Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
File:                     e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa (raw, json)
Hash identifier:          328NYvCZP0IgM3bDRH0f3FvT2yf2hC7PdCxbFPJJEtc=
Subject key identifier:   9F:34:18:DC:C9:09:A3:18:E5:48:BC:D5:2D:08:E6:19:62:D2:EF:8A
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       09D30D6850E0BF42FE2C604BF04CBA9B0169E4CA
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
Signing time:             Tue 04 Mar 2025 18:20:04 +0000
ROA not before:           Tue 04 Mar 2025 18:20:04 +0000
ROA not after:            Tue 08 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d3:0d:68:50:e0:bf:42:fe:2c:60:4b:f0:4c:ba:9b:01:69:e4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Mar  4 18:20:04 2025 GMT
            Not After : Apr  8 23:59:59 2025 GMT
        Subject: CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:43:cd:3a:73:b9:4e:e2:91:fe:f1:8a:7d:4c:
                    bb:3f:73:ac:7f:a5:85:c2:e6:1e:9a:75:81:44:24:
                    7c:63:96:ab:63:3b:fd:9f:8f:e8:ed:30:2d:9c:3b:
                    1f:dd:53:82:3d:df:80:c4:a1:76:46:bc:a4:61:dc:
                    4f:d1:c8:fc:9b:85:f1:32:99:15:bc:1f:f8:cb:e6:
                    d7:4f:1e:70:9b:18:24:1a:bd:4d:98:0b:ab:64:0c:
                    9f:60:cc:c7:cd:f1:17:30:89:12:bf:20:32:58:ed:
                    c0:0f:97:b8:ca:50:dc:95:09:f4:30:eb:15:3c:cc:
                    ae:10:ad:f9:de:40:a9:13:39:89:20:92:65:b7:df:
                    e7:9c:c5:ff:49:38:57:b1:68:eb:4a:9f:a0:9f:d5:
                    d0:db:be:01:ae:8c:37:0a:5a:f6:da:61:cc:03:05:
                    20:f4:36:03:e7:c8:28:96:5c:4a:3e:9f:8e:f3:cd:
                    73:52:8f:c0:4b:9e:fb:cc:9f:6d:e3:35:bf:02:13:
                    60:6d:b2:c1:cc:3b:22:7f:d8:d5:f7:1c:8b:63:81:
                    a6:28:91:dd:f0:73:8c:49:f3:fe:ca:27:b0:9b:48:
                    6f:d1:3f:07:ba:a3:3c:4a:cb:b2:7d:ff:0e:08:8a:
                    bb:51:1b:26:66:76:33:a6:6d:ee:4f:84:3f:e6:e5:
                    da:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:34:18:DC:C9:09:A3:18:E5:48:BC:D5:2D:08:E6:19:62:D2:EF:8A
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7b:ec:c8:9d:54:bd:96:b9:ad:60:c7:03:97:9a:97:06:44:83:
         03:15:c5:77:2a:d8:80:ad:8e:d7:86:a5:9d:38:36:95:d8:80:
         39:3b:ca:6b:5e:ad:32:42:11:cd:5e:bb:a8:2f:23:c1:21:8e:
         06:98:1f:b8:04:c5:ed:72:76:42:e8:8b:fa:fc:3c:a8:23:fc:
         6e:f1:b9:77:0a:c1:43:08:26:8c:43:7a:40:51:0c:e5:fb:6c:
         19:2d:80:b9:99:54:57:92:5d:ee:ce:64:64:1c:8f:f0:98:9d:
         80:4b:69:ee:0f:6c:fa:69:b0:dd:d7:8b:76:0a:8c:51:a6:d8:
         78:3a:82:f4:d5:81:56:92:e1:8f:b9:0c:dc:75:b3:e2:03:8c:
         36:dc:b6:69:b8:64:f2:64:69:ad:dd:1e:83:20:98:24:2d:14:
         3e:cd:4d:f2:58:b4:fc:f9:67:16:51:8a:4a:eb:22:0e:de:bb:
         81:61:22:e5:ff:64:8e:a4:b6:22:7d:54:3c:b3:fc:ba:d2:76:
         b4:86:b7:63:21:fa:cb:87:bc:de:4c:95:69:80:15:7f:78:59:
         29:1f:45:bb:45:f8:e9:dd:73:59:66:0b:cf:b7:55:f3:1e:9f:
         3c:f3:5e:ed:95:cf:78:05:66:28:f5:4c:3a:1e:81:92:3c:57:
         b4:f8:44:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----