Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2650d932-359e-462d-a188-11b8c7779af6.roa
File:                     2650d932-359e-462d-a188-11b8c7779af6.roa (raw, json)
Hash identifier:          3EGUW8/QllRjR76ABaI3mMeoPa6hzEU5TrRmybewdik=
Subject key identifier:   58:D5:8F:5A:79:61:9A:2D:D6:BC:C7:5F:98:39:8E:77:60:E8:88:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       56759A149ACFED5A1CACD67E5AF55D4E5E909DF7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2650d932-359e-462d-a188-11b8c7779af6.roa
Signing time:             Tue 04 Mar 2025 17:51:08 +0000
ROA not before:           Tue 04 Mar 2025 17:51:08 +0000
ROA not after:            Tue 08 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        79.73.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:75:9a:14:9a:cf:ed:5a:1c:ac:d6:7e:5a:f5:5d:4e:5e:90:9d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar  4 17:51:08 2025 GMT
            Not After : Apr  8 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:4b:ae:45:0b:8c:4d:cc:62:8a:74:36:ef:
                    e5:60:24:5a:9e:c2:96:7c:2d:1f:06:e4:a4:bc:a2:
                    fd:68:8a:70:75:ba:d0:74:fc:9b:fc:7a:2f:22:4d:
                    22:a9:63:41:e3:b2:06:94:da:6e:2e:38:c9:b2:2c:
                    e7:ed:f2:63:4b:87:88:c7:f3:48:37:92:0d:13:f7:
                    1e:2d:6b:41:ce:7b:88:1b:f9:0d:18:07:38:50:b3:
                    22:f8:4a:d3:58:a2:d0:fa:4a:55:7d:55:ae:65:72:
                    ca:9b:a8:13:44:d9:9c:a5:aa:92:84:ee:81:a0:5d:
                    40:f4:01:0a:7c:b8:98:91:46:86:12:8e:56:6e:f8:
                    7c:60:01:8d:27:e4:5b:44:60:03:5a:d9:e8:c9:dc:
                    c8:06:bf:4f:96:c4:40:0a:5a:d3:31:db:52:0f:e8:
                    86:69:17:4a:d8:e2:78:3b:79:fa:6f:5c:25:01:12:
                    d4:bf:03:aa:c7:94:bd:96:48:0d:1c:3a:30:76:83:
                    04:1d:88:4b:a3:1d:39:51:6d:cb:03:97:dc:d5:93:
                    63:d3:f5:a6:41:bd:d9:11:e7:16:38:e8:6d:f7:2c:
                    09:e3:ad:6f:30:e1:06:f5:79:98:c9:f8:4c:7d:a7:
                    34:b6:1c:1f:85:0c:75:00:67:30:1e:5d:70:e9:a3:
                    6f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D5:8F:5A:79:61:9A:2D:D6:BC:C7:5F:98:39:8E:77:60:E8:88:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2650d932-359e-462d-a188-11b8c7779af6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.73.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         af:5b:9e:04:9f:49:00:62:c3:34:4c:ff:ac:fa:1b:6e:c8:52:
         97:bb:58:db:c4:dd:6d:eb:d2:d6:b1:f0:46:87:d1:a4:3e:e0:
         d5:10:d2:66:db:14:fc:b5:0f:15:32:28:57:05:ee:eb:56:74:
         de:c4:54:b8:86:a5:d9:5f:7d:8d:26:0f:de:bd:0a:d7:f1:51:
         40:1b:b3:57:ad:e0:23:b5:c6:34:35:0e:b0:7c:5e:16:8b:16:
         bc:e9:a7:a2:eb:48:d4:02:7c:7e:bb:21:48:44:5e:4d:3d:e8:
         af:0f:fc:37:ed:32:6f:94:e5:3d:76:fd:35:05:09:9e:6d:d0:
         7b:c5:b7:b9:18:96:47:1d:60:6f:5a:75:1a:37:91:43:43:66:
         7a:78:74:04:2d:78:89:51:7a:17:14:82:87:25:fc:0d:5a:b9:
         73:a7:64:c5:73:4a:73:8b:ed:87:b7:18:4b:bb:f3:e0:bd:85:
         fc:0d:21:b7:52:a1:e0:a6:d7:94:5f:60:41:cc:84:85:3d:47:
         3e:5c:b5:92:5a:98:63:a3:5c:10:29:eb:1c:48:b2:5f:77:01:
         d8:29:31:8e:94:c8:73:e4:15:ee:5c:62:1b:dc:67:39:02:52:
         53:fe:87:c3:b2:38:23:a8:4d:17:91:6e:cc:eb:ac:fe:d3:4a:
         16:5f:c0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----