Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb16b029-5c94-498c-a68a-b117022b9ec9.roa
File:                     eb16b029-5c94-498c-a68a-b117022b9ec9.roa (raw, json)
Hash identifier:          f8ITWlQIHDEFSiVxWrj0gb3SztpqDGqK9fTBs9JID4k=
Subject key identifier:   0C:E7:28:32:D0:C3:8B:A4:B8:06:0F:42:CA:60:80:CD:B0:A8:EB:5E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4BB8C81851C190B68B7BC378BB952D0A8132D082
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb16b029-5c94-498c-a68a-b117022b9ec9.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.128.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b8:c8:18:51:c1:90:b6:8b:7b:c3:78:bb:95:2d:0a:81:32:d0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=a3b2d8fe204e9e602633c22c9d3a40ff858082a67d9d554d6cfa20f7b3224fd3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:5b:15:89:f9:d5:d1:03:04:df:9e:5f:68:
                    f7:9f:49:9d:93:88:5f:da:a6:d9:2e:c0:94:93:10:
                    c0:74:99:2b:31:d8:19:d0:58:d8:bb:75:95:2c:3e:
                    20:da:32:d5:10:a1:23:25:8a:ce:28:0e:e0:a3:f3:
                    83:36:98:50:4e:fc:d8:96:69:df:25:1b:7c:6f:eb:
                    9d:c1:e6:c3:dc:6b:d3:d5:83:b1:e3:dc:a0:0f:f2:
                    b0:42:1a:b7:ad:e8:4c:77:eb:27:c5:34:f5:d3:24:
                    0d:42:ad:52:0d:33:81:72:41:bc:72:62:d3:bb:5c:
                    75:83:20:82:32:e1:7b:dd:ba:94:ae:94:1f:68:30:
                    63:59:d2:3f:14:18:f7:80:93:43:56:ae:8e:5c:7f:
                    21:27:10:db:fa:8e:f3:3f:d5:cf:74:ff:4d:85:05:
                    ab:d0:18:3d:b6:2e:db:b0:15:ce:da:ad:b9:88:15:
                    8e:8c:38:62:44:73:0d:c9:53:e5:77:98:c1:77:2a:
                    5e:f1:9d:80:cc:09:1c:40:53:d1:d6:62:c1:71:dd:
                    2a:a8:c4:04:c0:55:54:ca:22:e2:39:de:44:71:b0:
                    16:e8:08:63:91:5b:9d:08:ae:81:43:3d:8c:df:f2:
                    e9:bc:ac:04:4f:ca:ee:ae:4d:2a:26:19:a7:18:6c:
                    e3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E7:28:32:D0:C3:8B:A4:B8:06:0F:42:CA:60:80:CD:B0:A8:EB:5E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb16b029-5c94-498c-a68a-b117022b9ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.128.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         8f:56:ee:4b:3c:95:02:7b:4e:0a:50:28:c2:47:33:c5:dd:16:
         60:c1:b2:3a:52:c3:a8:5e:e7:bb:f9:2c:71:40:a9:3d:0d:69:
         20:4c:8d:59:2d:da:68:41:60:92:14:7c:e6:1d:b1:5e:70:1c:
         44:3e:f3:cd:5b:20:f6:7c:f6:a4:f6:c0:1e:74:34:57:04:16:
         69:7f:80:a7:7b:13:d6:0c:d6:f7:f4:b3:eb:1b:cd:67:20:34:
         cc:47:2b:3b:fb:eb:7a:ab:b8:3f:74:5a:e2:fb:dd:ed:57:f8:
         fd:a7:65:4a:33:d5:78:24:69:08:6c:2a:91:aa:f9:0a:e6:df:
         ce:f6:43:61:bd:e1:dc:8f:d8:62:15:56:e9:4a:1a:a4:dc:1a:
         4f:eb:55:7b:c2:96:1e:0e:1a:1f:3d:9f:b1:98:36:ba:c4:96:
         65:d4:42:a5:95:de:00:8d:f3:88:9b:a5:07:a8:ad:3c:fb:34:
         85:79:7f:e0:9e:2e:9a:75:e5:3b:ec:40:58:83:1e:27:c5:06:
         5b:f8:26:1d:da:3f:d5:da:98:a7:21:46:23:23:7b:fb:a3:66:
         bc:77:47:40:08:d2:48:e5:b7:a8:48:1f:04:92:14:b9:e8:00:
         87:5e:c3:7e:d4:68:a9:d5:d8:76:c9:05:92:f9:db:0b:87:f0:
         9b:89:77:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----