Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a08c855-4cd4-4fa5-b780-8a773463b987.roa
File:                     3a08c855-4cd4-4fa5-b780-8a773463b987.roa (raw, json)
Hash identifier:          uYgk70L0Ql4W9Vnn+Qn1EpRFUMT4HXcwURMGJDlUFPI=
Subject key identifier:   98:2C:86:F2:43:B6:45:66:D1:F1:6A:7F:1C:6C:87:BD:1E:F5:47:82
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20DD06A1083A6FA3A61E679783D056E20AE01AA8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a08c855-4cd4-4fa5-b780-8a773463b987.roa
Signing time:             Mon 17 Mar 2025 15:10:54 +0000
ROA not before:           Mon 17 Mar 2025 15:10:54 +0000
ROA not after:            Mon 21 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        151.148.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:dd:06:a1:08:3a:6f:a3:a6:1e:67:97:83:d0:56:e2:0a:e0:1a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 17 15:10:54 2025 GMT
            Not After : Apr 21 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:2d:97:38:9d:d2:15:f9:a2:bb:6f:8f:75:
                    2e:a2:37:b2:87:40:89:34:55:b6:fb:48:a8:0f:9f:
                    50:e5:5c:40:a5:df:d5:e6:e6:a1:6a:01:09:db:02:
                    78:57:c7:c1:3b:22:92:03:80:53:14:72:ad:e1:28:
                    0d:84:be:1f:eb:dc:b6:2e:9d:09:96:32:67:6b:63:
                    95:ac:13:2b:c6:a5:55:1a:8d:53:f9:a6:8e:72:11:
                    f7:8f:92:25:99:52:a2:8e:fc:38:b0:ac:c2:64:47:
                    39:5a:88:8f:21:e4:c1:f9:dd:cc:8d:ae:7b:32:48:
                    d8:93:88:fc:6d:bc:83:e5:8f:5f:a5:c1:49:53:7e:
                    23:79:61:69:a3:b7:cd:1e:98:f2:8e:8a:0b:d0:1c:
                    fe:4b:0e:0f:83:61:fb:5a:3b:0e:f8:90:d3:7d:eb:
                    28:c9:ab:7a:e4:9f:58:37:48:52:b6:f7:ea:51:93:
                    f5:a8:b0:40:f8:ce:76:b6:d5:19:fe:a3:46:12:fd:
                    ed:3e:f7:a9:5d:15:05:2f:82:3d:c0:5a:e1:7c:26:
                    49:b7:94:c5:30:2f:0c:51:1e:96:98:4a:0c:06:bc:
                    00:d9:1b:5b:9c:33:a3:d2:2c:2f:f2:35:af:66:11:
                    09:ed:ae:f8:4a:26:b7:6c:52:48:d5:6d:6b:fb:4a:
                    24:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2C:86:F2:43:B6:45:66:D1:F1:6A:7F:1C:6C:87:BD:1E:F5:47:82
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a08c855-4cd4-4fa5-b780-8a773463b987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:f1:47:4d:29:c5:6a:f2:68:ac:35:77:01:b3:e6:3a:49:35:
         1c:d5:07:71:40:13:17:3d:9d:b0:8a:f9:d8:7a:5f:3c:d1:62:
         8f:00:3f:e9:b7:9e:74:c9:c5:ec:1d:c5:b2:c4:5a:05:76:e2:
         a1:51:9a:ce:c3:ef:41:40:08:e8:24:ba:4e:1d:c7:db:34:df:
         e6:84:5b:7c:f0:12:99:b5:d4:6a:fd:cf:91:aa:a5:db:25:eb:
         ea:0b:f5:fe:cf:5f:1a:72:17:40:13:59:42:65:0d:75:5e:d8:
         09:b5:04:7b:a2:32:72:4d:64:2b:82:cf:4b:46:c2:4d:84:ed:
         3d:dc:f8:e8:17:9e:3f:81:b3:fa:d2:2b:57:bd:d4:89:52:97:
         35:93:f9:65:57:86:f9:6b:9a:91:88:76:08:dd:c5:91:62:66:
         9e:a3:75:ef:12:c9:5a:a3:2c:22:88:85:d1:06:39:c1:85:4e:
         f9:e0:9d:3f:da:33:c9:21:bb:36:60:06:88:2f:f1:f6:ad:5c:
         a5:b5:c6:40:ed:1c:fa:cd:66:b3:ea:87:27:ab:2a:7b:18:da:
         22:85:4f:fc:b4:08:1d:e3:dc:5b:61:04:18:10:5d:04:a1:be:
         b7:82:c6:03:df:77:9d:9e:cf:38:ab:a1:96:c7:8f:b4:ea:af:
         e4:2a:57:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----