Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93717bbd-2280-4d38-95e7-0e0e917814f8.roa
File:                     93717bbd-2280-4d38-95e7-0e0e917814f8.roa (raw, json)
Hash identifier:          NLyAD9um1n/i8/gzDe4dC8+EbP3UVV1YMqcpCQ2b6+k=
Subject key identifier:   62:08:21:B0:39:C3:06:9C:C1:41:CA:7F:9E:04:9D:4D:B8:6C:24:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E1BEBC1D36CAA99E3D04CE4066C4BF192DD9CA3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93717bbd-2280-4d38-95e7-0e0e917814f8.roa
Signing time:             Fri 14 Mar 2025 00:40:16 +0000
ROA not before:           Fri 14 Mar 2025 00:40:16 +0000
ROA not after:            Fri 18 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        68.66.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1b:eb:c1:d3:6c:aa:99:e3:d0:4c:e4:06:6c:4b:f1:92:dd:9c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 14 00:40:16 2025 GMT
            Not After : Apr 18 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2a:f3:f0:7c:ae:41:74:7d:d0:18:4e:e6:5e:
                    b4:88:50:23:02:c1:cc:ad:74:c5:6c:54:62:d7:36:
                    e8:14:d0:d4:54:fa:68:92:81:7c:43:92:b5:da:82:
                    3d:ae:67:16:59:9d:74:3f:62:3c:33:d7:e9:92:09:
                    aa:bb:0e:71:e7:86:e5:d9:0f:90:9a:09:45:c1:63:
                    9e:d0:66:d4:f5:32:e7:fd:d4:bd:73:2c:c4:22:d7:
                    82:49:99:a8:7b:d7:77:de:34:47:48:25:93:ab:87:
                    87:b5:12:82:7d:f5:58:76:7f:9d:fc:59:dd:3c:c1:
                    b6:e1:61:0b:3f:01:25:7a:b1:b2:e4:71:48:a5:d8:
                    ef:71:4d:c9:9e:2a:48:26:85:e1:d0:e4:3c:9e:46:
                    55:52:f9:11:27:24:a4:5e:c2:cc:fc:b8:11:3e:04:
                    41:7c:d8:93:5e:69:f4:f4:34:93:25:fa:60:8b:06:
                    0b:6f:78:96:9f:e0:43:d7:f3:89:e7:09:5a:88:8a:
                    ae:50:50:08:11:d3:bd:60:a9:fb:78:20:90:a0:a5:
                    36:20:0c:b6:85:6b:5c:e3:40:f9:4c:92:91:44:b2:
                    58:ad:7c:7c:66:c5:61:92:e6:f3:a2:d0:2e:0a:6d:
                    60:e2:1c:d7:b2:dd:0e:ae:cc:ea:2e:29:86:2d:0d:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:08:21:B0:39:C3:06:9C:C1:41:CA:7F:9E:04:9D:4D:B8:6C:24:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93717bbd-2280-4d38-95e7-0e0e917814f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:ed:92:57:17:c4:2e:af:74:e7:71:25:09:79:9c:9c:db:ef:
         46:82:bb:d3:01:a5:1a:22:47:39:1c:0b:f3:01:b5:b0:6b:8e:
         b1:60:fa:b7:0d:29:9b:cb:33:ca:c9:8f:76:33:ad:1d:d1:01:
         01:eb:71:59:29:06:4b:50:e6:4f:a9:79:80:13:6a:f1:ab:7a:
         e2:6b:04:e3:1d:b4:65:92:b1:71:38:1f:dd:4d:d2:bd:7f:c9:
         b0:dd:2a:33:f3:2f:25:0c:26:ef:6c:ff:1e:c7:f8:d1:d5:dd:
         a5:39:25:29:06:d2:67:cd:fb:77:88:ac:b2:c0:c9:c4:dc:35:
         e2:09:23:9d:51:58:46:ff:7e:bd:69:9a:6a:ca:83:fd:9c:cc:
         ec:6a:f5:89:ca:1d:02:ab:85:e4:93:05:2a:f3:88:ae:93:4d:
         57:92:75:b1:95:1e:39:09:16:20:8a:94:ba:d5:2f:88:3a:6d:
         d3:45:a8:31:a4:8d:69:8e:03:c9:b1:31:05:7c:2a:c1:2e:5e:
         a2:e7:bd:63:15:9c:97:7f:69:b4:47:13:3a:9b:a7:d0:f2:1d:
         25:1c:35:b5:49:21:d8:ce:0d:07:a8:55:c1:17:07:2b:f5:1a:
         05:c0:64:3e:e2:cf:27:0f:b7:f1:55:43:31:55:62:fa:d4:f7:
         f4:01:63:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----