Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33752edc-ba56-4a76-bb4b-6c9b59f3cb21.roa
File:                     33752edc-ba56-4a76-bb4b-6c9b59f3cb21.roa (raw, json)
Hash identifier:          DzlntK6j0ppxvu+7VZrwk0UExRt/b03maLxPvW5I7tk=
Subject key identifier:   55:49:14:E7:49:52:E0:D6:BA:28:F5:44:AD:6E:65:21:A5:8F:88:BD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       38E3BAB10230DFA70B6DD0F4A92E3533F23F38FE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33752edc-ba56-4a76-bb4b-6c9b59f3cb21.roa
Signing time:             Wed 19 Mar 2025 00:10:24 +0000
ROA not before:           Wed 19 Mar 2025 00:10:24 +0000
ROA not after:            Wed 23 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        149.114.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e3:ba:b1:02:30:df:a7:0b:6d:d0:f4:a9:2e:35:33:f2:3f:38:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 19 00:10:24 2025 GMT
            Not After : Apr 23 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:2a:e2:63:ed:43:8f:ba:b8:52:74:7e:2c:
                    eb:60:40:d5:1a:99:0d:95:a1:7b:ba:e7:96:e0:b1:
                    cb:c9:ae:ad:77:84:fa:64:98:80:10:01:a3:c0:d3:
                    10:5e:44:a0:61:10:13:24:8d:ad:19:1a:0d:72:be:
                    69:d5:e4:d6:fa:34:bf:94:a2:f2:dd:af:aa:16:02:
                    a8:a3:64:d4:f4:31:34:3f:32:80:89:cc:25:c9:7d:
                    67:2e:87:2a:09:c7:aa:79:b9:8d:c3:91:34:b6:37:
                    64:22:fa:12:77:7a:c0:c7:10:d4:b3:01:9e:19:3c:
                    24:07:b5:2c:48:23:ae:9e:68:dc:f7:81:d9:fe:8c:
                    b4:2c:9e:26:52:4e:17:8d:e3:f4:a3:36:92:db:84:
                    20:67:7d:db:b1:b3:1c:16:f9:35:48:18:16:cd:db:
                    a9:40:ba:c6:cf:b4:2f:e8:62:df:97:41:a2:68:70:
                    82:5b:64:03:39:55:41:f7:dc:4d:97:0f:93:0b:8c:
                    03:a4:06:59:15:96:c1:7f:a8:72:a4:e0:90:7f:3e:
                    db:25:67:2f:b7:a0:94:59:b8:b9:47:c3:4c:e5:9e:
                    5d:1a:ae:41:c1:b8:07:a3:b0:f9:2c:e5:2e:4a:89:
                    a5:54:b0:a5:bf:64:b9:aa:b0:3a:29:6a:89:ec:49:
                    d8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:49:14:E7:49:52:E0:D6:BA:28:F5:44:AD:6E:65:21:A5:8F:88:BD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33752edc-ba56-4a76-bb4b-6c9b59f3cb21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.114.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6a:27:9a:be:60:e2:0e:20:a9:a4:55:80:7d:46:0f:f8:be:bd:
         79:e1:ed:2c:12:a7:77:4c:06:45:cc:77:ef:08:19:08:ec:f4:
         81:9e:85:60:42:7d:54:a3:8f:72:31:1c:a2:1e:f7:54:47:4b:
         3c:9e:a8:c7:5c:57:99:60:9a:22:ee:6f:16:3e:c0:1d:4f:b9:
         7b:a3:66:0a:c3:da:73:91:08:f8:58:a8:22:6a:57:44:51:54:
         51:67:16:c1:d3:48:ff:33:06:7a:02:e0:fe:60:70:2e:db:05:
         c3:0f:20:9f:c0:c5:04:2c:b3:ab:47:10:63:9c:f5:6b:47:c7:
         90:47:db:a0:0b:ab:24:a5:14:f6:d8:e9:39:84:18:87:7e:4d:
         65:b3:ff:6e:64:37:01:13:a7:45:d6:47:12:14:30:d1:f5:ea:
         51:05:48:da:a2:ab:6a:91:d8:2f:c0:95:c3:c4:02:52:a4:4e:
         2f:e1:74:d9:5e:21:7e:3a:13:12:2b:0a:13:bd:a1:14:6c:8b:
         b4:d4:93:ec:48:76:5d:2a:98:c6:ed:32:9d:f4:78:92:e9:12:
         ef:0c:88:20:c2:80:f4:8f:43:b9:9f:7a:d6:b2:40:b0:7e:2e:
         40:ed:c3:a0:03:65:2f:15:06:1b:63:be:b0:05:25:91:ab:2e:
         1b:22:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----