Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/26530834-4a85-45f4-8600-310dadf4036d.roa
File:                     26530834-4a85-45f4-8600-310dadf4036d.roa (raw, json)
Hash identifier:          TKo73dx3Q6otBgTCdegcsbFGcD0Wwbfx4E4M48nLAL4=
Subject key identifier:   7A:B6:95:B6:B2:FC:6F:8A:C5:28:19:44:08:5D:DF:52:D5:C1:54:C1
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       389F90CC641A58B4C0255BE3B5EC169FE77AFA97
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/26530834-4a85-45f4-8600-310dadf4036d.roa
Signing time:             Tue 25 Mar 2025 18:00:17 +0000
ROA not before:           Tue 25 Mar 2025 18:00:17 +0000
ROA not after:            Tue 29 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9f:90:cc:64:1a:58:b4:c0:25:5b:e3:b5:ec:16:9f:e7:7a:fa:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Mar 25 18:00:17 2025 GMT
            Not After : Apr 29 23:59:59 2025 GMT
        Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:23:df:1b:a3:50:93:2c:a2:01:c5:16:6e:cd:
                    41:2e:05:f8:1d:aa:37:aa:39:18:02:48:65:f2:26:
                    a8:a3:0d:cc:f3:c2:49:72:fa:2f:aa:f8:1e:94:38:
                    71:d2:d4:53:a8:8a:22:e8:9a:74:bf:f0:47:4c:9f:
                    6d:34:25:5e:9f:25:c1:ca:ae:e1:b8:63:ee:2a:2d:
                    6f:69:63:c1:32:f2:93:02:d4:a5:13:97:80:62:7e:
                    d6:78:0f:56:bb:3a:c6:f7:26:fa:98:98:55:b5:55:
                    2d:b4:fc:7f:62:5b:08:4a:a7:8c:71:0a:22:0d:29:
                    ab:7b:dc:ab:f7:61:78:e9:66:e6:ec:02:1b:08:6a:
                    6b:6d:3b:62:1a:0a:71:15:5c:c3:5e:57:57:7c:49:
                    66:07:d6:25:4e:36:48:db:5f:77:3f:c8:36:ce:01:
                    cd:a9:5c:97:fb:4f:7c:56:04:3f:12:e6:76:74:5d:
                    21:c9:54:9f:7f:aa:c0:bd:8b:2c:eb:33:dc:fd:ab:
                    df:e5:a8:6f:88:a7:42:bf:f1:8e:67:79:04:f2:1f:
                    19:cc:f4:5c:e4:7b:de:7b:ea:7a:d5:68:d8:5b:c4:
                    fb:5d:76:70:73:b3:94:e1:a0:a4:15:8f:6a:72:24:
                    82:49:14:ec:eb:f0:31:bb:3b:04:c8:eb:d9:37:86:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B6:95:B6:B2:FC:6F:8A:C5:28:19:44:08:5D:DF:52:D5:C1:54:C1
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/26530834-4a85-45f4-8600-310dadf4036d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:19:ef:c0:47:fb:ae:38:62:b2:e0:89:00:0b:24:15:5a:95:
         a8:d2:38:64:52:04:18:c0:fb:8b:14:53:0d:0b:4c:0b:2f:5f:
         07:ca:8b:85:9c:d3:b3:78:28:88:ac:98:2c:aa:61:e9:2d:b7:
         d9:33:69:84:6a:b5:27:ff:72:aa:18:40:93:ef:d5:45:5d:8c:
         a1:cb:6e:4d:4b:08:a5:80:9a:6b:de:a4:90:09:e2:24:e4:1c:
         80:82:56:63:f9:34:3b:1c:50:9b:c8:fc:2d:c2:fa:2a:6c:eb:
         87:3d:4a:7e:3c:59:3b:01:03:02:61:31:b6:45:21:db:c1:bb:
         38:54:b5:1f:a8:c8:54:dc:3b:0d:68:0d:81:e1:d8:99:5a:13:
         b2:86:b2:0c:7c:9d:eb:f8:c2:49:a9:af:1d:15:a4:0b:c7:43:
         54:35:ef:e3:fb:f1:ae:a3:3e:ba:0a:11:ae:7a:bb:9d:1d:60:
         81:f8:44:eb:ed:2a:eb:7f:e3:19:28:82:4b:e5:c2:8e:0d:d4:
         60:d4:41:1a:8f:32:4a:c5:c4:c0:67:40:7c:5b:75:a0:5a:81:
         08:07:90:c3:44:c9:b2:be:fb:2f:96:22:f6:1c:25:f7:ea:01:
         c9:42:b4:5d:0d:20:4c:e4:cf:2b:d7:3d:b6:fd:7a:fe:71:5f:
         3a:1a:fe:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----