Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65c740c7-8676-4c12-9db9-da6bf2962464.roa
File:                     65c740c7-8676-4c12-9db9-da6bf2962464.roa (raw, json)
Hash identifier:          ki7RJzsNFmBfmU5GcHAVPkamAxwBBhC0Z/TbK8alNsU=
Subject key identifier:   B6:B7:3F:81:2B:7A:3A:1D:11:C1:33:41:2F:83:D3:68:12:57:FF:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       034EF2D514748565243C69317DBF1D5B1B2628DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65c740c7-8676-4c12-9db9-da6bf2962464.roa
Signing time:             Wed 19 Mar 2025 00:21:12 +0000
ROA not before:           Wed 19 Mar 2025 00:21:12 +0000
ROA not after:            Wed 23 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        209.177.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4e:f2:d5:14:74:85:65:24:3c:69:31:7d:bf:1d:5b:1b:26:28:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 19 00:21:12 2025 GMT
            Not After : Apr 23 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:a0:52:4b:f2:ff:7f:32:79:15:46:a1:a9:
                    99:6f:71:b5:70:99:a4:3e:aa:3f:d6:30:eb:37:c1:
                    2d:9b:47:60:4c:11:b9:e1:f1:4d:19:05:63:07:51:
                    81:87:1f:d6:32:bf:13:74:49:c5:ee:79:a9:df:99:
                    52:0d:5f:76:99:fc:30:57:13:68:ca:33:d6:37:80:
                    80:d0:16:db:48:49:9e:ca:a6:d9:8b:ec:d1:a4:a0:
                    1d:a8:08:b1:2f:3d:9b:a5:37:66:c9:9f:6b:b2:56:
                    6d:bc:ed:81:3f:d5:04:40:11:32:69:85:40:1c:09:
                    91:e5:15:70:39:6a:bb:c3:55:5b:29:e9:aa:0e:7d:
                    95:7c:e8:b9:aa:ed:96:b5:c0:19:ae:82:7b:3a:ff:
                    47:6b:37:ee:40:d9:8c:ff:d6:d6:ce:99:f5:71:47:
                    1a:79:25:89:50:cc:d9:ee:ef:79:ce:67:5b:4a:6f:
                    77:ec:78:3c:42:86:b2:14:f7:b4:80:cb:9f:c5:d8:
                    9a:cc:5b:f2:cd:e4:dd:8c:a7:48:7d:c0:06:4a:29:
                    83:3c:ee:f6:71:15:87:7a:e7:49:75:f0:08:80:60:
                    37:7d:9b:a8:13:55:dc:7f:86:15:ab:a5:39:4d:e6:
                    da:c6:9b:cf:12:3a:7b:36:27:65:e9:9c:7b:55:90:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B7:3F:81:2B:7A:3A:1D:11:C1:33:41:2F:83:D3:68:12:57:FF:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65c740c7-8676-4c12-9db9-da6bf2962464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.177.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:81:76:55:66:3e:d2:c1:4f:24:d2:7e:fd:45:b7:61:63:b7:
         32:45:fb:db:7d:36:82:0d:c3:5c:0c:2b:5c:d2:f2:69:c5:ed:
         c8:93:15:4c:5f:f4:1a:01:f5:21:40:3a:fd:24:9c:5a:4a:a6:
         65:5b:39:fe:04:3d:f7:73:1f:e5:29:f7:b7:3a:1d:40:5e:b3:
         4d:80:93:c0:b3:fa:02:32:2e:62:7e:5c:02:bc:5b:d6:3b:6b:
         63:01:53:73:a0:1f:c7:d9:b6:d4:05:f4:8a:81:8a:12:f4:b2:
         2b:79:cd:ec:bd:8a:ed:67:db:57:ce:5b:a2:d4:bf:61:a1:29:
         d0:86:02:d7:88:0c:d7:4f:9f:d9:a6:13:cc:90:c7:45:61:3d:
         69:1c:6a:71:1b:e4:3c:c1:62:20:8a:7b:f0:71:c4:b2:eb:e3:
         3f:35:10:c1:bc:24:c8:79:3a:83:22:bf:a8:5f:d8:e5:f7:5d:
         59:45:46:18:55:ba:36:06:f6:df:32:43:27:44:54:4a:2c:fc:
         88:d2:cc:e1:bc:b0:24:68:0c:11:77:54:7a:73:4a:65:53:bd:
         0e:75:5e:16:29:d7:21:9d:ee:d2:58:09:b3:db:8f:c7:0d:b7:
         4f:64:6b:7b:68:d0:7f:61:e0:e5:29:98:6b:db:e6:7f:56:4a:
         88:b5:8e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----