Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b727064c-07d3-4be3-87a1-dd3468e18230.roa
File:                     b727064c-07d3-4be3-87a1-dd3468e18230.roa (raw, json)
Hash identifier:          InJYP2s4it96aR1Js5SYilVh73e7AG7PHmGjvgwIraU=
Subject key identifier:   65:B2:3D:78:37:9D:D1:45:75:2C:49:23:BF:0C:37:A9:F6:81:35:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63E6B8495C43660358CF33AF361EADDC418E859C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b727064c-07d3-4be3-87a1-dd3468e18230.roa
Signing time:             Wed 12 Mar 2025 00:22:10 +0000
ROA not before:           Wed 12 Mar 2025 00:22:10 +0000
ROA not after:            Wed 16 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        194.148.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e6:b8:49:5c:43:66:03:58:cf:33:af:36:1e:ad:dc:41:8e:85:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 12 00:22:10 2025 GMT
            Not After : Apr 16 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:88:cc:19:ee:ec:22:4f:d7:65:58:14:42:
                    8e:65:62:50:12:ef:f1:d6:fb:93:7a:b1:57:f3:87:
                    ca:65:6f:fb:b1:3c:3e:74:24:cc:2f:54:d6:e7:11:
                    2e:1d:47:c3:7f:31:54:cf:1c:7b:d8:9d:e5:e6:4f:
                    ca:a7:ef:27:1a:1c:d2:04:a7:fb:a2:60:4a:e3:3e:
                    4c:d7:86:d8:d1:61:1b:79:57:65:56:47:32:08:5e:
                    14:e6:25:b1:42:3f:a7:fa:57:26:1f:05:09:51:2a:
                    40:c8:b1:fc:b5:6a:42:49:90:ad:c6:24:4e:d2:da:
                    a8:be:43:78:89:5e:b3:22:b8:f5:fa:0f:ce:1f:98:
                    eb:65:04:d7:12:2f:33:6a:a7:20:6c:65:9c:9a:0c:
                    d6:9d:53:fe:14:15:64:ac:01:5d:fc:87:2e:50:21:
                    eb:ae:0e:a7:21:07:5d:e8:4a:07:48:bf:91:d5:6f:
                    64:af:00:e8:c7:c7:72:fe:c5:7a:99:ca:59:c0:e1:
                    86:af:54:91:d0:0f:bb:dc:ea:30:73:98:1b:ef:41:
                    67:50:50:37:bc:76:30:0d:88:ed:99:bd:d5:6c:e5:
                    fa:f9:4f:61:6c:48:c9:71:3c:47:f9:70:4b:2c:aa:
                    e8:01:5a:04:e5:f0:1d:a7:78:e5:98:52:0a:d1:91:
                    4f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B2:3D:78:37:9D:D1:45:75:2C:49:23:BF:0C:37:A9:F6:81:35:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b727064c-07d3-4be3-87a1-dd3468e18230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.148.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         56:7d:2c:5a:16:bf:25:a7:07:19:7d:06:d4:b5:a8:d5:01:40:
         20:8d:d5:7f:be:1d:29:86:cc:f6:90:75:71:c5:e8:6f:44:bc:
         a8:bb:ea:d0:39:fa:03:01:0d:c7:31:ee:6d:8f:19:85:ac:5f:
         94:e0:60:60:f8:c4:ce:70:e7:97:27:c8:c4:dc:93:ab:10:66:
         ad:c6:b0:a6:34:74:e5:ad:0e:61:11:c8:eb:7b:2e:4e:29:ea:
         90:58:5a:dd:89:ea:5d:21:94:28:41:8d:b6:1e:12:89:1f:41:
         4f:5c:65:c0:fa:c7:fd:f9:3e:09:64:37:6f:58:85:a3:15:13:
         40:f3:de:ae:e4:6a:a2:2e:c9:ca:f8:a6:04:3d:27:71:a6:25:
         45:5e:df:16:0d:e7:f8:0b:f4:ba:26:0d:8d:09:29:67:57:99:
         40:13:3e:f8:d8:c2:d7:04:fd:c6:16:9b:76:49:6c:84:67:fa:
         d8:77:a6:44:90:33:3c:eb:bb:f3:90:15:c8:f8:e3:db:34:26:
         45:3a:c8:06:52:33:3c:d0:d5:69:e4:85:8e:74:73:3e:a2:43:
         e3:c7:35:76:00:46:be:ad:1c:09:41:fd:9e:59:ed:2c:a4:e5:
         b7:e4:5b:5d:d8:54:b5:cc:44:c5:a8:85:75:ff:08:99:ce:7b:
         89:e9:2e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----