Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2a7753-c05a-4a6a-a1b0-65b165af464f.roa
File:                     dd2a7753-c05a-4a6a-a1b0-65b165af464f.roa (raw, json)
Hash identifier:          T71SL0KS2BqPeZODnZesebWcY40zV8lZT000TjyL/Ms=
Subject key identifier:   89:61:A0:A8:57:B5:98:50:6E:63:89:36:AA:D4:3A:3C:C2:D6:29:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       088C06EE85831E551D07A84A916AB1DFA2FBD60C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2a7753-c05a-4a6a-a1b0-65b165af464f.roa
Signing time:             Mon 24 Mar 2025 15:50:21 +0000
ROA not before:           Mon 24 Mar 2025 15:50:21 +0000
ROA not after:            Mon 28 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.0.244.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8c:06:ee:85:83:1e:55:1d:07:a8:4a:91:6a:b1:df:a2:fb:d6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 24 15:50:21 2025 GMT
            Not After : Apr 28 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fb:dd:b5:13:27:99:59:5b:4b:50:3e:28:e8:
                    67:c0:94:d8:a5:55:d0:52:be:12:ec:0a:3b:09:d6:
                    6e:66:e5:05:54:6d:32:b1:78:d0:55:8b:e4:a1:55:
                    fc:fe:8e:b8:99:b5:9f:b0:4e:0d:3c:93:87:7e:94:
                    bf:10:a4:33:45:a3:99:e8:19:41:70:6c:5f:4e:84:
                    13:f7:66:a4:37:2f:a9:03:55:d4:e9:1e:19:a6:82:
                    8e:90:64:c9:50:be:9e:47:3b:86:31:f2:79:b3:bd:
                    f0:2f:53:c0:b2:5a:a2:2e:90:cd:aa:c1:bf:50:69:
                    dd:48:5e:f2:3a:b6:05:c5:a1:8b:67:b2:71:d5:6a:
                    21:fa:21:3d:c2:fa:cc:79:fc:8d:ce:ee:c0:3c:04:
                    1a:a2:67:8e:35:d1:a0:78:e9:fa:0e:3f:ac:56:90:
                    0c:1f:5d:b9:98:d1:e2:18:12:e0:a6:b1:f5:c3:ce:
                    f5:59:ac:83:ec:f4:47:85:15:b6:70:73:58:e3:22:
                    5e:27:b6:4a:4e:7d:66:2f:7f:39:42:4f:7e:d4:b9:
                    bb:b6:02:74:b8:87:8d:ae:2e:e4:b9:e3:16:12:01:
                    4d:07:80:32:20:5d:f5:9f:bf:9c:00:b6:5a:ad:21:
                    ae:b7:75:09:fb:05:fd:66:80:be:f4:ea:bf:67:53:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:61:A0:A8:57:B5:98:50:6E:63:89:36:AA:D4:3A:3C:C2:D6:29:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2a7753-c05a-4a6a-a1b0-65b165af464f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.0.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:2c:3f:bd:a5:57:84:87:07:f2:63:bd:62:40:d4:47:85:84:
         e1:a1:08:2b:d1:98:46:7f:32:b9:20:c4:de:5c:96:0e:9b:fd:
         2e:31:e4:57:43:55:36:6f:4e:16:0c:f6:b0:76:89:38:8d:12:
         35:20:f6:49:51:05:f3:9f:e1:c8:9f:9a:f7:9b:97:f6:c2:91:
         c6:ee:e7:4e:2e:38:42:18:f1:66:10:81:36:ce:ee:52:29:38:
         1b:5a:7b:4e:ce:93:2d:3d:e3:7c:72:3d:0e:c0:25:43:51:78:
         a3:f0:20:ee:61:07:19:a2:ee:e8:77:8e:1e:40:e4:bb:2e:04:
         4f:8c:c2:04:46:7b:56:86:83:d3:f7:7a:fd:6a:87:46:a7:8e:
         c4:9f:22:66:02:e4:c7:c8:26:a5:44:42:31:ef:c5:6f:68:f8:
         e2:4d:b8:0c:f4:14:0f:6e:c7:d3:89:0f:be:f9:47:c1:d7:da:
         26:f7:54:cd:2b:79:79:34:e4:12:c1:93:f3:7a:f2:a4:f6:71:
         b1:2c:41:4d:be:b9:05:f8:15:77:da:c0:4c:2a:16:a9:c6:45:
         a5:51:f2:d5:cf:f3:eb:b4:c9:37:54:e2:3d:7a:d9:0b:b9:74:
         25:62:86:57:f3:8b:c7:89:2f:86:65:7a:32:12:47:d4:0b:36:
         bb:67:00:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----