Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57c3a6b1-33ae-41ce-ac60-5f548cd8ec0d.roa
File:                     57c3a6b1-33ae-41ce-ac60-5f548cd8ec0d.roa (raw, json)
Hash identifier:          vPN43jGcyMUgavkU0doWEJKUE+vWOGiRPM17xk9++Xg=
Subject key identifier:   00:AA:C7:1B:7E:0E:18:A1:C1:99:F1:86:2F:D2:BD:9F:12:4C:A9:95
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       55F7E892E42782BFCB9AA09C0AB78C2FA82D88
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57c3a6b1-33ae-41ce-ac60-5f548cd8ec0d.roa
Signing time:             Tue 17 Dec 2024 00:00:00 +0000
ROA not before:           Tue 17 Dec 2024 00:00:00 +0000
ROA not after:            Tue 21 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.181.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f7:e8:92:e4:27:82:bf:cb:9a:a0:9c:0a:b7:8c:2f:a8:2d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 17 00:00:00 2024 GMT
            Not After : Jan 21 23:59:59 2025 GMT
        Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8b:19:75:d6:ec:b4:77:cb:91:a1:52:c5:5b:
                    0f:f5:32:ce:da:77:fa:a0:d9:6f:f7:85:25:f3:b6:
                    2f:5e:54:36:51:0d:79:35:9c:f4:a8:9b:a2:bc:78:
                    a1:11:e7:a2:66:4b:bc:6d:14:1e:3e:d1:43:85:23:
                    a3:a7:5a:60:69:b1:8c:95:1a:3c:d5:c2:ee:52:5d:
                    74:fd:99:93:9b:cc:be:16:b2:9a:97:6b:25:48:51:
                    58:7c:eb:3d:c4:f1:b1:b2:bd:91:ba:43:25:7c:fe:
                    89:bb:d9:7d:ed:ce:71:61:da:ab:bf:f4:b2:3f:8d:
                    86:f5:9e:82:db:3a:06:41:62:5e:30:0c:af:a2:3a:
                    93:13:d6:97:bb:40:0d:bd:a9:37:5e:10:1c:8f:d7:
                    ad:76:dc:4e:7d:43:31:30:8b:78:95:b2:58:99:7b:
                    b3:4f:09:5f:55:af:b6:15:f3:0f:f8:b3:ba:eb:c3:
                    55:ad:c3:74:c3:84:57:8d:92:89:dc:b8:1e:1f:43:
                    6f:cf:2b:7e:1a:99:e9:fe:7d:8a:5e:b0:37:d8:06:
                    46:4b:d5:01:c1:56:5d:b8:21:7b:73:ea:15:4a:d8:
                    db:20:0e:06:3a:15:69:70:7a:7c:38:02:ec:cc:fb:
                    40:cf:b6:f5:93:23:31:cb:84:f7:e4:e0:d1:de:5d:
                    6d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AA:C7:1B:7E:0E:18:A1:C1:99:F1:86:2F:D2:BD:9F:12:4C:A9:95
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57c3a6b1-33ae-41ce-ac60-5f548cd8ec0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.181.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:5f:fb:50:70:67:92:20:25:98:88:20:c3:9f:21:ad:fc:a5:
         3b:43:1d:4d:a4:cd:5e:c3:32:07:57:26:c4:7a:c1:dc:f3:bb:
         a4:48:1e:bb:27:a8:33:dc:6e:b6:a5:0c:ca:55:7a:39:52:10:
         f2:72:b6:a4:34:74:4c:5a:a7:9f:f4:fa:e0:87:02:32:af:6d:
         af:0d:3b:b8:4e:73:d4:7f:7f:38:72:df:18:59:03:7e:d6:0b:
         68:49:a5:b7:9f:e4:49:61:d2:39:87:a9:f4:10:b2:e4:0b:fd:
         08:09:ec:33:0f:c2:cf:31:08:60:23:c8:ce:dc:0c:da:77:9e:
         8a:00:2e:98:70:11:33:01:c4:d9:c3:37:2a:fc:c5:3e:6f:2b:
         b6:d0:7d:77:50:b8:a7:61:3e:62:16:d8:b7:df:0e:1a:ce:9c:
         04:5e:57:e4:c9:43:b9:da:cb:ed:7f:26:a1:ae:60:ce:57:79:
         70:cc:9e:af:ca:8b:3a:2d:83:c8:4a:7d:c9:a9:fb:d9:d6:25:
         16:52:58:9a:f2:6a:fc:23:44:02:03:24:76:bc:90:6e:22:88:
         b6:04:ae:1f:c6:11:e1:51:00:76:d6:98:eb:72:f7:77:c0:20:
         e2:34:36:70:41:3e:0b:cd:11:27:ff:1f:f9:9b:d7:51:4e:69:
         b2:1e:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----