fe:77:
         6f:8c:0d:17:c6:18:b7:30:ad:90:cd:83:4b:42:96:51:e7:e7:
         bc:f2:b0:8b:2f:25:46:13:74:56:2c:44:bd:82:dd:6d:ca:65:
         51:ed:d5:d0:4b:84:f0:8c:fb:c8:28:05:82:c9:65:7d:34:9f:
         01:00:94:17:5d:d7:89:fa:09:b4:72:3e:98:7c:e9:ef:27:f8:
         7e:8f:48:9c:fc:1c:7f:3a:ee:b4:e5:24:5f:df:3b:6a:d3:43:
         29:87:f2:8b:1c:a5:62:1a:f7:f8:5c:6b:fc:54:51:b8:01:d2:
         36:78:48:61:6a:14:9b:a6:d0:76:23:5f:bf:b2:33:f2:bb:33:
         88:d8:c1:0c:13:4e:82:3d:18:e2:1f:0c:81:13:bb:e1:c0:41:
         7d:53:95:d2:20:fd:d4:3f:ca:e4:bc:06:c0:fd:42:57:2e:b4:
         7f:97:19:34:de:ea:68:de:96:be:c8:be:6c:4b:35:f3:ce:9f:
         5b:6e:20:ce:22:5f:21:68:7b:ce:5c:11:33:94:b5:5d:c4:9d:
         c8:8c:95:c0:5d:da:62:e6:09:4a:b6:63:28:60:0c:7e:eb:4e:
         74:15:ae:0e:67:d7:42:bd:9a:a0:80:73:23:4e:1d:53:42:24:
         03:10:6b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----