Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac5ac786-2e21-4dae-8eed-a9b2ff299a3c.roa
File:                     ac5ac786-2e21-4dae-8eed-a9b2ff299a3c.roa (raw, json)
Hash identifier:          /B9kaF7zSOCgaBT+A+p46OY5Rbet3pwE78dbjoN052o=
Subject key identifier:   8A:28:F4:0E:25:7F:C6:E7:39:85:87:0A:6F:F2:8D:6A:5B:A6:5A:89
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1293ED2CD9A086A144281DE8B3B4DED6D25F9426
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac5ac786-2e21-4dae-8eed-a9b2ff299a3c.roa
Signing time:             Mon 24 Mar 2025 15:42:07 +0000
ROA not before:           Mon 24 Mar 2025 15:42:07 +0000
ROA not after:            Mon 28 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.52.168.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:93:ed:2c:d9:a0:86:a1:44:28:1d:e8:b3:b4:de:d6:d2:5f:94:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 24 15:42:07 2025 GMT
            Not After : Apr 28 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:1f:9a:82:62:19:8e:6a:ec:76:93:68:8f:
                    3a:f5:58:d4:c4:66:d8:08:51:60:15:79:c9:b0:30:
                    b0:45:66:58:66:58:bb:a2:a6:65:ee:fa:82:76:35:
                    96:fb:ee:35:8d:42:6b:ce:44:83:7f:90:30:96:0c:
                    e7:c6:a5:3f:38:86:83:ba:f5:a8:5f:72:5c:eb:9c:
                    de:7f:f2:a6:e8:3a:d2:8e:82:4e:58:ed:59:a8:97:
                    42:e9:2a:da:a6:09:6c:b5:94:ef:42:6c:70:f0:11:
                    01:5b:43:1a:6b:2c:aa:91:ac:a3:98:18:0e:3d:a8:
                    b7:1a:d5:c3:4a:db:73:d5:59:e2:7c:ac:1c:ef:3f:
                    d7:f4:d1:5b:8d:82:19:46:dc:48:fa:ad:66:59:2c:
                    b4:f5:d1:54:0f:f1:1f:5a:58:8b:16:21:7e:ea:41:
                    e2:28:89:6c:1a:25:a4:3c:9c:f3:70:6d:20:50:c3:
                    9a:a2:83:49:7e:e6:fc:9e:a4:c6:17:2f:2b:83:2f:
                    67:75:49:56:59:23:53:f5:23:92:dc:ea:1f:9e:34:
                    ed:d7:f4:8e:be:d7:9e:62:01:94:e8:49:0c:b8:73:
                    6b:e2:8d:27:d0:f9:8d:09:ac:9a:2a:e7:be:f8:e3:
                    bd:87:47:5b:59:af:cf:9c:18:8b:2a:cc:8d:70:9d:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:28:F4:0E:25:7F:C6:E7:39:85:87:0A:6F:F2:8D:6A:5B:A6:5A:89
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac5ac786-2e21-4dae-8eed-a9b2ff299a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:15:e3:b9:8e:0f:75:b6:2a:52:ac:53:12:c2:e4:c5:15:24:
         b3:29:f7:a9:ee:be:f2:fd:43:92:56:ec:8a:3e:14:1b:3a:21:
         59:d5:1e:b2:60:92:75:8b:ae:84:ae:c5:d5:b7:14:39:c6:2c:
         5c:a0:a1:a7:f0:ff:ac:94:be:43:dc:77:36:53:e5:f9:4f:8d:
         89:b7:f5:65:59:67:df:63:8e:91:1f:74:da:fd:96:e5:fe:5f:
         a7:45:2c:48:b9:15:e8:77:2c:44:86:6f:f8:f0:96:b3:e4:31:
         11:66:0d:00:e6:4d:68:6b:20:a3:52:35:c7:89:8b:91:a2:a3:
         c2:95:e7:78:85:c8:72:22:e0:45:21:6d:9c:6c:fb:45:51:06:
         2e:a7:69:0a:ea:f2:c3:26:a6:6d:99:30:57:8c:52:09:ec:6c:
         53:25:e6:56:24:99:33:9f:35:ed:3d:e4:24:3f:45:83:6c:5e:
         1a:1a:63:cd:d3:2a:b9:b6:a3:cf:3d:e2:8e:2c:7f:1f:fd:9a:
         11:e7:1b:21:87:e6:8d:7a:58:e5:ba:a1:86:84:47:b0:5a:42:
         ed:71:6b:a4:58:91:9a:ae:3c:00:f6:fb:cc:34:cb:9e:21:a3:
         41:32:3d:bf:a0:cf:b4:d6:d7:8c:d4:ad:e6:3f:8c:d6:07:80:
         ec:d1:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----