Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa
File:                     1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa (raw, json)
Hash identifier:          OnOIXDTOTdIO1rZpw9YmbaLuWMxtz3YcDqkvpq1y0GQ=
Subject key identifier:   00:40:7D:70:C2:85:BA:A6:8E:FD:44:02:A2:84:7F:30:CF:71:A8:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4D0B25E2B2DDFB81E194DEB5449F970978A82E1A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa
Signing time:             Fri 21 Mar 2025 00:30:55 +0000
ROA not before:           Fri 21 Mar 2025 00:30:55 +0000
ROA not after:            Fri 25 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0b:25:e2:b2:dd:fb:81:e1:94:de:b5:44:9f:97:09:78:a8:2e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 21 00:30:55 2025 GMT
            Not After : Apr 25 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c7:92:4d:1e:f9:28:2b:23:01:c2:f5:7f:ce:
                    ae:ca:0d:2e:df:95:fb:0f:fa:a1:a2:a9:f1:9f:b8:
                    44:3e:a8:66:af:b1:13:64:fc:fc:e7:73:05:56:40:
                    d3:43:52:6c:7a:73:aa:fa:75:01:7b:08:fb:bc:fd:
                    5e:d3:17:9a:cb:0b:95:e1:b8:35:f1:4d:5d:ca:b8:
                    35:9a:07:07:7b:e2:64:d7:4f:45:31:d5:50:8b:a4:
                    20:71:69:f6:4b:c2:64:b9:a4:b0:05:8a:9d:62:2e:
                    6a:cb:cc:2f:34:c2:fb:7a:95:3e:3c:7d:a0:b5:5b:
                    ff:e2:4c:99:bc:5a:3e:63:c5:a4:8e:d3:ca:cc:90:
                    62:0a:f9:f0:b2:bf:a4:89:fe:8f:04:04:98:36:39:
                    a6:0d:0d:b4:f1:f0:47:f7:8e:39:0b:58:06:b7:bb:
                    6e:80:fd:d3:1a:39:dd:9e:f0:0a:49:08:b0:33:69:
                    1f:bc:40:ac:5b:07:46:e2:9d:b8:8c:b6:a8:10:4f:
                    40:7a:99:96:1c:72:6a:25:1a:b6:f6:ed:6d:13:a0:
                    68:4b:15:ba:ca:e8:cc:11:2d:54:0d:36:82:38:75:
                    06:48:52:fc:98:42:31:ca:e1:75:42:50:ee:53:42:
                    f9:52:64:4b:64:a5:51:23:5c:9c:03:f5:89:d0:d7:
                    15:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:40:7D:70:C2:85:BA:A6:8E:FD:44:02:A2:84:7F:30:CF:71:A8:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:8b:c6:52:3e:10:e8:46:a1:7b:2f:49:1b:9f:e2:e7:98:37:
         37:69:14:d7:fa:95:59:58:a0:4a:cd:4e:39:a3:95:69:d8:83:
         4a:9e:72:00:50:57:ff:8c:8b:d0:20:7f:c6:ed:27:63:84:3c:
         30:ec:cf:bf:15:a1:91:89:d9:1b:f1:9a:ac:73:ba:72:c1:a7:
         7b:11:7f:a8:9a:66:c7:3d:d4:75:a0:9c:9c:3b:3b:e1:2f:4f:
         6f:10:5e:55:2b:d4:98:e1:8b:be:73:d1:61:f0:ae:a5:3e:3d:
         4b:d1:7b:dd:0e:0c:49:09:7c:68:11:ad:4c:3e:b3:46:0a:79:
         e7:2b:02:e8:ab:ce:d4:72:fc:f7:b1:dd:fa:44:ca:f2:12:62:
         81:86:a8:54:57:3b:d4:83:5f:8b:c8:0f:68:9a:cc:cf:e9:ab:
         35:9e:66:cf:e1:fa:cd:f2:e2:f2:73:4c:7e:1c:71:6d:09:6b:
         8f:a2:fc:56:71:a5:be:aa:98:da:4a:3d:28:d1:fc:44:bf:0c:
         b4:7a:d6:bc:5d:c4:d7:07:d9:98:51:9a:59:56:c9:b1:ce:b3:
         91:0e:d3:1e:2c:8b:dc:8a:22:ab:ca:f1:37:79:2e:07:8c:64:
         f2:ca:4b:e4:8e:07:21:55:cd:27:f0:07:41:01:f0:85:3c:8b:
         bd:4e:cb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----