Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb48584d-19e8-48c5-bd15-8a33b9dc6d49.roa
File:                     cb48584d-19e8-48c5-bd15-8a33b9dc6d49.roa (raw, json)
Hash identifier:          g0vyCQLCwXHSXDXacm/mz9uyhxo1oyeMaTPifzZIYhk=
Subject key identifier:   82:5D:E6:29:58:A2:3B:3E:CA:B5:2F:D2:B9:55:CA:36:9E:E3:ED:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22FDCE2D8B4DD47F3453CA6D42AF1A8C46D1190E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb48584d-19e8-48c5-bd15-8a33b9dc6d49.roa
Signing time:             Tue 04 Mar 2025 17:30:14 +0000
ROA not before:           Tue 04 Mar 2025 17:30:14 +0000
ROA not after:            Tue 08 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.73.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fd:ce:2d:8b:4d:d4:7f:34:53:ca:6d:42:af:1a:8c:46:d1:19:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar  4 17:30:14 2025 GMT
            Not After : Apr  8 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8c:d6:b5:4e:f1:4c:43:21:d8:e2:6e:44:2f:
                    24:84:99:da:a3:c2:8b:b0:33:63:0a:07:e9:3d:e9:
                    ea:13:ad:ea:b0:5d:86:88:97:64:d5:be:56:c7:7e:
                    18:35:cc:d7:9b:f3:f7:41:c5:08:af:ec:b3:42:2e:
                    16:c0:98:e4:9a:33:a5:f1:ac:22:cb:cb:ed:d6:26:
                    63:de:93:1f:ec:47:2a:80:6c:e1:48:2d:c3:f2:f8:
                    e5:ed:44:99:90:e8:0a:83:c1:f1:85:8a:2d:47:9a:
                    c3:9c:c8:62:74:40:91:94:f7:06:01:35:03:f2:0f:
                    54:24:81:2d:c3:83:fd:ed:13:98:11:65:42:5a:97:
                    ff:f6:49:6e:4b:b4:88:44:dd:df:bb:46:ea:63:85:
                    d0:02:ae:be:81:91:8c:6b:51:37:01:2c:3f:47:45:
                    09:44:d9:42:98:4d:35:c7:0b:f9:cd:69:0b:cb:73:
                    db:b0:45:a5:e9:85:bb:1b:41:f6:a5:82:eb:3c:5f:
                    4a:a1:04:93:d4:53:8e:99:06:ca:61:69:33:30:46:
                    f0:8e:5d:e8:d7:a5:91:8a:cf:1b:22:dc:41:6a:a3:
                    a9:c2:1b:b0:95:a8:9b:e4:01:df:6f:ea:5b:0f:c0:
                    fc:5a:7f:68:9f:e2:d4:37:4e:d9:f8:46:f2:48:3b:
                    bb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5D:E6:29:58:A2:3B:3E:CA:B5:2F:D2:B9:55:CA:36:9E:E3:ED:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb48584d-19e8-48c5-bd15-8a33b9dc6d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         53:5f:3a:bd:77:b4:2c:10:d1:94:0e:7e:03:0f:a6:36:0f:8b:
         9d:28:9b:52:97:68:1d:ad:bd:55:8a:87:38:b7:8e:b7:f8:e1:
         a1:de:7e:fc:87:ae:dd:e7:28:2e:40:8f:10:90:b2:ab:42:af:
         c8:4b:45:c7:64:da:91:d2:af:39:a4:54:d6:ac:d8:a2:ed:e1:
         e7:ba:4d:a9:c4:5f:07:46:33:3a:e5:c9:0c:22:14:fe:9b:59:
         f0:84:95:d2:5d:aa:20:d4:9e:45:1e:5e:24:dd:7f:8c:a6:8c:
         bc:fd:88:68:c6:11:74:a7:61:0e:02:e4:8e:15:1c:cf:6d:85:
         b3:ee:a6:55:44:ce:d8:47:f3:04:30:07:dd:0f:34:46:b3:d6:
         32:61:ce:ec:6c:e9:3d:db:0b:38:9c:b0:d2:b3:ee:dc:54:5b:
         9a:a7:28:f0:a0:aa:b2:14:ab:5d:b0:8e:96:65:1a:bc:24:20:
         c8:a4:50:af:34:81:81:8f:75:f2:a6:1f:51:65:47:26:70:90:
         d4:29:eb:5b:aa:20:b6:92:cb:16:a8:79:0b:20:9f:6f:3e:b2:
         95:dd:0e:56:68:23:93:2d:18:0c:0f:18:f4:d1:74:82:c8:54:
         b4:90:ef:c9:dd:f4:ae:51:f6:45:ba:6d:e8:f3:42:38:a8:04:
         28:10:2a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----