Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa
File:                     8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa (raw, json)
Hash identifier:          tJ1CZ+ZAalJOvr2dS/1y+OrwcLqfXttRXimWGlEO1LM=
Subject key identifier:   3C:F7:59:73:C0:C8:1B:A9:38:57:47:BF:62:9B:87:C1:E1:08:F7:76
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       35A39D9C1CDF66BF3931F56D21E710E958DC2EB7
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa
Signing time:             Sat 29 Mar 2025 00:10:21 +0000
ROA not before:           Sat 29 Mar 2025 00:10:21 +0000
ROA not after:            Sat 03 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.251.246.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a3:9d:9c:1c:df:66:bf:39:31:f5:6d:21:e7:10:e9:58:dc:2e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Mar 29 00:10:21 2025 GMT
            Not After : May  3 23:59:59 2025 GMT
        Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:27:f2:e0:97:0e:35:e2:1b:76:4d:b9:77:
                    a3:5a:a2:1e:9b:2c:67:f3:ef:ff:3e:5f:2d:c8:57:
                    49:2a:d8:46:4d:8e:ce:64:6f:b3:88:96:4b:b5:92:
                    fd:44:fa:85:84:28:7a:7e:dd:40:02:4d:9d:69:7e:
                    c0:e1:a1:3b:02:00:d2:0b:5c:31:a8:0c:39:90:a0:
                    65:ca:54:7d:53:c2:f1:fe:7a:1e:e9:35:35:66:12:
                    6e:26:6d:b6:03:cf:8c:bc:3d:0a:03:4e:5d:5a:03:
                    61:30:df:d0:c7:79:21:e6:e9:03:b2:ad:dd:18:66:
                    b2:0e:ac:69:70:04:4b:77:56:18:a0:a4:dc:c3:52:
                    0a:ea:04:01:4a:94:dc:42:63:3b:e8:d2:a0:53:eb:
                    38:ec:f2:e6:0f:ac:15:f4:9d:f8:89:4f:a4:b2:47:
                    49:0c:82:f3:87:0f:13:b6:2c:42:17:ea:c0:0d:c3:
                    51:7e:b2:2e:92:f2:4d:93:b5:4d:91:77:8f:8b:dd:
                    68:53:4b:1f:6a:fd:5a:0a:c0:d3:9b:1c:ad:ee:4a:
                    62:69:2f:8e:30:d7:49:65:e5:1c:2d:6f:6e:f8:a6:
                    f9:72:80:1d:e4:ae:a8:6c:2b:c2:2e:9b:21:41:de:
                    41:ca:4a:76:18:2b:03:a3:62:16:66:04:ac:79:cc:
                    63:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F7:59:73:C0:C8:1B:A9:38:57:47:BF:62:9B:87:C1:E1:08:F7:76
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:27:bd:47:4a:01:7d:91:0b:a7:41:21:d4:92:4d:be:d1:fe:
         46:3e:21:37:ec:71:72:63:ce:d4:d6:4e:8c:12:ad:7d:2d:07:
         f7:b6:9e:c6:da:6f:c5:e2:38:80:05:a5:44:cc:e3:95:8e:c7:
         c8:d5:79:09:76:a2:58:21:0a:0f:ca:61:ac:25:b9:d2:44:55:
         83:84:3c:a2:c7:28:75:71:01:f9:58:89:02:1c:9d:d5:5e:be:
         c8:84:89:98:8c:da:e4:77:b6:1c:43:49:83:d5:07:b6:37:98:
         e5:8e:26:9f:3d:e7:a5:5c:0b:4f:b3:0b:ad:9d:51:43:82:46:
         3d:30:76:88:6c:bb:bd:ab:d3:a6:c7:5c:3f:44:7d:06:28:77:
         80:b8:bd:80:f4:55:92:c1:53:70:f3:00:cb:b9:e5:5e:6c:be:
         49:f2:94:77:6a:dd:ae:c7:4b:80:bd:1c:93:d7:75:d6:07:2b:
         31:0e:5f:b2:21:6f:e5:1c:f2:e2:41:72:d4:5d:a9:58:be:81:
         b6:45:19:38:f3:4d:0e:75:fd:2d:da:51:82:3e:49:e7:1a:ff:
         cd:8c:ff:fb:3b:a8:4c:0d:88:3d:44:2f:7d:fd:cd:05:25:58:
         42:48:ab:78:41:a4:53:4a:ed:d9:6c:ee:38:9f:4c:73:64:12:
         85:32:42:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----