Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b3bc4e7-5070-4a5b-b2fc-778381232bc5.roa
File:                     8b3bc4e7-5070-4a5b-b2fc-778381232bc5.roa (raw, json)
Hash identifier:          R3wM6ht7gpCnY44hprrA1d0+Dh+nqSH+RxrCnolVty0=
Subject key identifier:   17:8F:ED:0E:AB:A6:19:CF:08:B3:99:78:69:BD:01:22:F1:1D:D8:6E
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       75F359574013502EDF2C41E173E069642716A7F3
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b3bc4e7-5070-4a5b-b2fc-778381232bc5.roa
Signing time:             Tue 04 Mar 2025 23:10:03 +0000
ROA not before:           Tue 04 Mar 2025 23:10:03 +0000
ROA not after:            Tue 08 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f3:59:57:40:13:50:2e:df:2c:41:e1:73:e0:69:64:27:16:a7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Mar  4 23:10:03 2025 GMT
            Not After : Apr  8 23:59:59 2025 GMT
        Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5b:5b:91:48:5c:7b:17:6e:1b:c8:3b:a3:eb:
                    7f:ea:f3:78:76:4f:8e:e8:dd:d2:9a:15:6c:b3:74:
                    35:a8:5f:32:e2:8f:2a:1b:33:b8:a0:5b:45:da:5d:
                    7b:19:85:a6:4c:97:06:d4:0d:d5:dd:68:2c:aa:ca:
                    cd:59:24:21:18:97:36:48:53:ae:18:09:aa:af:9d:
                    03:cd:93:2d:0b:e6:ef:50:25:ec:2b:14:e2:83:9f:
                    ef:5f:ca:4f:ca:e7:10:d9:28:e1:45:ab:91:1e:a7:
                    db:fc:91:ed:ae:30:86:d1:d0:6c:8a:5f:87:dc:f5:
                    0f:5e:72:3c:5d:62:b4:bc:fd:f2:af:47:bb:a6:fc:
                    d7:36:df:13:61:5a:af:10:2f:47:dc:d3:c2:0e:c5:
                    9e:0c:11:07:56:8d:40:e5:52:ed:7b:5e:8d:09:70:
                    23:fd:52:38:58:38:56:09:02:21:8f:ab:d6:98:60:
                    a0:bb:02:56:85:03:f0:7d:be:45:23:0e:96:17:f7:
                    6f:fb:c8:5f:d1:26:14:5f:8b:00:4c:38:1c:0e:45:
                    26:b6:b2:04:f6:d2:4b:49:03:fe:50:ee:f3:7d:23:
                    16:d4:d1:cf:3b:9f:7f:f8:99:44:08:fb:18:47:97:
                    e9:b9:83:f0:8b:95:ff:11:71:fa:1d:14:4f:cb:14:
                    0d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8F:ED:0E:AB:A6:19:CF:08:B3:99:78:69:BD:01:22:F1:1D:D8:6E
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b3bc4e7-5070-4a5b-b2fc-778381232bc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:76:bf:f5:0b:ee:02:2d:d0:15:ac:ff:d4:93:23:8a:68:b2:
         eb:7e:e6:51:c2:50:df:e8:e6:d6:19:e3:0c:55:ab:d9:bf:6e:
         77:d3:5b:68:7e:6b:f6:c8:a5:74:03:b3:59:41:08:13:39:3b:
         35:64:f3:9d:85:c6:2c:6a:ef:05:ea:8c:2c:ec:6a:6d:38:92:
         8d:42:52:08:68:fc:58:bf:89:c3:f4:78:f2:00:f9:1a:eb:e7:
         41:b7:79:57:ae:82:10:dc:73:dd:65:ee:d3:24:f0:a9:20:f1:
         2f:c9:d9:e4:47:d3:ea:82:24:bf:d5:ad:b0:d8:fb:74:e3:a8:
         2d:60:74:24:ec:ad:5a:19:b8:2e:55:ee:43:25:20:47:09:00:
         23:04:67:de:f7:a1:3b:9d:52:61:54:56:4a:e8:78:73:90:ea:
         4d:b6:f3:17:d1:25:5b:12:5b:3e:b7:17:08:1c:af:d9:b4:17:
         f6:3b:7f:75:dd:ba:fe:5f:d4:0e:45:e8:35:f4:19:14:70:dd:
         cc:d1:29:a6:e6:a2:a6:22:8b:e1:87:69:af:dd:22:40:72:27:
         91:2c:88:05:4a:6e:98:8a:3c:9f:c1:e4:d0:bd:12:77:74:75:
         9e:04:53:36:37:a3:c6:d3:67:a4:b0:d6:0f:ee:2d:e1:7d:4e:
         09:52:75:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----