Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9356744-fc68-4d6c-8a9f-28dcdb78e172.roa
File:                     e9356744-fc68-4d6c-8a9f-28dcdb78e172.roa (raw, json)
Hash identifier:          btPkfqB1jTkEeEwGZs9tF+xZJWI07lw3SHdB6dX1bb4=
Subject key identifier:   D6:E4:EC:0E:19:0D:6F:EA:56:4D:36:9E:D3:3F:90:0F:EA:E4:2A:78
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       57E9B8CB774AB28248F497781E4B2D390396C071
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9356744-fc68-4d6c-8a9f-28dcdb78e172.roa
Signing time:             Fri 31 Jan 2025 00:00:00 +0000
ROA not before:           Fri 31 Jan 2025 00:00:00 +0000
ROA not after:            Fri 07 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.60.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e9:b8:cb:77:4a:b2:82:48:f4:97:78:1e:4b:2d:39:03:96:c0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 31 00:00:00 2025 GMT
            Not After : Mar  7 23:59:59 2025 GMT
        Subject: serialNumber=af264748fcee7acf9960530dcf8a8968c4442de6fedc635d8e5c3e0370d2c3c8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:3d:68:5e:03:ed:ff:1e:3c:40:3f:ae:5a:
                    2e:53:f0:fd:97:ae:b8:2c:72:15:83:0a:7f:2b:02:
                    f1:26:7a:39:f6:fe:33:ac:0e:e2:e2:29:a2:17:93:
                    5e:da:b7:d8:97:86:eb:64:fb:48:29:bf:c7:e1:4f:
                    b6:25:e1:b9:60:98:33:ca:78:e3:7f:33:37:50:63:
                    22:8a:2e:a9:d0:ee:fb:d8:82:1c:76:e1:c4:53:08:
                    86:11:08:4f:e9:cf:ac:0b:69:b3:50:d9:df:10:04:
                    b4:96:97:fa:f0:72:60:f4:0c:63:42:cf:6a:1f:07:
                    1e:7a:c1:44:d1:93:4d:c5:9e:a6:f1:45:f4:38:d3:
                    9c:ee:7b:f1:56:ef:21:b7:32:7e:e1:92:4f:ff:70:
                    52:13:61:fb:1b:0d:e1:83:c2:04:9e:89:1b:bf:c3:
                    68:95:34:90:e3:cb:4b:66:65:f6:f0:56:f8:04:3c:
                    15:7a:9a:b4:88:50:a0:a2:26:9c:d5:9d:88:51:7c:
                    c2:45:f5:70:fa:80:b5:b0:67:d4:2d:9d:e4:f3:49:
                    3c:fe:4b:10:f9:58:7d:21:a1:78:77:98:42:a8:22:
                    e4:93:f1:b8:2b:f9:74:d7:ee:37:10:98:1f:3b:55:
                    84:9e:f7:25:0b:a0:cb:1c:f3:6b:23:c2:d3:23:0c:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E4:EC:0E:19:0D:6F:EA:56:4D:36:9E:D3:3F:90:0F:EA:E4:2A:78
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9356744-fc68-4d6c-8a9f-28dcdb78e172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.60.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:ee:d2:62:b7:73:c3:fd:ff:8c:03:10:7d:d9:0f:4e:29:3d:
         66:26:e1:a8:d3:b2:b9:70:96:65:50:15:c4:3c:0e:0c:b4:82:
         37:1a:78:82:f8:51:08:e2:c0:cc:99:d1:f5:d9:a5:7d:f0:d7:
         20:e3:a5:bd:e9:98:35:40:a9:75:3e:73:42:fd:08:4f:34:ac:
         52:b8:77:e2:3e:02:b1:8b:38:80:d0:46:0f:ae:b2:9c:35:19:
         a7:17:46:6d:d2:7e:f0:59:ba:04:95:a8:c6:d9:e3:e8:f1:63:
         ae:47:6b:f5:61:73:7e:3f:6e:e4:20:4e:61:6b:8d:38:25:70:
         23:cd:8a:52:5c:f5:9e:d1:23:ec:5c:3b:e4:28:4f:cc:8d:08:
         ec:29:2a:8d:df:f3:a8:0a:40:f3:1a:12:b3:35:46:8c:b7:bc:
         38:c3:6d:45:f1:87:a9:ad:3a:73:c7:da:92:cf:bd:c4:7a:b1:
         05:ac:a4:e5:cd:d7:0a:3b:95:ac:01:b7:d2:93:2c:93:fb:15:
         ae:fb:bf:e3:b9:d4:6c:55:cf:3e:cd:cb:6d:0e:d6:28:39:61:
         c3:d9:fb:d3:85:c7:8d:1c:81:5f:71:61:fd:ff:6d:69:39:f3:
         74:fe:b2:6a:27:9f:cd:72:d0:e9:e4:87:82:38:8d:a8:63:17:
         51:04:f7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----