Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf2de487-acb9-46c7-a1ce-54fbd12b3709.roa
File:                     cf2de487-acb9-46c7-a1ce-54fbd12b3709.roa (raw, json)
Hash identifier:          JsLiabwJNt7E2BX22od98r/fiuKcrsAGomOQ7sJnGFU=
Subject key identifier:   87:AB:93:71:FE:4E:CF:68:79:82:F4:0B:59:0D:1E:9D:79:C4:91:A6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6FBA5551F5AB77A98BB7A9A70F4B7342E9130534
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf2de487-acb9-46c7-a1ce-54fbd12b3709.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.80.0.0/12 maxlen: 12
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ba:55:51:f5:ab:77:a9:8b:b7:a9:a7:0f:4b:73:42:e9:13:05:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=afdaa25113bb2f6813e2a6cde8ac3cc7270d3c7fa13665beb853a2e54a2d16bf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:54:9d:c5:2b:9c:c5:87:b1:cc:a7:bd:e3:
                    19:4a:21:3e:34:33:93:f6:f3:1e:6c:64:4b:00:eb:
                    70:1f:94:8e:e6:33:12:87:b8:b0:af:12:cb:ee:87:
                    b9:f4:cf:b2:4b:c0:78:1d:d4:40:be:21:a6:36:9f:
                    43:30:ba:bc:4f:07:3d:9a:c0:d9:17:70:d4:1e:b8:
                    c4:e2:38:ab:74:5d:80:7d:77:a2:2d:bd:30:9a:72:
                    f6:84:39:47:15:28:cc:99:4c:a9:8d:fe:12:59:eb:
                    ec:6e:a7:19:c6:9f:ec:bb:56:ae:ac:55:ca:40:9e:
                    1e:7a:cb:fc:58:e8:91:25:de:24:98:98:f2:c6:ff:
                    14:70:ce:5e:72:9b:33:0e:2b:05:39:0c:fe:10:4b:
                    0d:29:06:ed:73:fe:c4:36:3e:bf:1b:2c:cc:27:8f:
                    0a:23:ab:fc:8a:e4:8f:af:f6:95:ff:82:99:a7:b1:
                    cb:81:49:6b:b1:3d:e1:e6:14:b1:d9:a7:41:b4:4e:
                    35:f9:2a:f2:5b:e4:fe:a9:e8:b1:f2:5d:bc:d7:fd:
                    c0:cd:49:a0:f0:dc:5c:a0:10:7f:0c:71:ab:ec:a1:
                    fd:a0:13:91:28:6e:4e:00:35:74:bf:7c:cc:f9:51:
                    34:f8:3e:27:09:91:44:f9:f4:fd:e4:20:e6:5d:ef:
                    83:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AB:93:71:FE:4E:CF:68:79:82:F4:0B:59:0D:1E:9D:79:C4:91:A6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf2de487-acb9-46c7-a1ce-54fbd12b3709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.80.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         a1:4f:18:65:52:f5:6c:72:38:f1:13:60:24:93:ec:a4:63:34:
         f3:e9:f7:56:26:93:8d:9c:f6:06:53:0e:90:9f:25:f5:21:79:
         9a:b9:98:f7:74:b6:35:6a:16:7c:59:c5:eb:86:d1:a9:99:2e:
         1a:eb:5f:8d:44:83:49:d7:8c:08:2b:b7:0a:41:18:3a:30:c1:
         f3:a5:be:e4:b7:3b:25:02:44:e5:eb:35:6b:e1:91:c5:0a:e7:
         c3:6c:b3:0c:6d:2e:b4:f0:6c:8c:21:60:e4:5e:7a:42:1b:5b:
         70:8e:bc:8d:78:aa:4e:51:47:96:10:f3:d0:d3:4b:c6:6e:06:
         4a:88:da:01:02:6e:90:5e:87:26:0f:3b:07:8d:ca:59:cc:06:
         1f:10:a0:db:66:c2:6f:3a:33:12:ac:c7:a9:da:49:9a:83:cc:
         64:b6:a2:2c:2b:7e:20:05:bf:5e:7d:76:54:c9:5d:fb:26:36:
         e3:8e:0e:cd:d4:05:c0:f7:65:c7:7d:05:46:3b:a3:8b:c0:4c:
         4f:12:1d:5f:58:c7:43:56:e5:c2:4e:a1:9b:4c:c2:81:a1:d9:
         4f:e1:d1:02:11:35:ea:19:5a:a2:d5:9c:13:6c:66:6d:18:0c:
         69:0f:32:27:d0:aa:73:60:dd:b6:eb:c7:28:f3:8b:b8:42:ca:
         14:90:4c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----