Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4fb3a71-8c61-45fd-8023-45717ef2414d.roa
File:                     f4fb3a71-8c61-45fd-8023-45717ef2414d.roa (raw, json)
Hash identifier:          63raBozIvRqeOTitYHLU/bB+opS/B4AAbwO/BX16yeA=
Subject key identifier:   A1:09:E6:0D:9C:D4:89:B1:A6:F7:C6:21:59:D5:A7:70:DE:89:94:0A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2D795F75AEEC010D433046FB03BCAC6578A15035
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4fb3a71-8c61-45fd-8023-45717ef2414d.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.232.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:79:5f:75:ae:ec:01:0d:43:30:46:fb:03:bc:ac:65:78:a1:50:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=102999f469488a14d259f36a62b5344ae991e236685379a2ac588b5941237d05, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:44:69:89:14:5c:b5:04:e7:05:72:c3:6e:
                    49:87:9e:95:73:9f:c4:24:98:d4:47:89:3b:d1:f6:
                    b7:1b:ff:a2:88:e4:58:29:42:e1:13:e8:10:66:0d:
                    a8:e5:11:17:65:41:5f:a5:b5:e7:be:d5:66:2d:0e:
                    15:29:56:31:b2:fa:b0:06:88:f6:db:31:a8:ff:2a:
                    b0:aa:7a:a1:0c:f6:97:9a:91:1d:42:59:0b:00:5b:
                    87:d6:61:5e:e3:b3:46:41:84:eb:1b:80:29:12:66:
                    f7:52:fa:c1:bc:91:53:53:8d:9d:be:8e:6f:25:e2:
                    2d:12:5f:43:ed:3d:e9:4a:29:3e:e8:7a:c9:e0:00:
                    55:ea:6c:72:7c:87:bf:f6:7d:1d:b8:c4:09:1d:03:
                    78:9d:1e:eb:1f:dc:17:eb:f0:ea:e6:d4:31:37:98:
                    41:3e:47:5a:df:a0:0f:00:b0:92:07:64:e7:0c:1a:
                    62:85:de:0e:00:d0:90:1a:5e:af:89:79:a4:45:1d:
                    ac:72:11:da:70:ff:d2:5d:78:1b:e8:84:51:67:81:
                    7b:e4:1e:98:4b:1a:ca:95:8e:71:ce:20:c8:f0:98:
                    97:2b:36:41:15:1c:96:48:5e:e1:60:af:bb:cb:e7:
                    d4:e3:5a:bd:35:92:f1:8e:fc:f8:b3:40:7b:bf:f8:
                    5d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:09:E6:0D:9C:D4:89:B1:A6:F7:C6:21:59:D5:A7:70:DE:89:94:0A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4fb3a71-8c61-45fd-8023-45717ef2414d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.232.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6c:11:8a:43:9e:ff:85:c8:2c:b2:1e:ff:a4:66:4c:85:7e:dd:
         e4:f9:79:79:b9:63:37:18:84:79:bc:2a:a9:ee:d3:3e:5b:56:
         d7:1c:1e:6f:3d:90:40:59:7c:94:1f:0a:c2:94:99:81:10:38:
         28:c7:a6:9f:04:c6:21:bc:43:f0:97:2f:75:24:11:4e:06:90:
         8d:0c:bc:25:b8:0b:70:ed:6a:3d:fa:3b:85:f5:2c:3e:70:db:
         8e:75:9e:78:31:dd:91:e1:00:5d:da:c5:15:85:e3:0c:82:78:
         67:d9:83:35:57:8d:ab:e0:a7:b4:15:46:15:60:8c:5b:35:28:
         8d:ce:91:46:9f:ac:a6:73:af:06:31:7c:1c:0b:44:03:82:33:
         94:89:c4:38:17:17:16:ff:2b:a2:7e:3d:36:90:70:11:29:69:
         84:95:d8:80:fb:4c:de:ee:ac:b7:cd:4f:c1:23:de:2c:f7:94:
         ea:9d:51:41:ed:e9:3a:20:a9:6f:2c:e9:4a:ae:b1:5d:3b:dc:
         8b:11:9a:de:d1:bd:00:dc:ad:ec:7d:69:d2:05:f7:3e:d6:a3:
         91:43:ff:b2:a9:af:19:5c:a2:6c:67:29:bd:93:9b:0b:65:e8:
         9c:81:9f:39:20:88:2e:84:26:fa:62:9e:2a:ad:33:7a:96:47:
         ba:72:c4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----