Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa
File:                     fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa (raw, json)
Hash identifier:          cQIrCqNYd7+h9tNVq0SZtfDZUTm/HGVjj2IvUeev5vA=
Subject key identifier:   E5:E3:BE:F7:1A:77:99:3E:18:A1:B3:F6:8E:BB:A2:56:9D:C5:FA:9D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       717CD5B74BD3F3E9F7202CA84AFCE71016591E51
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa
Signing time:             Fri 07 Mar 2025 00:00:31 +0000
ROA not before:           Fri 07 Mar 2025 00:00:31 +0000
ROA not after:            Fri 11 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        170.221.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7c:d5:b7:4b:d3:f3:e9:f7:20:2c:a8:4a:fc:e7:10:16:59:1e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar  7 00:00:31 2025 GMT
            Not After : Apr 11 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:72:36:f9:f9:eb:f3:77:01:31:65:4b:be:
                    4f:e0:0d:dd:cc:57:85:44:9d:14:cf:7b:8d:5e:b9:
                    a8:18:78:bd:75:d9:c3:d8:47:65:a6:8d:d9:96:18:
                    d5:e1:59:6e:eb:bf:52:42:ff:bc:68:13:ee:f6:66:
                    1b:fc:fa:b8:1b:a7:31:48:e4:ce:b9:a9:41:aa:d8:
                    a9:ac:3d:83:af:e3:8c:c5:54:1c:06:1a:be:40:2d:
                    b4:62:f9:de:1b:f4:69:a3:55:7d:96:22:e2:56:0d:
                    35:95:b8:c9:0e:82:30:7e:fe:f0:22:ea:45:f7:44:
                    8c:ec:ef:e8:b4:bc:3c:f4:0e:f4:04:63:5f:97:af:
                    f3:91:3b:d0:94:e4:2b:11:05:7f:b5:ea:c1:b7:b1:
                    c3:70:61:e0:e6:99:30:de:08:c8:a1:38:07:d9:a2:
                    cc:f9:43:f9:4a:c3:07:75:80:9e:25:bd:13:f7:ba:
                    32:b0:3d:f3:f7:e1:0d:79:64:dc:ca:e2:d6:f6:af:
                    cf:e1:50:5e:3f:e9:c4:58:c6:3e:98:f7:19:70:8e:
                    1b:9c:a0:60:f4:bc:77:44:80:20:59:e0:d0:a4:6d:
                    6c:d7:8f:27:91:ca:2c:f7:9b:f7:06:be:5b:e7:a9:
                    c1:ac:31:7c:9a:dd:26:3f:9b:28:88:74:80:9f:f9:
                    19:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E3:BE:F7:1A:77:99:3E:18:A1:B3:F6:8E:BB:A2:56:9D:C5:FA:9D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.221.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:43:e7:b9:0e:f2:87:32:2e:93:26:b7:30:bd:4d:52:59:8a:
         fe:62:07:27:0c:8b:63:ea:37:95:e1:18:f7:34:03:af:01:07:
         cc:22:94:de:bb:6a:77:d7:61:87:5a:4c:03:46:8b:ef:a9:96:
         63:20:61:fe:d6:97:b8:e9:78:68:ca:11:d1:5f:62:45:f1:9a:
         de:50:aa:f5:7c:9b:cc:8f:f8:80:8d:79:90:55:b7:b7:93:fd:
         c7:f4:d4:4e:93:99:4c:9f:7d:61:f6:b4:a1:9f:ac:29:3f:85:
         bc:a5:91:a6:6f:f4:6d:33:73:4f:ca:6d:74:2b:de:9b:48:6e:
         d2:93:3f:e8:c4:74:c9:f7:36:ce:8b:8c:e6:c4:40:36:bc:86:
         b3:5f:12:54:d2:a7:cd:88:32:80:f2:46:75:fc:08:f2:ec:93:
         74:e8:80:af:c2:41:ea:69:26:39:ce:95:83:b7:33:4b:73:3f:
         66:49:fb:93:72:3c:fb:2c:e1:8e:61:f7:94:49:1f:5d:1b:f3:
         d2:09:89:a0:36:63:e5:e6:99:3f:b8:0d:c2:4a:82:1e:67:03:
         c0:f0:41:89:77:60:f8:c9:28:30:97:3c:4b:dc:3c:7f:43:70:
         75:ba:2b:86:e5:42:88:56:44:74:42:8e:ab:d1:80:ea:ba:69:
         f9:28:a8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----